$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: sqaPLo6crWpyXLhI3S1u7f+fQ9ntgRw+tn1GC7GKvig= Subject key identifier: 23:0D:F3:3F:6D:67:A4:6B:A3:59:F0:75:53:3D:85:B3:2D:96:C3:33 Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 0A99 Signing time: Mon 02 Mar 2026 02:11:43 +0000 Manifest this update: Mon 02 Mar 2026 02:11:40 +0000 Manifest next update: Mon 09 Mar 2026 02:11:40 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: Cs0S/0+C4OITheXfatahA+GkvnC8LaHzMIxwJ5axChI=) 2: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=) 3: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: Mar 2 02:11:40 2026 GMT Not After : Mar 9 02:11:40 2026 GMT Subject: CN=69a4f1de-2dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:79:2b:93:21:92:b9:84:49:3c:ec:a8:f4: 04:7c:01:2c:7b:7d:d0:09:f1:44:5f:39:9b:8d:c2: 63:a1:cf:b6:98:5e:bb:3b:4d:48:99:be:75:58:3d: 9e:b9:17:7b:c5:ec:03:d6:9b:d9:b9:b2:a1:58:d2: 16:f8:a5:b4:52:f0:eb:81:e8:98:86:07:fb:5f:0c: 4a:47:d6:2b:95:96:2b:19:70:94:b1:c5:c5:98:ec: 08:95:cc:99:42:7f:9d:f5:e5:68:60:64:6b:10:b8: 03:1d:3f:ad:56:6e:79:ca:58:17:d0:73:66:5b:7d: 60:aa:c4:7e:d0:5b:ff:62:18:cb:80:e1:ac:c7:65: a6:91:f7:53:61:3c:e2:7e:64:ca:f3:5d:22:88:21: 38:90:4c:e0:46:fe:e9:4c:09:fe:e5:24:ee:9f:00: 04:f2:74:a8:41:fa:bc:de:02:7a:4b:b5:aa:b3:6e: 3a:55:ae:f1:14:fa:f9:17:c3:cd:4b:c1:df:10:ea: 85:18:5a:1d:b0:ca:a5:54:70:1e:e5:43:ee:46:56: 87:d9:76:e4:54:05:a2:6e:cc:76:69:e2:6d:1d:06: 5a:6b:92:4f:4b:f2:e0:92:a3:09:bc:34:d6:49:d7: f8:3a:48:d8:ec:66:4c:3f:e5:48:79:ca:bb:bc:20: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0D:F3:3F:6D:67:A4:6B:A3:59:F0:75:53:3D:85:B3:2D:96:C3:33 X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:82:ad:cc:88:28:83:3c:0d:0f:08:68:f1:d0:ae:e2:50:29: 03:8f:3e:62:0e:47:00:d8:a6:1e:80:11:e7:7f:5d:12:55:ab: 1c:92:05:98:e1:13:20:eb:c2:74:dc:7d:ef:2a:8d:e0:b4:50: 4a:7e:62:b4:83:77:fa:ff:16:18:cb:94:5c:48:b9:94:9d:4b: 6b:44:e7:9b:14:94:ce:c2:b8:96:e3:92:b0:88:2e:9a:85:67: 0b:95:f1:bd:e6:4f:aa:cf:d3:12:70:19:54:ed:99:a3:ed:89: e7:60:ef:8d:f3:1a:86:cf:6d:d2:c4:7a:1c:18:e9:ee:02:b3: 55:74:f8:3e:a0:7f:ee:cd:61:35:6c:27:01:1c:9b:bf:58:35: 48:20:2a:78:73:49:f1:59:55:45:bf:99:58:d9:e6:09:b7:41: 9a:d4:0a:60:8a:4e:4d:91:2f:0e:6f:96:22:22:e9:c2:44:ca: f0:b3:e7:67:02:28:d8:f2:14:51:f6:b2:f7:2b:00:7c:d5:81: 46:45:91:03:3d:c5:10:2c:44:21:12:71:ce:9c:34:b1:1c:66: 8b:02:07:18:51:55:91:20:4c:37:da:a6:54:76:04:e5:b8:a0: 68:1e:65:7b:1b:59:ce:e3:90:01:20:4c:17:49:32:a9:64:d0: 7c:b5:ea:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjYwMzAyMDIxMTQwWhcNMjYwMzA5MDIxMTQwWjAYMRYwFAYD VQQDEw02OWE0ZjFkZS0yZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1p5K5MhkrmESTzsqPQEfAEse33QCfFEXzmbjcJjoc+2mF67O01Imb51WD2e uRd7xewD1pvZubKhWNIW+KW0UvDrgeiYhgf7XwxKR9YrlZYrGXCUscXFmOwIlcyZ Qn+d9eVoYGRrELgDHT+tVm55ylgX0HNmW31gqsR+0Fv/YhjLgOGsx2WmkfdTYTzi fmTK810iiCE4kEzgRv7pTAn+5STunwAE8nSoQfq83gJ6S7Wqs246Va7xFPr5F8PN S8HfEOqFGFodsMqlVHAe5UPuRlaH2XbkVAWibsx2aeJtHQZaa5JPS/LgkqMJvDTW Sdf4OkjY7GZMP+VIecq7vCA5jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMN8z9t Z6Rro1nwdVM9hbMtlsMzMB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXoKtzIgogzwNDwho8dCu4lApA48+Yg5HANimHoAR539dElWrHJIFmOETIOvC dNx97yqN4LRQSn5itIN3+v8WGMuUXEi5lJ1La0TnmxSUzsK4luOSsIgumoVnC5Xx veZPqs/TEnAZVO2Zo+2J52DvjfMahs9t0sR6HBjp7gKzVXT4PqB/7s1hNWwnARyb v1g1SCAqeHNJ8VlVRb+ZWNnmCbdBmtQKYIpOTZEvDm+WIiLpwkTK8LPnZwIo2PIU Ufay9ysAfNWBRkWRAz3FECxEIRJxzpw0sRxmiwIHGFFVkSBMN9qmVHYE5bigaB5l extZzuOQASBMF0kyqWTQfLXq5g== -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:33 2026 by rpki-client