$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: 16eg7YgxOL5E17WA/p0VYC2N3/YHtUrKtQmNgnl4s+4= Subject key identifier: 32:8E:DD:1F:A0:46:24:09:DC:C9:E5:EB:5A:39:62:F8:12:BC:1D:2F Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 0440 Signing time: Sun 01 Mar 2026 01:02:54 +0000 Manifest this update: Sun 01 Mar 2026 01:02:54 +0000 Manifest next update: Sun 08 Mar 2026 01:02:54 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: xURPkfeeuc2qdLkP6Q6+gDLzP9E5ZUslLw3hu1EyMm0=) 2: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: XGuuKVGIEltroOkaLIfkXvo4+Qd8e1UxzERGE1Xa7EM=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: nBxVvzmtBqkJjIM89kDyeNDRTPleOjC1xfsXd7rUY30=) 4: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Mar 1 01:02:54 2026 GMT Not After : Mar 8 01:02:54 2026 GMT Subject: CN=69a3903e-f0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:26:27:75:70:0e:04:21:00:b8:19:67:0d: fc:a6:1f:39:b4:09:a5:15:0f:d0:66:2a:94:63:1f: 42:30:de:6a:cf:ed:8d:29:40:1f:e3:c3:35:47:18: 63:c9:4d:f1:36:75:65:0f:7f:be:97:5b:6c:28:58: 09:18:f5:3e:00:48:da:27:5e:6e:fa:95:94:ca:b8: e2:e3:8f:55:d2:3e:cb:bc:30:35:d8:1a:dc:1d:5f: 15:b4:91:7c:e2:83:e6:b2:9e:e0:29:45:88:78:29: ea:78:e4:5e:47:57:c0:be:cd:a5:f8:10:7a:a8:3a: ac:0e:f0:dc:ff:be:19:4a:35:3e:f3:f9:69:2c:7a: 9c:9f:b7:70:ae:2f:7e:19:41:a4:ab:1c:92:c9:47: 6a:26:fb:d4:ff:5a:8e:8e:5a:6f:98:34:f0:d3:ce: 85:6a:12:4d:1f:c9:24:af:45:a4:69:11:98:a4:c5: 3b:b2:96:03:d5:90:4f:68:b7:40:40:51:f8:03:b8: 07:5a:c6:fc:7e:e4:98:0e:c4:c1:3a:4d:3e:91:e1: 78:d3:45:88:7f:ca:cd:f9:61:30:92:16:4b:31:04: 41:d6:c1:eb:a8:86:4c:95:54:e7:96:0d:17:9b:93: 54:17:e6:3c:6a:32:62:17:45:f4:5f:be:20:3a:a7: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:DD:1F:A0:46:24:09:DC:C9:E5:EB:5A:39:62:F8:12:BC:1D:2F X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0c:47:89:d3:cc:36:b1:c8:f2:2c:f0:a9:a2:87:59:ba:20: 07:8c:8f:58:92:fd:a9:65:47:02:a5:ba:6c:d8:ed:ea:6a:08: 35:c5:c2:c3:79:3e:0b:40:b5:b9:e9:7a:6e:92:1d:fd:2d:28: 3f:25:63:f1:ee:f6:e7:fb:91:87:56:c2:21:39:85:ec:f0:9d: dc:53:3f:1a:bd:13:f9:05:86:a1:b9:ab:58:c0:a7:b7:7e:4c: ec:b5:3c:d2:01:1e:f4:56:76:f6:af:f4:13:00:20:bd:57:8e: 00:8b:b7:d3:4d:d4:0b:af:53:7a:5b:4b:94:d9:00:a1:d9:f6: 10:d6:8e:75:00:50:7d:6e:f4:67:40:bb:d0:cb:80:9a:e8:ae: 01:15:f2:87:a7:4b:da:26:ee:c7:4f:da:b5:cb:5f:a6:98:2d: e1:46:c6:47:e3:14:55:8f:5e:b1:f1:c3:8d:45:d8:4a:15:f3: 10:ab:86:24:43:c0:f8:e2:9a:b3:e2:b4:bb:1e:ae:ca:4c:b8: f3:68:ad:de:64:63:c0:27:f1:db:c3:c2:6e:cd:a4:31:7c:2c: 1c:47:9d:c0:92:8a:81:65:51:e5:c4:4a:57:fd:d0:61:42:04: 6a:41:e2:bf:b1:b9:ef:70:a4:12:65:44:7d:61:ff:a3:97:5d: 3d:87:d4:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwMzAxMDEwMjU0WhcNMjYwMzA4MDEwMjU0WjAYMRYwFAYD VQQDDA02OWEzOTAzZS1mMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFomJ3VwDgQhALgZZw38ph85tAmlFQ/QZiqUYx9CMN5qz+2NKUAf48M1Rxhj yU3xNnVlD3++l1tsKFgJGPU+AEjaJ15u+pWUyrji449V0j7LvDA12BrcHV8VtJF8 4oPmsp7gKUWIeCnqeOReR1fAvs2l+BB6qDqsDvDc/74ZSjU+8/lpLHqcn7dwri9+ GUGkqxySyUdqJvvU/1qOjlpvmDTw086FahJNH8kkr0WkaRGYpMU7spYD1ZBPaLdA QFH4A7gHWsb8fuSYDsTBOk0+keF400WIf8rN+WEwkhZLMQRB1sHrqIZMlVTnlg0X m5NUF+Y8ajJiF0X0X74gOqfjtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKO3R+g RiQJ3Mnl61o5YvgSvB0vMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJgxHidPMNrHI8izwqaKHWbogB4yPWJL9qWVHAqW6bNjt6moINcXCw3k+C0C1 uel6bpId/S0oPyVj8e725/uRh1bCITmF7PCd3FM/Gr0T+QWGobmrWMCnt35M7LU8 0gEe9FZ29q/0EwAgvVeOAIu3003UC69TeltLlNkAodn2ENaOdQBQfW70Z0C70MuA muiuARXyh6dL2ibux0/atctfppgt4UbGR+MUVY9esfHDjUXYShXzEKuGJEPA+OKa s+K0ux6uyky482it3mRjwCfx28PCbs2kMXwsHEedwJKKgWVR5cRKV/3QYUIEakHi v7G573CkEmVEfWH/o5ddPYfU0A== -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:09 2026 by rpki-client