$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: PcDLi7hiaxRWKE/I7YwnboJ1TYyowHkFNnZQWSZHvrM= Subject key identifier: 0A:E9:67:71:35:89:4B:A2:67:E0:9C:E2:C9:56:B3:E8:38:1F:E0:64 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 010A Signing time: Sun 01 Mar 2026 23:11:13 +0000 Manifest this update: Sun 01 Mar 2026 23:11:13 +0000 Manifest next update: Sun 08 Mar 2026 23:11:13 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: Cf3so+R/jx6FAhrGG/ga5Q8zQ4W9OPOPV4K/dHrCmH0=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Mar 1 23:11:13 2026 GMT Not After : Mar 8 23:11:13 2026 GMT Subject: CN=69a4c791-5166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:e5:3c:26:69:1e:54:c7:d0:fe:40:04:dd: fa:68:46:d9:a3:dc:15:e4:33:2a:83:ea:67:d0:16: 74:57:af:ae:25:45:80:b9:f2:c2:61:40:4d:98:5a: 71:bb:3a:85:34:42:fc:68:ac:ae:16:3c:7b:12:ea: e4:59:63:1f:dd:f4:1e:99:75:b8:7f:f6:da:f0:2c: d4:6a:5e:b4:bd:38:e0:7b:91:98:c3:af:39:33:75: eb:3c:4d:fa:dd:d2:a6:ab:08:51:e6:c0:c5:d6:df: 32:d8:de:8f:30:9a:28:af:46:e4:40:ba:b0:bf:16: 3e:a9:60:5a:51:a2:75:9a:7d:d3:ed:af:b4:f0:4f: 82:11:d8:db:93:ac:cb:41:56:ad:c7:e1:67:ed:85: 7b:00:81:e6:73:0e:29:b2:e4:99:dd:eb:e3:b4:a4: e6:19:0a:fb:ab:77:ed:bb:c7:c9:4f:e0:fc:d6:2e: 33:87:f6:f3:9e:14:cd:b7:b4:52:15:89:a6:1a:f3: e6:07:ad:6a:86:bd:26:79:fb:e5:fb:f3:53:0c:16: 0d:8d:f0:a8:b0:2c:e5:fd:32:a3:74:62:7c:d6:5a: 96:70:d1:b8:83:c7:aa:81:57:ee:c2:c3:5a:32:af: ad:71:3a:2c:6c:f1:ca:9b:42:81:68:9e:1a:a3:3d: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E9:67:71:35:89:4B:A2:67:E0:9C:E2:C9:56:B3:E8:38:1F:E0:64 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:d7:e7:1c:f6:ab:e3:6a:e6:cd:86:64:b2:2f:79:29:eb: 86:ef:be:e8:7e:ab:2e:72:db:93:72:c9:a8:96:96:14:e9:a3: 75:3b:af:54:21:f3:59:e5:c8:12:75:24:13:62:d6:35:66:48: 06:21:1d:e6:bc:e1:a6:b5:10:23:2b:43:55:6f:dc:79:7c:d0: 82:79:3f:cb:e4:e2:5c:54:0d:cb:c1:0f:d1:8f:10:df:d9:6f: 4e:2e:89:42:36:96:dd:53:73:c7:ae:53:1e:44:56:dc:8c:59: 6d:52:aa:b7:a2:34:53:9d:e4:c9:af:0a:27:63:a0:31:08:f8: 33:19:db:43:1d:95:b8:90:be:99:6f:92:53:0e:aa:b4:5d:f0: 40:cd:f5:15:6f:79:ea:96:b3:d7:f2:43:35:63:89:23:8d:55: 98:8c:88:ca:fc:2e:04:f5:dc:c2:e5:fa:04:45:d7:5a:5b:d8: df:fd:b2:1a:7f:09:1d:18:21:aa:62:6f:4a:f2:65:49:2f:27: a8:4a:95:a6:41:7d:99:61:fb:12:f7:50:01:5e:b4:75:ee:55: 31:61:5b:0a:cb:c9:37:f9:04:28:86:5d:0b:0a:17:f4:29:81: 88:ef:0c:c4:e1:39:ee:cf:d3:63:65:30:40:d3:be:a9:5d:3c: cd:08:89:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjYwMzAxMjMxMTEzWhcNMjYwMzA4MjMxMTEzWjAYMRYwFAYD VQQDEw02OWE0Yzc5MS01MTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+7lPCZpHlTH0P5ABN36aEbZo9wV5DMqg+pn0BZ0V6+uJUWAufLCYUBNmFpx uzqFNEL8aKyuFjx7EurkWWMf3fQemXW4f/ba8CzUal60vTjge5GYw685M3XrPE36 3dKmqwhR5sDF1t8y2N6PMJoor0bkQLqwvxY+qWBaUaJ1mn3T7a+08E+CEdjbk6zL QVatx+Fn7YV7AIHmcw4psuSZ3evjtKTmGQr7q3ftu8fJT+D81i4zh/bznhTNt7RS FYmmGvPmB61qhr0mefvl+/NTDBYNjfCosCzl/TKjdGJ81lqWcNG4g8eqgVfuwsNa Mq+tcTosbPHKm0KBaJ4aoz0CqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArpZ3E1 iUuiZ+Cc4slWs+g4H+BkMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdBHX5xz2q+Nq5s2GZLIveSnrhu++6H6rLnLbk3LJqJaWFOmjdTuvVCHzWeXI EnUkE2LWNWZIBiEd5rzhprUQIytDVW/ceXzQgnk/y+TiXFQNy8EP0Y8Q39lvTi6J QjaW3VNzx65THkRW3IxZbVKqt6I0U53kya8KJ2OgMQj4MxnbQx2VuJC+mW+SUw6q tF3wQM31FW956paz1/JDNWOJI41VmIyIyvwuBPXcwuX6BEXXWlvY3/2yGn8JHRgh qmJvSvJlSS8nqEqVpkF9mWH7EvdQAV60de5VMWFbCsvJN/kEKIZdCwoX9CmBiO8M xOE57s/TY2UwQNO+qV08zQiJNQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:22 2026 by rpki-client