$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json) Hash identifier: RfnW+PTkcvt4RKPB2MqEK6iK6gKBOifBe8w4SQ2/cyo= Subject key identifier: 30:E9:F9:21:02:12:E1:DA:86:DC:51:28:8B:99:B7:AD:05:31:0F:0E Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65 Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft Manifest number: 03AA Signing time: Fri 17 Apr 2026 00:36:39 +0000 Manifest this update: Fri 17 Apr 2026 00:36:39 +0000 Manifest next update: Fri 24 Apr 2026 00:36:39 +0000 Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: hh3EdGxcX180Qtc0MEYK7rntPCroqD9XsgR+DEFjnsM=) 2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: PgJ9XNDU/ajrVdWQinUWewn6SR1kOOmwJgma6udOIns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765 Validity Not Before: Apr 17 00:36:39 2026 GMT Not After : Apr 24 00:36:39 2026 GMT Subject: CN=69e18097-8f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:02:bf:a1:9c:7f:d0:fe:44:2f:68:03:b3: 8d:a3:c3:e4:81:1d:13:71:4c:74:9d:e0:e5:9b:7b: e7:62:ce:1d:46:e2:98:40:69:c1:ea:58:d5:9e:7e: 2f:24:1c:05:e7:39:6e:16:6f:80:dc:8b:57:bc:52: 35:05:2e:09:9e:f0:a3:26:34:68:bc:6c:8b:17:1e: db:d0:79:d6:ce:26:24:5e:8e:be:4f:24:8c:c8:2d: d4:3f:6e:49:4b:54:da:68:74:71:5e:b8:a6:fd:3e: fc:f6:b4:27:0e:6d:da:b9:4f:d9:d8:e9:97:41:73: 4c:4e:57:5b:81:5e:78:e2:a2:53:e7:95:60:7e:91: 50:6d:ab:95:9c:89:e0:12:8f:d5:ef:73:32:4d:60: 56:3e:56:0e:99:4d:26:84:dd:ba:08:8f:a3:61:64: 25:b8:94:ca:8a:4d:42:5d:8d:54:d8:ad:36:c6:ad: 61:07:52:ff:06:02:09:39:4d:24:54:20:f0:89:e5: 77:72:7e:be:00:c1:f4:71:6b:8e:66:06:c1:6b:26: 54:92:62:1f:3f:28:b7:53:05:40:ab:1b:7b:89:23: b3:06:ee:ec:4c:93:92:a7:ae:cf:86:a9:a8:e9:26: b8:ae:ee:68:a4:d3:df:39:c2:0a:8f:d1:08:87:83: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E9:F9:21:02:12:E1:DA:86:DC:51:28:8B:99:B7:AD:05:31:0F:0E X509v3 Authority Key Identifier: keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:50:39:78:c5:5d:a0:2c:71:54:b1:5d:db:31:87:8b:17:2a: 77:1d:b0:42:51:8b:57:ab:ba:14:42:64:a5:90:19:19:66:b9: 90:ed:53:27:9a:ca:07:c1:f9:e0:50:58:7b:7f:23:59:9f:35: 11:c4:b3:7f:a9:8d:a2:e0:27:bc:e0:67:77:af:45:f7:be:8d: 9b:ca:93:a8:b6:de:9c:85:1b:86:99:af:6c:58:bd:95:d7:bf: 6b:60:cb:61:1b:8a:c2:bc:af:03:89:b1:ff:ee:8f:86:b3:70: 4a:58:4a:9c:50:55:59:1e:3e:f7:92:36:63:1e:11:47:21:c9: ab:12:17:95:a8:22:d9:92:ff:3c:8a:6d:d9:5d:74:b9:65:c2: bf:57:0a:79:38:b0:aa:87:ee:a8:88:bc:44:12:6e:85:de:83: 61:61:bf:95:65:8d:dc:71:4e:a3:1a:73:df:74:ad:ab:64:4e: d3:87:d2:cb:6a:02:88:97:0d:81:10:79:65:22:0a:29:12:fb: e0:9e:01:1b:af:c2:d6:a9:91:46:58:7d:45:c5:65:c5:0a:15: 07:1c:c3:3f:e2:9f:76:f7:d6:3c:59:a6:b0:7a:5f:01:67:c9: dd:6b:2b:0c:06:b8:d7:40:7b:1d:95:f2:f2:04:50:55:71:e7: 69:a3:2b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRERTIxMTAvBgNVBAUTKDREMjkyMDM2ODExNjA1RjhGMzg4OTgwMTUyMUIyNTcy N0ExQ0Q3NjUwHhcNMjYwNDE3MDAzNjM5WhcNMjYwNDI0MDAzNjM5WjAYMRYwFAYD VQQDEw02OWUxODA5Ny04ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvECv6Gcf9D+RC9oA7ONo8PkgR0TcUx0neDlm3vnYs4dRuKYQGnB6ljVnn4v JBwF5zluFm+A3ItXvFI1BS4JnvCjJjRovGyLFx7b0HnWziYkXo6+TySMyC3UP25J S1TaaHRxXrim/T789rQnDm3auU/Z2OmXQXNMTldbgV544qJT55VgfpFQbauVnIng Eo/V73MyTWBWPlYOmU0mhN26CI+jYWQluJTKik1CXY1U2K02xq1hB1L/BgIJOU0k VCDwieV3cn6+AMH0cWuOZgbBayZUkmIfPyi3UwVAqxt7iSOzBu7sTJOSp67Phqmo 6Sa4ru5opNPfOcIKj9EIh4MQIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDp+SEC EuHahtxRKIuZt60FMQ8OMB8GA1UdIwQYMBaAFE0pIDaBFgX484iYAVIbJXJ6HNdl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NERFMi8xQzU0MjJEMEQ1 REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0JmanppSmdCVWhzbGNub2Mx MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTa2dOb0VXQmZqemlKZ0JVaHNsY25vYzEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NERFMi8xQzU0MjJEMEQ1REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0Jm anppSmdCVWhzbGNub2MxMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzlA5eMVdoCxxVLFd2zGHixcqdx2wQlGLV6u6FEJkpZAZGWa5kO1TJ5rKB8H5 4FBYe38jWZ81EcSzf6mNouAnvOBnd69F976Nm8qTqLbenIUbhpmvbFi9lde/a2DL YRuKwryvA4mx/+6PhrNwSlhKnFBVWR4+95I2Yx4RRyHJqxIXlagi2ZL/PIpt2V10 uWXCv1cKeTiwqofuqIi8RBJuhd6DYWG/lWWN3HFOoxpz33Stq2RO04fSy2oCiJcN gRB5ZSIKKRL74J4BG6/C1qmRRlh9RcVlxQoVBxzDP+KfdvfWPFmmsHpfAWfJ3Wsr DAa410B7HZXy8gRQVXHnaaMroQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:50:23 2026 by rpki-client