$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft File: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json) Hash identifier: ylnTg58Uk0NixzuXw67JzARAr/tF4vGwef84ZTK0h0I= Subject key identifier: B1:2A:9F:DF:5B:5E:E1:0D:36:AB:4C:95:1B:DB:0B:C1:8B:5D:81:8A Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 Certificate issuer: /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft Manifest number: D7 Signing time: Mon 02 Mar 2026 13:29:32 +0000 Manifest this update: Mon 02 Mar 2026 13:29:32 +0000 Manifest next update: Mon 09 Mar 2026 13:29:32 +0000 Files and hashes: 1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: CpShmiRGhVI7NNXDQvy2aF1aBUSk9kF6iMWrQAwHfBs=) 2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9 Validity Not Before: Mar 2 13:29:32 2026 GMT Not After : Mar 9 13:29:32 2026 GMT Subject: CN=69a590bc-aab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:19:a1:4b:f2:01:af:6e:e9:11:5a:b6:a7: 0a:ac:25:cc:a6:41:63:7a:cc:ad:98:30:3d:93:f0: fa:e6:f9:5e:28:a1:d0:82:5e:50:b2:16:93:5a:c9: 07:de:a4:60:00:bd:06:c2:1b:ea:26:60:a4:fb:72: ed:44:fa:b4:12:e5:41:01:ce:47:9e:a0:27:6d:5c: 47:35:73:19:eb:78:e5:e2:76:07:bd:0b:0b:8a:98: 07:bf:ea:9a:61:3b:eb:d5:e7:35:ba:6f:74:07:01: e0:1e:a3:f7:8d:d6:89:f0:30:59:f3:29:5c:6d:54: da:f4:71:fc:b0:48:61:51:f3:9a:d1:61:7c:38:f2: dc:92:8e:bd:ad:fd:5b:e7:3f:4f:eb:e9:06:55:e8: 71:08:e9:10:da:66:55:53:d0:28:15:7a:7e:10:d9: 47:9a:ee:49:22:d5:61:ea:a6:25:04:fa:a2:07:53: 6c:09:77:49:af:0d:a9:30:1e:de:67:d5:1a:ea:87: 7b:40:1f:31:d2:c7:3e:33:86:02:fc:ea:66:76:3a: af:c7:95:4d:f7:f6:4d:6e:69:f8:fb:42:eb:a1:0f: 89:a5:48:fd:bb:32:a3:04:41:b1:02:36:86:15:52: 25:d0:c0:3f:b0:34:5a:be:a1:f7:3a:28:5f:82:57: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2A:9F:DF:5B:5E:E1:0D:36:AB:4C:95:1B:DB:0B:C1:8B:5D:81:8A X509v3 Authority Key Identifier: keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:9c:7c:c4:a5:87:f7:99:0b:fa:b9:27:63:d7:1e:73:6a: 7b:7a:76:f5:fd:cc:b2:09:89:49:1f:ef:fd:1d:22:6e:9c:ac: 6e:23:a0:27:ec:3c:be:5c:31:c7:96:84:25:03:c6:79:bd:18: 0b:e5:32:7b:2c:50:ae:df:4c:28:4f:33:14:f6:17:9b:86:b6: 67:33:c9:a6:eb:fa:77:8f:48:51:5b:2c:c0:21:dd:5f:56:36: 3d:a7:d5:2d:80:8a:a8:15:09:f9:94:80:0d:d0:7f:d9:1b:03: f1:58:cf:b4:1e:02:5b:61:db:9c:15:76:e1:d0:e0:44:09:3f: c1:90:af:77:d3:c3:02:48:33:5a:fe:09:89:b3:80:5d:92:f4: 0b:c3:1d:b8:3b:e2:00:e8:b2:16:6d:17:31:cd:84:bb:9c:88: f4:8f:c0:7f:18:65:25:b6:32:d3:1a:c8:da:08:df:0b:28:1b: 7b:f2:6f:36:0b:35:2c:c0:4c:ea:97:fd:da:16:a7:b1:5a:21: 1b:2b:20:86:e8:a9:c2:5c:f4:b6:a7:8c:56:9f:63:6f:c4:b3: fa:7c:cb:b0:67:03:1c:72:87:b8:ff:f6:83:a4:17:fb:dc:e1: 75:e4:18:f6:d0:58:2f:98:51:fb:67:ae:f2:de:fa:d0:f6:4f: 5e:65:12:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNjExMTAvBgNVBAUTKEI0OUIyQjExRDM4NzZERUNERTEzRjVFOEY1OUU2NDFB N0QwOTNGQjkwHhcNMjYwMzAyMTMyOTMyWhcNMjYwMzA5MTMyOTMyWjAYMRYwFAYD VQQDEw02OWE1OTBiYy1hYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjcUZoUvyAa9u6RFatqcKrCXMpkFjesytmDA9k/D65vleKKHQgl5QshaTWskH 3qRgAL0GwhvqJmCk+3LtRPq0EuVBAc5HnqAnbVxHNXMZ63jl4nYHvQsLipgHv+qa YTvr1ec1um90BwHgHqP3jdaJ8DBZ8ylcbVTa9HH8sEhhUfOa0WF8OPLcko69rf1b 5z9P6+kGVehxCOkQ2mZVU9AoFXp+ENlHmu5JItVh6qYlBPqiB1NsCXdJrw2pMB7e Z9Ua6od7QB8x0sc+M4YC/Opmdjqvx5VN9/ZNbmn4+0LroQ+JpUj9uzKjBEGxAjaG FVIl0MA/sDRavqH3OihfglfcyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEqn99b XuENNqtMlRvbC8GLXYGKMB8GA1UdIwQYMBaAFLSbKxHTh23s3hP16PWeZBp9CT+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE2MS83MTMyRUY5QUQ5 MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJlemVFX1hvOVo1a0duMEpQ N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RKc3JFZE9IYmV6ZUVfWG85WjVrR24wSlA3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE2MS83MTMyRUY5QUQ5MDcxMUVGQjI3Rjc4NTdDNEY5QUUwMi90SnNyRWRPSGJl emVFX1hvOVo1a0duMEpQN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAecScfMSlh/eZC/q5J2PXHnNqe3p29f3MsgmJSR/v/R0ibpysbiOgJ+w8vlwx x5aEJQPGeb0YC+UyeyxQrt9MKE8zFPYXm4a2ZzPJpuv6d49IUVsswCHdX1Y2PafV LYCKqBUJ+ZSADdB/2RsD8VjPtB4CW2HbnBV24dDgRAk/wZCvd9PDAkgzWv4JibOA XZL0C8MduDviAOiyFm0XMc2Eu5yI9I/AfxhlJbYy0xrI2gjfCygbe/JvNgs1LMBM 6pf92hansVohGysghuipwlz0tqeMVp9jb8Sz+nzLsGcDHHKHuP/2g6QX+9zhdeQY 9tBYL5hR+2eu8t760PZPXmUSMw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:33:43 2026 by rpki-client