$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: RvB73cUwj/vKvcR5MIlVFLOAdCQt3g1zl/Eb/N4TY+U= Subject key identifier: 25:A5:02:F9:79:9F:FD:22:AB:6D:42:7D:1B:19:F1:1F:8E:D7:C9:52 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0AB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1A7F Signing time: Thu 16 Apr 2026 17:25:04 +0000 Manifest this update: Thu 16 Apr 2026 17:25:04 +0000 Manifest next update: Thu 23 Apr 2026 17:25:04 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: +XYWVOEudgGpSncBUnKvEQW0KEZ0mUWZFRp2m6n8cVs=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Apr 16 17:25:04 2026 GMT Not After : Apr 23 17:25:04 2026 GMT Subject: CN=69e11b70-a449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:18:5a:a0:5f:eb:4e:21:0c:67:f7:7e:5b: ae:4e:8c:cf:2e:8b:85:53:07:41:c8:4b:4b:c5:44: 14:8f:28:e2:d8:75:9e:d0:bc:c4:57:77:6f:bc:86: e8:c1:6e:0d:cd:35:c1:6d:76:43:08:55:5f:ff:fa: 82:4f:15:6c:e7:70:8d:d6:1b:be:de:bf:9f:18:f3: a3:3c:37:eb:43:d7:b4:01:2e:c1:2a:03:49:03:6a: c1:d1:15:72:3b:80:c3:79:d3:98:46:7f:4f:a4:9d: 49:c1:a5:c7:d4:2c:ee:6e:5e:d2:f0:57:7e:18:c4: 69:f5:cc:07:c5:f4:35:cf:a2:13:fd:1f:f5:13:46: aa:3c:e4:90:ad:a1:12:7b:dd:a6:35:3e:64:0b:bc: 17:bb:b2:c0:05:26:27:bd:02:9a:e8:b0:6a:6e:b2: bb:9d:6a:e1:f7:c2:16:0d:58:c4:33:53:c2:1a:61: f3:11:8a:ca:a4:90:64:b4:a4:9b:bc:3e:bf:49:62: 20:94:86:a8:ea:18:33:86:3d:bc:2f:79:1f:4e:c6: f3:94:2c:88:8b:ce:dc:e2:1d:8a:c6:2a:27:6c:8b: f3:ad:1e:70:14:99:24:ec:a6:50:6b:c9:76:4a:54: 6f:57:78:85:b5:3c:f8:9f:97:b7:2a:4c:a1:0e:d8: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:02:F9:79:9F:FD:22:AB:6D:42:7D:1B:19:F1:1F:8E:D7:C9:52 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:61:d1:b6:e7:5a:8f:ed:0b:9c:11:a1:6d:89:8a:47:fe:c0: 8a:0f:d8:5a:12:07:a0:ac:f0:0d:7e:48:0d:a4:a4:fc:fc:88: 30:9a:43:c0:26:83:8f:33:d3:36:a8:79:1d:9f:46:f7:15:79: d6:95:76:1b:1e:77:16:bd:af:09:a5:c1:bc:fa:c9:8c:4c:a5: aa:1c:6c:85:fe:2c:cc:d1:89:5d:44:bd:50:e6:86:12:9b:89: 9a:81:e2:00:cd:7d:92:f6:1e:b9:20:d9:d6:77:94:98:81:66: 72:66:d4:25:1f:e6:84:c4:ea:eb:a8:c3:2e:94:a0:36:fe:29: c0:7f:d8:bb:73:8a:1d:59:21:1f:50:a6:6a:4a:65:dc:cf:87: ce:f8:ed:12:a1:5e:40:42:45:a8:92:d4:e2:65:90:41:c3:63: ed:8b:be:e7:1c:9a:16:56:a7:b7:72:97:b9:4f:71:99:34:1e: 8f:6d:7e:b4:dc:a8:d5:b5:fd:ff:2c:f7:af:51:3c:b4:17:a2: 19:1f:6a:3d:c1:25:85:ac:fe:cf:e9:c9:07:e9:1a:94:af:a1: 0c:52:6e:06:f8:4b:ab:bb:04:38:e9:95:36:e3:d8:0b:21:6f: 22:34:40:c1:be:4a:09:7f:39:58:a2:d7:ba:4b:73:2c:62:1a: be:52:9b:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjYwNDE2MTcyNTA0WhcNMjYwNDIzMTcyNTA0WjAYMRYwFAYD VQQDEw02OWUxMWI3MC1hNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UAYWqBf604hDGf3fluuTozPLouFUwdByEtLxUQUjyji2HWe0LzEV3dvvIbo wW4NzTXBbXZDCFVf//qCTxVs53CN1hu+3r+fGPOjPDfrQ9e0AS7BKgNJA2rB0RVy O4DDedOYRn9PpJ1JwaXH1Czubl7S8Fd+GMRp9cwHxfQ1z6IT/R/1E0aqPOSQraES e92mNT5kC7wXu7LABSYnvQKa6LBqbrK7nWrh98IWDVjEM1PCGmHzEYrKpJBktKSb vD6/SWIglIao6hgzhj28L3kfTsbzlCyIi87c4h2KxionbIvzrR5wFJkk7KZQa8l2 SlRvV3iFtTz4n5e3KkyhDtgumwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWlAvl5 n/0iq21CfRsZ8R+O18lSMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgmHRtudaj+0LnBGhbYmKR/7Aig/YWhIHoKzwDX5IDaSk/PyIMJpDwCaDjzPT Nqh5HZ9G9xV51pV2Gx53Fr2vCaXBvPrJjEylqhxshf4szNGJXUS9UOaGEpuJmoHi AM19kvYeuSDZ1neUmIFmcmbUJR/mhMTq66jDLpSgNv4pwH/Yu3OKHVkhH1Cmakpl 3M+HzvjtEqFeQEJFqJLU4mWQQcNj7Yu+5xyaFlant3KXuU9xmTQej21+tNyo1bX9 /yz3r1E8tBeiGR9qPcElhaz+z+nJB+kalK+hDFJuBvhLq7sEOOmVNuPYCyFvIjRA wb5KCX85WKLXuktzLGIavlKbMA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:44:53 2026 by rpki-client