$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft File: TCISGt-uP1dSgBZRUcP9MOOq_QE.mft (raw, json) Hash identifier: NL4gJqvYkPJp2vgQz+D16eLNAoQ+T8aNufk1dLtcU+E= Subject key identifier: E2:35:BA:80:01:F6:12:F3:E4:E6:F5:93:8F:00:79:52:91:6A:B3:2B Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft Manifest number: D8 Signing time: Wed 15 Apr 2026 06:15:17 +0000 Manifest this update: Wed 15 Apr 2026 06:15:16 +0000 Manifest next update: Wed 22 Apr 2026 06:15:16 +0000 Files and hashes: 1: TCISGt-uP1dSgBZRUcP9MOOq_QE.crl (hash: ozZsbiVAWyaFQBG7rJeao8FpVUigEScj0S36BAP/QoE=) 2: 02640B0CF97911EF99F9BE80C4F9AE02.roa (hash: IDMG36g3IA5yaHGoEfdRe+YwDHRm0VJaleLLtHv9jQI=) 3: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (hash: OTM0h3x/rG6DzgQGl54EMsBYVfOYhG4EfKaVuusqLjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01 Validity Not Before: Apr 15 06:15:16 2026 GMT Not After : Apr 22 06:15:16 2026 GMT Subject: CN=69df2cf5-c5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:e5:b0:f6:dc:76:89:8e:03:0d:0f:14:1b: b5:06:51:5d:ce:bd:b7:3b:d4:fa:fb:cc:16:b8:19: 4c:86:b9:c3:4d:50:4c:94:a6:e1:91:34:c7:97:ab: b9:55:39:ca:fc:37:cf:48:20:20:ac:35:bd:31:6f: 44:16:77:40:7a:35:b6:89:90:c1:49:00:c8:f8:08: 4f:1c:f6:04:29:0b:3d:01:97:d8:07:0a:7d:81:b2: 90:39:f4:fc:d2:06:1b:3a:d3:9a:1d:17:44:6c:74: b5:be:c9:d7:2f:11:77:34:00:f6:54:c5:16:7b:90: 83:e0:ff:b9:27:1f:e5:1d:b4:00:73:37:c1:ec:4f: ac:c0:40:3d:c6:b0:d2:92:5b:53:06:6a:0f:42:25: 7b:ad:e3:a4:89:97:be:93:9c:6d:3a:d3:c7:3f:8d: de:ca:5e:ea:da:7d:77:75:f9:95:d3:b7:25:95:f1: 7b:14:8d:e6:e7:ca:0b:5a:1c:d0:cb:04:29:12:95: 3d:79:f3:eb:a9:a6:9b:88:4d:23:34:1c:ce:90:af: 52:b9:79:bb:72:58:cf:73:15:29:2e:92:f2:fd:c2: d5:49:41:96:8c:0c:f5:90:18:d7:1f:f0:93:d0:ec: f1:db:24:3e:b2:59:9e:40:e9:1e:0a:e9:56:65:49: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:35:BA:80:01:F6:12:F3:E4:E6:F5:93:8F:00:79:52:91:6A:B3:2B X509v3 Authority Key Identifier: keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:70:fc:18:b3:f2:44:39:8a:71:ef:29:2e:26:73:56:3e:d8: 70:50:b4:e6:f9:1a:66:d0:27:c1:98:dd:6f:ee:da:84:2e:e1: f2:f6:5a:5d:f9:aa:71:62:2c:b5:23:79:25:e0:fc:df:b8:19: 07:84:51:5e:2c:3f:51:a6:61:76:36:7d:fc:b2:69:59:c3:30: ec:77:ed:94:f4:95:d1:e6:87:a7:b1:2d:98:8e:a8:58:9b:2b: da:3f:1b:77:8c:71:f9:2b:20:ce:23:57:35:2f:ac:b4:e9:91: 60:1e:4a:40:5f:d9:a8:83:36:61:25:53:a3:99:3f:c8:15:53: 60:ec:8c:2e:8f:58:b2:e8:7b:9e:85:96:2b:55:57:97:3f:60: cf:c9:c4:a9:5a:99:31:2c:4c:2b:68:c6:9f:80:bd:5b:6a:3a: a4:68:1d:dd:8a:f1:79:35:0e:75:01:10:e0:e5:ee:ab:b4:5a: b0:66:50:68:0f:30:f6:d6:07:08:be:79:e8:24:81:d3:92:5b: df:81:dd:5c:82:b8:61:f4:ac:1d:e4:94:b8:45:49:f4:de:96: 50:cc:7e:9c:46:b9:ce:18:10:be:f9:67:52:5f:3f:53:e6:b1: e3:15:ad:3c:c7:eb:7f:20:78:d1:b5:5b:71:10:6e:46:e8:d3: c6:46:53:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2RTgxMTAvBgNVBAUTKDRDMjIxMjFBREZBRTNGNTc1MjgwMTY1MTUxQzNGRDMw RTNBQUZEMDEwHhcNMjYwNDE1MDYxNTE2WhcNMjYwNDIyMDYxNTE2WjAYMRYwFAYD VQQDEw02OWRmMmNmNS1jNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywnlsPbcdomOAw0PFBu1BlFdzr23O9T6+8wWuBlMhrnDTVBMlKbhkTTHl6u5 VTnK/DfPSCAgrDW9MW9EFndAejW2iZDBSQDI+AhPHPYEKQs9AZfYBwp9gbKQOfT8 0gYbOtOaHRdEbHS1vsnXLxF3NAD2VMUWe5CD4P+5Jx/lHbQAczfB7E+swEA9xrDS kltTBmoPQiV7reOkiZe+k5xtOtPHP43eyl7q2n13dfmV07cllfF7FI3m58oLWhzQ ywQpEpU9efPrqaabiE0jNBzOkK9SuXm7cljPcxUpLpLy/cLVSUGWjAz1kBjXH/CT 0Ozx2yQ+slmeQOkeCulWZUkDFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOI1uoAB 9hLz5Ob1k48AeVKRarMrMB8GA1UdIwQYMBaAFEwiEhrfrj9XUoAWUVHD/TDjqv0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjZFOC9EODM4OEQzNEYz RkMxMUVGOTI2Q0U2MzBDNEY5QUUwMi9UQ0lTR3QtdVAxZFNnQlpSVWNQOU1PT3Ff UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDSVNHdC11UDFkU2dCWlJVY1A5TU9PcV9RRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjZFOC9EODM4OEQzNEYzRkMxMUVGOTI2Q0U2MzBDNEY5QUUwMi9UQ0lTR3QtdVAx ZFNnQlpSVWNQOU1PT3FfUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlnD8GLPyRDmKce8pLiZzVj7YcFC05vkaZtAnwZjdb+7ahC7h8vZaXfmqcWIs tSN5JeD837gZB4RRXiw/UaZhdjZ9/LJpWcMw7HftlPSV0eaHp7EtmI6oWJsr2j8b d4xx+SsgziNXNS+stOmRYB5KQF/ZqIM2YSVTo5k/yBVTYOyMLo9Ysuh7noWWK1VX lz9gz8nEqVqZMSxMK2jGn4C9W2o6pGgd3YrxeTUOdQEQ4OXuq7RasGZQaA8w9tYH CL556CSB05Jb34HdXIK4YfSsHeSUuEVJ9N6WUMx+nEa5zhgQvvlnUl8/U+ax4xWt PMfrfyB40bVbcRBuRujTxkZTaA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:54:58 2026 by rpki-client