$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: ehLDVOSB0UY6hb+xV61LEO2VChPG41j/112znS+TOlM= Subject key identifier: 80:64:79:54:5B:2A:86:DB:8C:A8:B5:34:C1:85:9A:70:C3:2E:72:75 Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 0AB1 Signing time: Thu 16 Apr 2026 19:24:30 +0000 Manifest this update: Thu 16 Apr 2026 19:24:30 +0000 Manifest next update: Thu 23 Apr 2026 19:24:30 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: ki6ZWGADtfM/mgrSNGh1qW0Z69a+41MCGXJOuv8fJV0=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=) 3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Apr 16 19:24:30 2026 GMT Not After : Apr 23 19:24:30 2026 GMT Subject: CN=69e1376e-8956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:1b:8e:b5:82:c4:fb:da:c5:f1:f4:a0:c8: ae:a8:2d:cf:3e:81:2d:d5:dd:fc:da:a8:80:2d:32: 1b:98:8f:a3:a8:74:20:be:b3:37:7b:ea:20:fe:41: 45:b4:c2:9d:a7:f5:c4:d1:f8:5e:31:c3:a0:29:0b: ce:6a:cf:ed:ed:be:55:a9:4c:ac:f6:c6:b1:1c:6e: 69:3e:cd:a7:df:84:9d:fa:de:c5:26:98:ca:8f:bf: 35:0d:41:0e:d0:1e:8e:97:ed:d0:4b:33:18:0d:00: 84:a0:af:cb:a0:55:a7:af:7e:3b:50:56:f4:3d:53: 74:7b:78:5d:7f:b3:fc:8c:de:dc:28:ba:74:10:da: 43:44:c4:6a:5b:33:6d:fb:85:47:ef:0a:e1:43:88: 69:05:99:bd:23:b4:d6:04:c2:4e:a7:9b:55:60:42: 23:83:2d:36:3b:6e:d6:22:6f:f2:f9:91:d7:f4:f7: 93:db:95:95:36:e9:5c:c3:08:cb:d6:f2:97:59:8f: d8:0c:f0:d0:5b:23:fd:ae:6e:95:71:d1:29:04:d7: 05:4d:1b:2d:cd:82:77:4b:2d:b5:55:7d:42:a8:5d: bc:56:1b:41:fb:10:bd:c3:c9:bb:c2:93:93:e1:cb: 76:64:0a:57:7e:db:25:89:ed:1b:5c:bf:17:e4:ff: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:64:79:54:5B:2A:86:DB:8C:A8:B5:34:C1:85:9A:70:C3:2E:72:75 X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:21:90:d2:00:0d:f6:06:bf:80:c1:61:a8:49:e7:dd:ae:a2: 5f:c4:a9:9a:ea:b0:73:a2:3d:ac:ff:00:2a:b7:2b:8a:39:bf: ec:dc:46:42:28:b5:02:5a:d7:f9:0e:cf:b5:db:c9:54:c0:c3: 58:d5:58:3e:73:a5:61:82:97:0a:f8:38:29:18:55:71:46:88: 87:8e:d0:f2:74:10:a8:87:2d:d6:82:54:c5:f4:f0:d9:b0:41: a7:80:89:46:cf:f8:d5:c5:16:aa:a8:fa:ee:5e:f4:60:50:e9: b4:bf:24:3c:f2:88:0c:b6:be:71:d7:bc:f4:b6:c0:40:65:5a: 72:67:ad:d9:00:8d:c4:1e:17:3d:ae:52:84:bd:e4:61:02:af: 3d:e0:c5:f1:61:25:4e:51:0b:e9:63:50:bd:32:05:b0:69:28: e1:e5:1a:34:bc:4b:68:7a:56:2a:37:46:d5:74:a0:64:b2:08: d1:05:31:8d:98:f8:c9:53:24:ea:08:02:cd:46:33:fe:73:3d: b5:35:2e:32:58:dc:44:88:f6:1c:5e:1c:66:89:01:2e:eb:73: 6e:6d:ff:7d:40:01:58:8d:39:f1:05:95:1e:be:09:ae:2a:4b: 1c:b6:3f:18:fb:53:86:5b:7d:0f:07:15:2c:37:5f:02:62:f9: 00:01:53:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjYwNDE2MTkyNDMwWhcNMjYwNDIzMTkyNDMwWjAYMRYwFAYD VQQDEw02OWUxMzc2ZS04OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqy0bjrWCxPvaxfH0oMiuqC3PPoEt1d382qiALTIbmI+jqHQgvrM3e+og/kFF tMKdp/XE0fheMcOgKQvOas/t7b5VqUys9saxHG5pPs2n34Sd+t7FJpjKj781DUEO 0B6Ol+3QSzMYDQCEoK/LoFWnr347UFb0PVN0e3hdf7P8jN7cKLp0ENpDRMRqWzNt +4VH7wrhQ4hpBZm9I7TWBMJOp5tVYEIjgy02O27WIm/y+ZHX9PeT25WVNulcwwjL 1vKXWY/YDPDQWyP9rm6VcdEpBNcFTRstzYJ3Sy21VX1CqF28VhtB+xC9w8m7wpOT 4ct2ZApXftslie0bXL8X5P8ByQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBkeVRb KobbjKi1NMGFmnDDLnJ1MB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOSGQ0gAN9ga/gMFhqEnn3a6iX8Spmuqwc6I9rP8AKrcrijm/7NxGQii1AlrX +Q7PtdvJVMDDWNVYPnOlYYKXCvg4KRhVcUaIh47Q8nQQqIct1oJUxfTw2bBBp4CJ Rs/41cUWqqj67l70YFDptL8kPPKIDLa+cde89LbAQGVacmet2QCNxB4XPa5ShL3k YQKvPeDF8WElTlEL6WNQvTIFsGko4eUaNLxLaHpWKjdG1XSgZLII0QUxjZj4yVMk 6ggCzUYz/nM9tTUuMljcRIj2HF4cZokBLutzbm3/fUABWI058QWVHr4JripLHLY/ GPtThlt9DwcVLDdfAmL5AAFTFQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:06 2026 by rpki-client