$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: ICQlUtc5dO5yqahL2bUv9HO+VX0HpS99/RIaL0kErwo= Subject key identifier: 0C:3C:8B:32:AE:11:37:52:BE:B0:E5:D2:5E:89:EF:1E:B6:F0:91:9F Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 04C5 Signing time: Thu 16 Apr 2026 23:55:47 +0000 Manifest this update: Thu 16 Apr 2026 23:55:47 +0000 Manifest next update: Thu 23 Apr 2026 23:55:47 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: Xkqmh2WrinXWmBuOtjDZICe5URK2fCM4+SUyd25RTFE=) 2: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=) 3: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=) 4: 854C56242DC511F1935CF053AD833773.roa (hash: eWwuI1BI3xWAQNdUogUtFWaXufp7/3SK31akLdgsVH4=) 5: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=) 6: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=) 7: 76ABC3662DC511F1AFF54E10AD833773.roa (hash: of3FRWMIcYkEaWQWOZhJTwnfrjFeAR8rTgZWsIgU1hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Apr 16 23:55:47 2026 GMT Not After : Apr 23 23:55:47 2026 GMT Subject: CN=69e17703-b103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:99:33:4f:8b:d2:2d:49:35:59:d0:f6:31: 69:3a:92:99:52:b9:aa:a4:d6:dc:ec:a9:44:61:7f: 7b:bd:df:9f:7f:e1:19:92:b6:67:9c:31:b6:10:52: cd:2a:bc:3d:38:46:6c:1d:ac:02:3f:61:8a:7d:c6: 70:4c:c2:14:b5:de:80:5a:d7:31:9d:7b:34:77:c0: 59:0d:d6:f8:62:14:c6:52:b7:31:49:58:26:8a:6c: 77:34:0a:5d:1b:ee:59:8b:24:cb:f0:2f:97:d9:78: 32:17:95:9a:82:cf:a9:75:5a:7b:a3:46:8c:e3:32: 42:68:12:f5:73:d4:db:b5:bb:4a:1f:0b:3c:6e:cb: 86:1e:c0:71:30:b9:e7:41:42:ef:ca:85:ab:75:4d: 6a:64:aa:ed:f2:18:4a:fa:9a:81:2e:50:96:6c:11: ee:d9:79:e0:f8:07:16:a8:db:b9:8a:56:b1:c6:0f: 1f:70:c4:2f:46:f4:d7:22:1f:84:f8:13:cf:29:74: b3:5e:24:a1:f2:ac:bd:00:f0:8e:af:5b:5e:6a:18: 70:92:87:0d:7d:9e:a9:9c:76:95:7e:3e:7c:d5:a7: 0e:f7:e8:87:74:07:2f:e0:58:66:68:48:96:c3:5c: bc:6b:e5:26:7e:bf:77:ce:59:df:f7:d7:69:3f:ab: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:8B:32:AE:11:37:52:BE:B0:E5:D2:5E:89:EF:1E:B6:F0:91:9F X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:a7:d9:60:41:68:09:0a:83:61:c8:60:22:a2:c0:67:4f:fb: 1f:b4:1b:ed:b8:eb:b7:ac:11:86:36:d8:40:14:29:3f:b4:93: 35:5c:47:7c:78:ee:c6:b9:0f:4a:58:80:9d:f9:58:38:7e:54: 97:0d:6c:e2:c1:5b:21:43:92:ee:15:dc:7f:91:64:b1:e4:be: e7:f9:ab:e6:2b:38:8d:44:59:97:d5:13:c3:d8:59:13:44:39: d9:65:72:77:cd:62:a8:9b:4b:4f:0d:b7:af:5c:3f:d7:57:0e: 3f:83:07:df:ba:fc:50:9a:79:1b:52:dc:a9:e9:e7:37:6e:40: f8:c5:e4:04:72:4f:83:cc:2e:70:72:a5:cd:df:28:13:fd:0a: b1:13:7b:0e:94:ce:68:a4:62:f8:71:cf:ec:c3:d8:a7:fc:05: a3:0f:c2:b2:c9:61:ec:b2:3a:69:7b:61:62:b3:e4:6f:c3:64: a5:b0:1a:1d:29:ee:c4:4f:fb:16:9e:df:e6:d1:d9:36:9d:04: fb:4e:6e:f6:00:14:60:35:3b:df:be:87:cf:39:ca:61:28:fe: 3c:ae:fc:87:39:10:95:12:e3:62:3a:50:9b:de:0f:56:b7:ae: a2:4f:76:dc:7d:fa:74:ce:61:51:66:1c:b6:06:9b:aa:c5:f1: a7:7a:97:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwNDE2MjM1NTQ3WhcNMjYwNDIzMjM1NTQ3WjAYMRYwFAYD VQQDEw02OWUxNzcwMy1iMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoW+ZM0+L0i1JNVnQ9jFpOpKZUrmqpNbc7KlEYX97vd+ff+EZkrZnnDG2EFLN Krw9OEZsHawCP2GKfcZwTMIUtd6AWtcxnXs0d8BZDdb4YhTGUrcxSVgmimx3NApd G+5ZiyTL8C+X2XgyF5Wags+pdVp7o0aM4zJCaBL1c9TbtbtKHws8bsuGHsBxMLnn QULvyoWrdU1qZKrt8hhK+pqBLlCWbBHu2Xng+AcWqNu5ilaxxg8fcMQvRvTXIh+E +BPPKXSzXiSh8qy9APCOr1teahhwkocNfZ6pnHaVfj581acO9+iHdAcv4FhmaEiW w1y8a+Umfr93zlnf99dpP6v8HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAw8izKu ETdSvrDl0l6J7x628JGfMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz6fZYEFoCQqDYchgIqLAZ0/7H7Qb7bjrt6wRhjbYQBQpP7STNVxHfHjuxrkP SliAnflYOH5Ulw1s4sFbIUOS7hXcf5FkseS+5/mr5is4jURZl9UTw9hZE0Q52WVy d81iqJtLTw23r1w/11cOP4MH37r8UJp5G1LcqennN25A+MXkBHJPg8wucHKlzd8o E/0KsRN7DpTOaKRi+HHP7MPYp/wFow/Csslh7LI6aXthYrPkb8NkpbAaHSnuxE/7 Fp7f5tHZNp0E+05u9gAUYDU7376HzznKYSj+PK78hzkQlRLjYjpQm94PVreuok92 3H36dM5hUWYctgabqsXxp3qXmg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:36:48 2026 by rpki-client