$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: JxiIvSdH4cdSShnb75PCXa4O8yG/8u7qPyBVyXb4i5E= Subject key identifier: C7:DE:8E:71:C8:98:31:84:31:54:30:80:D3:3D:FA:6C:B4:20:1B:93 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 045A Signing time: Fri 17 Apr 2026 00:05:32 +0000 Manifest this update: Fri 17 Apr 2026 00:05:32 +0000 Manifest next update: Fri 24 Apr 2026 00:05:32 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: gVHT3y0EIC657xPxovcT6Z8gv8xARTnxf2dpIGsARqk=) 2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=) 3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=) 4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Apr 17 00:05:32 2026 GMT Not After : Apr 24 00:05:32 2026 GMT Subject: CN=69e1794c-4d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:5c:d5:7e:91:68:5f:27:c7:07:de:44:8a: b3:5a:7c:cd:e4:be:10:bd:b6:10:ae:c7:93:b9:7a: 42:2b:52:5c:17:d2:38:cf:ec:60:73:15:51:dc:9c: 13:92:9c:01:6f:24:b8:3d:16:a5:8b:03:02:c1:7a: 59:13:e7:ff:fa:14:59:b7:62:3c:4c:6a:00:dc:95: 8a:b2:95:71:85:3f:0c:60:76:17:bb:9d:d0:26:38: a7:fc:be:50:d7:55:53:d8:12:e0:df:79:b4:1b:20: ae:f0:10:07:16:1a:02:8c:ea:35:26:c2:49:4e:78: 6f:6b:13:c6:e6:45:21:07:6a:c6:9e:3b:81:0f:a6: 37:e2:dc:be:e9:72:35:9a:9a:20:5c:26:0e:4e:6b: 48:f1:ea:0b:8a:00:be:24:e0:fc:eb:1e:54:28:74: ed:38:5a:e9:31:1d:59:4c:44:ad:65:c7:cd:9a:ef: 0d:86:a6:0e:2e:a6:ba:22:ba:3f:f4:ce:64:23:0a: ba:96:a0:eb:af:f2:af:e1:67:70:1c:7f:6e:04:c8: 17:df:86:10:54:d1:d9:ca:9e:00:81:ea:1f:1d:e4: c3:4f:4e:8d:8b:36:76:15:3f:c0:c5:25:31:ee:bd: a7:f4:df:73:ac:ab:d6:13:ba:54:3e:11:58:c1:bb: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:8E:71:C8:98:31:84:31:54:30:80:D3:3D:FA:6C:B4:20:1B:93 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:f4:dd:eb:93:b0:ee:0e:b4:23:44:43:40:78:56:8c:b6: ad:9e:3b:30:0e:c1:d9:70:21:58:f7:9e:4f:77:26:c2:d3:3b: 77:56:2a:a2:20:0d:b7:cf:54:54:4f:a7:0b:84:b5:02:5e:55: e9:21:3f:5c:c4:82:f6:cd:2b:78:27:c1:02:08:ca:36:04:ed: a4:c0:6e:d8:20:c8:37:61:a9:4f:52:78:e8:3f:02:9c:50:c0: 55:5d:4e:19:a2:b6:b3:dc:29:b4:a5:d2:49:4f:8e:5e:f0:ad: b5:5d:32:0e:be:4a:74:45:de:8e:e5:f9:ac:02:f6:d2:8b:25: e8:e5:6e:ae:50:94:63:96:c3:f5:71:e9:b5:f6:9e:2b:c0:1a: 3a:5d:ed:3b:15:34:65:ef:8c:f6:3f:82:64:cb:83:30:95:69: bb:38:8d:b3:85:34:44:08:c6:e8:af:a0:18:7d:40:66:e7:fc: 40:16:88:3e:27:37:6f:36:75:ff:87:26:97:de:4b:67:4b:f9: 1a:65:ed:06:d1:77:4b:90:b7:c7:e5:14:ce:bf:7f:61:c1:bd: 86:63:ed:1c:34:c8:3d:35:32:5e:4e:e9:d6:8b:84:1e:b5:f4: e0:d0:63:ad:a8:c1:6e:9c:32:d2:24:48:aa:97:e4:11:c6:ec: c1:96:e8:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwNDE3MDAwNTMyWhcNMjYwNDI0MDAwNTMyWjAYMRYwFAYD VQQDEw02OWUxNzk0Yy00ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWBc1X6RaF8nxwfeRIqzWnzN5L4QvbYQrseTuXpCK1JcF9I4z+xgcxVR3JwT kpwBbyS4PRaliwMCwXpZE+f/+hRZt2I8TGoA3JWKspVxhT8MYHYXu53QJjin/L5Q 11VT2BLg33m0GyCu8BAHFhoCjOo1JsJJTnhvaxPG5kUhB2rGnjuBD6Y34ty+6XI1 mpogXCYOTmtI8eoLigC+JOD86x5UKHTtOFrpMR1ZTEStZcfNmu8NhqYOLqa6Iro/ 9M5kIwq6lqDrr/Kv4WdwHH9uBMgX34YQVNHZyp4AgeofHeTDT06NizZ2FT/AxSUx 7r2n9N9zrKvWE7pUPhFYwbvjiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfejnHI mDGEMVQwgNM9+my0IBuTMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANlP03euTsO4OtCNEQ0B4Voy2rZ47MA7B2XAhWPeeT3cmwtM7d1YqoiANt89U VE+nC4S1Al5V6SE/XMSC9s0reCfBAgjKNgTtpMBu2CDIN2GpT1J46D8CnFDAVV1O GaK2s9wptKXSSU+OXvCttV0yDr5KdEXejuX5rAL20osl6OVurlCUY5bD9XHptfae K8AaOl3tOxU0Ze+M9j+CZMuDMJVpuziNs4U0RAjG6K+gGH1AZuf8QBaIPic3bzZ1 /4cml95LZ0v5GmXtBtF3S5C3x+UUzr9/YcG9hmPtHDTIPTUyXk7p1ouEHrX04NBj rajBbpwy0iRIqpfkEcbswZboKA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:48:45 2026 by rpki-client