$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json) Hash identifier: Yvl9e3JLz2cxVzK4C9Hx0xPpb4Mv9r6XKnetMaGmwHY= Subject key identifier: 76:C0:52:79:0E:F5:54:72:6C:29:CB:6B:E2:60:EF:64:A8:9E:1D:69 Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft Manifest number: 0122 Signing time: Fri 17 Apr 2026 03:32:31 +0000 Manifest this update: Fri 17 Apr 2026 03:32:30 +0000 Manifest next update: Fri 24 Apr 2026 03:32:30 +0000 Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: nOglPiYD43s/cYvoHkCAzjY76e9DpaieMIDEGFcnzag=) 2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4 Validity Not Before: Apr 17 03:32:30 2026 GMT Not After : Apr 24 03:32:30 2026 GMT Subject: CN=69e1a9cf-5b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:38:cb:85:47:4e:23:29:3f:e6:85:0c:77: 91:5b:50:cc:b7:2e:3f:3f:55:db:aa:b1:77:cc:4c: d9:33:a5:80:2f:a6:15:11:ac:a5:69:39:fd:6d:c9: e5:50:26:8e:21:b9:7e:4f:d4:94:67:63:ca:a6:01: 87:7e:c6:09:2f:57:e7:e5:50:20:05:22:db:09:49: bf:70:6d:48:1c:0f:01:dd:ef:ff:42:d0:cf:f6:fd: b9:14:16:ef:64:d9:83:75:29:58:b5:e9:c4:97:4b: 49:85:24:81:ba:e0:3c:4f:18:d3:90:58:40:e8:33: 34:83:1a:f5:7a:29:8b:dc:b4:81:0b:8b:e1:ae:f9: ed:a0:f5:a0:3b:a3:28:82:de:32:e3:9c:7a:03:6f: 31:d3:cd:b9:c0:e8:8d:11:a6:8b:a5:42:85:9a:c1: 39:4a:82:be:09:55:ee:c4:f9:b7:2e:39:7e:82:4c: b5:ee:2e:cd:75:f6:9e:ba:16:65:2a:d4:b3:95:24: 63:13:44:d4:e0:7d:43:9c:6d:d8:b5:93:15:34:f8: 89:63:16:5f:77:a8:3d:d2:52:1d:c5:85:51:20:99: 3a:0e:5a:5d:84:40:3c:b9:f7:8a:fa:d9:ad:47:47: 4f:26:ec:02:78:e9:b8:f3:aa:78:f2:ea:23:3a:5e: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C0:52:79:0E:F5:54:72:6C:29:CB:6B:E2:60:EF:64:A8:9E:1D:69 X509v3 Authority Key Identifier: keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:45:d5:49:40:a8:37:c2:cb:47:4e:52:10:63:26:7d:eb:ab: 08:b3:06:61:8f:f3:c2:0f:96:3d:a1:b7:9b:45:70:57:fc:f0: cf:d9:9b:73:77:50:35:f6:40:8f:19:51:92:62:65:a5:1d:25: d1:05:ff:e7:23:ae:4d:8f:b7:5f:39:83:b5:d5:d8:7b:7d:86: 3b:0b:55:8d:1a:9f:a0:4a:65:70:46:7d:03:ac:82:80:41:3d: d3:9a:20:a5:53:74:33:91:52:6e:c7:e3:c8:aa:f9:4e:f6:d0: e5:db:b7:12:d5:30:f4:1b:10:f2:72:ef:72:ba:71:52:18:fa: 1b:ae:c2:86:aa:79:f5:41:05:f6:5f:4a:e9:33:7f:0e:d0:e9: 72:2e:f4:e1:32:cc:d5:fe:4b:fc:dc:84:95:b1:7f:4d:00:e6: c8:61:f8:99:21:36:5c:d6:77:1d:71:eb:b6:d0:5c:49:98:e1: 21:33:9c:a7:5a:e7:f9:54:08:a0:3b:09:67:fb:5d:75:28:3c: 96:73:79:a8:0c:5a:a5:09:eb:58:b2:13:fe:92:e7:97:1c:58: 76:9f:12:08:19:02:b6:f2:29:c6:56:58:4d:f4:ff:99:15:2a: 4f:65:f1:9b:ea:72:83:ad:0b:0c:cf:b8:31:0b:91:ac:10:b7: 3b:7b:da:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDREQzdFMjhCNTQ2RjJBMEI1MzhFOENERjgzMkQ5QUEx RjM3Q0M4RTQwHhcNMjYwNDE3MDMzMjMwWhcNMjYwNDI0MDMzMjMwWjAYMRYwFAYD VQQDEw02OWUxYTljZi01YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXQ4y4VHTiMpP+aFDHeRW1DMty4/P1XbqrF3zEzZM6WAL6YVEaylaTn9bcnl UCaOIbl+T9SUZ2PKpgGHfsYJL1fn5VAgBSLbCUm/cG1IHA8B3e//QtDP9v25FBbv ZNmDdSlYtenEl0tJhSSBuuA8TxjTkFhA6DM0gxr1eimL3LSBC4vhrvntoPWgO6Mo gt4y45x6A28x0825wOiNEaaLpUKFmsE5SoK+CVXuxPm3Ljl+gky17i7NdfaeuhZl KtSzlSRjE0TU4H1DnG3YtZMVNPiJYxZfd6g90lIdxYVRIJk6DlpdhEA8ufeK+tmt R0dPJuwCeOm486p48uojOl73hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbAUnkO 9VRybCnLa+Jg72Sonh1pMB8GA1UdIwQYMBaAFE3H4otUbyoLU46M34MtmqHzfMjk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS9EMDMyMEVGOEJG NEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktndFRqb3pmZ3kyYW9mTjh5 T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RjZmlpMVJ2S2d0VGpvemZneTJhb2ZOOHlPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS9EMDMyMEVGOEJGNEYxMUVGQkNGNjg5NDRDNEY5QUUwMi9UY2ZpaTFSdktn dFRqb3pmZ3kyYW9mTjh5T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakXVSUCoN8LLR05SEGMmfeurCLMGYY/zwg+WPaG3m0VwV/zwz9mbc3dQNfZA jxlRkmJlpR0l0QX/5yOuTY+3XzmDtdXYe32GOwtVjRqfoEplcEZ9A6yCgEE905og pVN0M5FSbsfjyKr5TvbQ5du3EtUw9BsQ8nLvcrpxUhj6G67Chqp59UEF9l9K6TN/ DtDpci704TLM1f5L/NyElbF/TQDmyGH4mSE2XNZ3HXHrttBcSZjhITOcp1rn+VQI oDsJZ/tddSg8lnN5qAxapQnrWLIT/pLnlxxYdp8SCBkCtvIpxlZYTfT/mRUqT2Xx m+pyg60LDM+4MQuRrBC3O3varg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:24:07 2026 by rpki-client