$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: sIl3qojpdX6D2SHXwJzRVBNKr4NyBLTkdrN/eX4tDTc= Subject key identifier: 9D:60:7A:A3:B5:6A:FE:55:E9:78:76:8C:BC:F6:18:29:E6:61:CE:40 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 0877 Signing time: Thu 16 Apr 2026 20:31:08 +0000 Manifest this update: Thu 16 Apr 2026 20:31:07 +0000 Manifest next update: Thu 23 Apr 2026 20:31:07 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: iaJSe8xw0d64rild5d70z0gMHf42fwO5SH4wOAF1vCw=) 2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=) 3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Apr 16 20:31:07 2026 GMT Not After : Apr 23 20:31:07 2026 GMT Subject: CN=69e1470b-8b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:53:fd:4f:b9:dc:fd:1e:00:9e:55:2f:18: ed:ea:1f:3d:7c:64:41:25:4b:eb:db:bd:b3:22:43: aa:3a:c2:c3:28:bf:c3:02:67:6c:b8:27:7c:44:03: 7e:df:a5:27:2d:99:87:1b:2d:1e:b4:fa:4e:50:c7: 95:a0:cd:4c:45:4e:94:9f:d3:8a:7c:f8:1c:19:c9: d6:54:b9:28:92:b8:f6:09:99:c7:9e:d1:0f:f5:70: 8e:53:69:6c:1d:24:ae:43:0e:67:5a:5d:9d:40:ac: e9:6b:74:c3:b7:df:f2:34:bb:f4:a6:44:8b:d7:30: 6d:92:3c:a0:47:6c:5a:b3:6e:4d:25:d8:e8:a1:54: 0d:4e:9f:57:aa:55:35:68:78:48:ce:35:19:c8:42: fd:6e:7f:9d:af:c5:98:02:6e:fd:42:33:b2:9b:2d: 3c:7a:b5:1f:90:18:ec:7d:44:1f:31:68:89:c9:5e: 57:e2:79:4c:10:54:cc:22:d1:12:26:77:f4:24:54: cb:0e:23:2b:35:92:eb:2f:c2:a2:95:4c:56:33:a2: a4:4a:af:f6:fe:47:d1:c8:ac:f4:8a:bb:07:3b:56: e8:cd:b2:b3:3e:ad:fa:a3:0f:be:d6:d4:ee:bb:08: 7b:69:02:02:0d:ca:57:b9:f2:39:51:34:16:db:1a: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:60:7A:A3:B5:6A:FE:55:E9:78:76:8C:BC:F6:18:29:E6:61:CE:40 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cd:5a:fb:2f:de:dd:08:5c:53:96:56:1f:21:3f:4f:45:cd: df:28:b0:d2:9f:c1:6d:d4:4f:2c:2a:05:e0:66:39:37:87:77: 88:f6:19:90:35:53:c3:a6:ff:df:67:e5:ce:97:54:59:7f:2d: 8b:11:30:7d:ef:9b:6a:f9:78:17:9f:e4:cf:0b:ec:9f:b9:b0: ba:42:0a:89:45:9e:65:7b:68:6d:37:f5:5b:38:c7:f3:97:61: c0:4d:78:6d:f7:f0:65:34:d0:6b:17:c1:2e:dd:5a:8a:fe:0e: 93:91:ae:30:5d:ee:b7:72:2a:8c:ea:d0:53:e1:44:29:63:d1: 6a:ba:a3:1e:e9:5b:42:94:c9:7b:d7:d3:8b:65:1f:3b:f8:d4: 9d:8b:3e:8a:57:4b:a0:fc:8c:ab:e0:89:83:74:87:a7:17:3f: 7e:2e:a1:6e:30:39:19:d6:b8:fe:17:61:30:8c:b4:65:e5:ce: f7:1b:ee:b8:02:c6:0e:84:f3:3d:50:35:5c:be:42:88:d3:74: ed:21:c0:00:e0:fa:8f:81:d8:e7:3d:f3:17:df:af:c8:65:d9: 76:9b:99:6a:32:47:5b:de:1f:65:ea:58:ea:9c:19:22:48:0d: 17:b6:a7:a9:00:60:07:46:df:f3:aa:4a:dc:74:29:95:75:8c: 6f:2a:f7:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjYwNDE2MjAzMTA3WhcNMjYwNDIzMjAzMTA3WjAYMRYwFAYD VQQDEw02OWUxNDcwYi04YjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpxT/U+53P0eAJ5VLxjt6h89fGRBJUvr272zIkOqOsLDKL/DAmdsuCd8RAN+ 36UnLZmHGy0etPpOUMeVoM1MRU6Un9OKfPgcGcnWVLkokrj2CZnHntEP9XCOU2ls HSSuQw5nWl2dQKzpa3TDt9/yNLv0pkSL1zBtkjygR2xas25NJdjooVQNTp9XqlU1 aHhIzjUZyEL9bn+dr8WYAm79QjOymy08erUfkBjsfUQfMWiJyV5X4nlMEFTMItES Jnf0JFTLDiMrNZLrL8KilUxWM6KkSq/2/kfRyKz0irsHO1bozbKzPq36ow++1tTu uwh7aQICDcpXufI5UTQW2xpS5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1geqO1 av5V6Xh2jLz2GCnmYc5AMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAec1a+y/e3QhcU5ZWHyE/T0XN3yiw0p/BbdRPLCoF4GY5N4d3iPYZkDVTw6b/ 32flzpdUWX8tixEwfe+bavl4F5/kzwvsn7mwukIKiUWeZXtobTf1WzjH85dhwE14 bffwZTTQaxfBLt1aiv4Ok5GuMF3ut3IqjOrQU+FEKWPRarqjHulbQpTJe9fTi2Uf O/jUnYs+ildLoPyMq+CJg3SHpxc/fi6hbjA5Gda4/hdhMIy0ZeXO9xvuuALGDoTz PVA1XL5CiNN07SHAAOD6j4HY5z3zF9+vyGXZdpuZajJHW94fZepY6pwZIkgNF7an qQBgB0bf86pK3HQplXWMbyr39w== -----END CERTIFICATE-----Generated at Fri Apr 17 06:21:47 2026 by rpki-client