$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: K0Dfi4zorzfJRn00sIYe4dy8a3/YXzTNl4L6dGFJqR0= Subject key identifier: D1:31:8D:D3:B2:1F:FF:79:65:75:74:84:69:E3:F2:A7:83:3A:3E:1F Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0CD9 Signing time: Thu 16 Apr 2026 18:18:16 +0000 Manifest this update: Thu 16 Apr 2026 18:18:15 +0000 Manifest next update: Thu 23 Apr 2026 18:18:15 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: Hx+3/ksVH5sqKKqyZiWWeWzEevvPkhTMD/IDn+Oax/E=) 2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: ROOiUYbkwm49mBaap+JHM0Ho6xM9mX2L6Moyq/i9y+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Apr 16 18:18:15 2026 GMT Not After : Apr 23 18:18:15 2026 GMT Subject: CN=69e127e8-00d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:af:e6:ab:1b:bc:2a:07:6c:41:f2:4a:94: bb:2b:d6:93:2f:2f:d3:60:85:ba:a8:0a:06:20:1e: 20:cf:1e:79:84:14:e8:60:bc:09:76:fc:5e:f3:17: 85:8c:6a:72:f3:22:42:c6:19:6e:50:c6:39:26:c7: dd:5e:04:46:7c:62:a6:a7:79:c7:f4:ea:c6:f4:b9: 50:af:25:1b:f2:4b:7e:cc:8a:ae:4e:69:60:68:86: d8:69:2d:db:bb:7e:c1:8f:4f:fd:8d:52:51:50:61: 8f:04:0a:e0:26:46:65:fb:d7:79:3f:7c:bd:d6:5e: 33:90:ce:61:d9:6d:cc:b9:7f:6d:c2:2f:55:70:17: 3d:c9:ad:da:a9:a8:cf:df:f3:16:28:06:c8:3b:cb: 88:69:5b:d5:73:08:94:c0:0e:74:99:7f:08:c2:24: 65:f3:2c:02:87:be:0d:c0:e1:20:68:e8:20:50:6c: c3:5b:12:d1:fe:78:47:56:24:b2:0b:85:56:90:e9: c1:0f:40:3e:3b:d8:af:cd:c0:ed:74:67:4a:b0:84: cb:65:0d:a8:f3:a2:3a:b4:0b:83:a8:60:2f:3e:38: 19:4b:53:df:08:32:a1:22:19:fc:09:27:a9:14:0c: 23:81:24:6c:15:44:e6:28:d4:ea:36:7d:71:8d:f2: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:8D:D3:B2:1F:FF:79:65:75:74:84:69:E3:F2:A7:83:3A:3E:1F X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:45:d5:33:33:77:a9:f1:e4:b6:87:04:c3:7b:96:8f:c5:95: f0:d1:6f:fd:15:e5:af:dc:ae:04:d2:01:2b:b9:66:84:57:7c: e6:2e:48:48:1e:18:d7:a6:b2:99:e3:11:e3:9f:8b:1d:68:5d: 18:c1:03:52:b6:15:e4:c9:49:83:9f:59:bf:cb:6f:f1:22:32: eb:9f:74:69:12:13:ed:b6:cc:28:92:68:d6:df:a6:17:4c:fa: 74:94:cc:c9:10:d2:4a:c2:06:cc:67:1c:b6:7d:fb:e1:d2:90: 90:f1:99:18:e8:c2:5d:15:93:a1:ce:d7:9a:9f:24:5e:ed:45: 27:b5:31:d7:40:36:9d:e5:1a:ff:82:f3:02:75:70:fb:1b:d3: 06:ce:28:69:71:08:b8:44:48:de:02:74:60:c0:33:f8:bc:18: b9:3a:ff:29:f4:8f:b1:1c:d1:2d:ee:96:77:19:66:59:fd:26: d2:ae:71:c8:1c:26:18:59:14:10:9d:8d:3a:c4:6e:92:c0:d6: 8d:70:3d:d6:b1:89:e8:94:0c:60:99:12:e4:09:9d:19:36:4e: 94:7e:d5:ba:bd:5e:3f:8b:68:1a:81:9a:7e:a9:d5:1f:8f:51: b2:80:1e:e8:fc:fd:03:b0:76:99:78:fe:aa:cf:19:5c:80:47: e5:6d:1d:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjYwNDE2MTgxODE1WhcNMjYwNDIzMTgxODE1WjAYMRYwFAYD VQQDEw02OWUxMjdlOC0wMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOav5qsbvCoHbEHySpS7K9aTLy/TYIW6qAoGIB4gzx55hBToYLwJdvxe8xeF jGpy8yJCxhluUMY5JsfdXgRGfGKmp3nH9OrG9LlQryUb8kt+zIquTmlgaIbYaS3b u37Bj0/9jVJRUGGPBArgJkZl+9d5P3y91l4zkM5h2W3MuX9twi9VcBc9ya3aqajP 3/MWKAbIO8uIaVvVcwiUwA50mX8IwiRl8ywCh74NwOEgaOggUGzDWxLR/nhHViSy C4VWkOnBD0A+O9ivzcDtdGdKsITLZQ2o86I6tAuDqGAvPjgZS1PfCDKhIhn8CSep FAwjgSRsFUTmKNTqNn1xjfLv+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNExjdOy H/95ZXV0hGnj8qeDOj4fMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkXVMzN3qfHktocEw3uWj8WV8NFv/RXlr9yuBNIBK7lmhFd85i5ISB4Y16ay meMR45+LHWhdGMEDUrYV5MlJg59Zv8tv8SIy6590aRIT7bbMKJJo1t+mF0z6dJTM yRDSSsIGzGcctn374dKQkPGZGOjCXRWToc7Xmp8kXu1FJ7Ux10A2neUa/4LzAnVw +xvTBs4oaXEIuERI3gJ0YMAz+LwYuTr/KfSPsRzRLe6WdxlmWf0m0q5xyBwmGFkU EJ2NOsRuksDWjXA91rGJ6JQMYJkS5AmdGTZOlH7Vur1eP4toGoGafqnVH49RsoAe 6Pz9A7B2mXj+qs8ZXIBH5W0dyA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:05 2026 by rpki-client