$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: wsE2KLsQAuTrBC0eM5tEeRKIwJyPi3XQD2bVztEp7NE= Subject key identifier: 10:09:20:74:12:6A:04:5F:12:72:23:98:0A:82:F1:39:CA:D0:AA:69 Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0EC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0EB2 Signing time: Thu 16 Apr 2026 17:36:56 +0000 Manifest this update: Thu 16 Apr 2026 17:36:55 +0000 Manifest next update: Thu 23 Apr 2026 17:36:55 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: DNStnlNcDdgjN50t/CZu7Xwqe6mZu7eUmoG8kbPICqQ=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: RzqIGI8r+oQW3NlWivzrVB3dYHmPEddV5f3NgyB8w0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3780 (0xec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Apr 16 17:36:55 2026 GMT Not After : Apr 23 17:36:55 2026 GMT Subject: CN=69e11e38-0860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:0e:af:38:22:59:84:a5:77:74:45:ec:12: eb:b4:d6:58:e6:17:84:0a:36:60:69:53:da:d7:3a: 29:ea:15:cb:9a:c9:18:3b:b8:39:9d:52:fa:8f:ba: ad:79:2c:cf:ee:c5:ec:14:c4:bb:8a:bd:c0:e9:5e: 16:04:7a:ec:71:46:c4:93:81:79:ee:6b:54:89:6b: 40:5d:9e:5b:83:be:61:73:b9:e6:74:c8:26:b1:f2: 47:c3:bb:19:95:51:7c:df:75:f4:49:70:43:a5:0f: ac:70:aa:49:47:d8:b6:5d:6c:73:67:c0:cd:30:d0: 81:72:e5:36:22:09:20:2c:d5:15:57:4c:40:a3:b2: 9c:9d:33:e3:bb:3b:c5:d0:85:2c:11:09:6a:aa:16: 2d:d3:a8:0e:bd:c1:c6:f3:fe:66:89:df:f3:39:40: a5:86:f4:be:98:20:d3:5c:d0:36:b1:a3:c3:6c:aa: 23:e0:0e:78:2b:da:35:0b:49:90:1b:b0:30:42:c9: 9e:e1:2c:44:9f:f0:ad:74:b6:15:89:bf:ff:54:9f: c4:b6:40:52:4c:c5:36:1a:1e:22:a2:d8:ad:96:9e: d3:d0:26:59:40:52:22:ac:5f:6f:da:17:95:72:10: cb:cb:5a:f7:03:39:1e:3f:20:16:d8:e3:11:db:c6: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:20:74:12:6A:04:5F:12:72:23:98:0A:82:F1:39:CA:D0:AA:69 X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:e0:0c:8c:f3:69:a1:cf:43:29:14:d3:c5:26:66:6d:9a:83: 85:4a:a1:27:28:4d:04:c3:de:75:cb:28:4b:47:c7:19:26:af: 29:4c:db:29:99:6c:bb:71:cc:82:6d:e4:98:d7:f9:8c:f9:dd: 9c:80:79:0a:ae:07:52:cb:52:c3:ba:83:2a:91:9e:66:d5:52: 61:03:d3:e2:2e:8b:eb:e3:d0:ec:3b:2e:af:fc:dc:ba:4b:d7: 15:1d:77:0c:04:75:03:16:2b:a9:e2:7e:77:5d:37:0c:9a:d7: 00:0a:44:2d:eb:2a:e6:5b:b9:fa:8a:5b:5b:ed:1d:a3:d4:76: aa:7e:d7:0c:bb:e8:5f:1b:69:9c:39:7b:fc:ae:ec:19:1f:8e: 02:67:cb:e3:99:9f:ba:a2:31:ba:9b:68:f6:43:4d:06:41:bb: 9d:1e:c7:89:32:c3:c2:56:e8:00:de:9b:00:4d:9b:35:1a:f8: 95:01:33:90:5e:0a:20:b5:27:58:d5:b9:2c:f3:c2:fc:0d:8c: fe:38:83:0a:46:06:39:ff:a6:49:f7:23:d7:75:a7:d5:20:d9: 7d:be:30:db:88:40:fa:47:35:01:bb:20:36:1c:ee:11:c9:be: 3a:a8:c1:9b:70:8d:21:18:df:d4:42:73:63:5e:0c:df:e4:08: 52:29:a8:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjYwNDE2MTczNjU1WhcNMjYwNDIzMTczNjU1WjAYMRYwFAYD VQQDEw02OWUxMWUzOC0wODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOQOrzgiWYSld3RF7BLrtNZY5heECjZgaVPa1zop6hXLmskYO7g5nVL6j7qt eSzP7sXsFMS7ir3A6V4WBHrscUbEk4F57mtUiWtAXZ5bg75hc7nmdMgmsfJHw7sZ lVF833X0SXBDpQ+scKpJR9i2XWxzZ8DNMNCBcuU2IgkgLNUVV0xAo7KcnTPjuzvF 0IUsEQlqqhYt06gOvcHG8/5mid/zOUClhvS+mCDTXNA2saPDbKoj4A54K9o1C0mQ G7AwQsme4SxEn/CtdLYVib//VJ/EtkBSTMU2Gh4iotitlp7T0CZZQFIirF9v2heV chDLy1r3AzkePyAW2OMR28acpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAJIHQS agRfEnIjmAqC8TnK0KppMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1OAMjPNpoc9DKRTTxSZmbZqDhUqhJyhNBMPedcsoS0fHGSavKUzbKZlsu3HM gm3kmNf5jPndnIB5Cq4HUstSw7qDKpGeZtVSYQPT4i6L6+PQ7Dsur/zcukvXFR13 DAR1AxYrqeJ+d103DJrXAApELesq5lu5+opbW+0do9R2qn7XDLvoXxtpnDl7/K7s GR+OAmfL45mfuqIxupto9kNNBkG7nR7HiTLDwlboAN6bAE2bNRr4lQEzkF4KILUn WNW5LPPC/A2M/jiDCkYGOf+mSfcj13Wn1SDZfb4w24hA+kc1AbsgNhzuEcm+OqjB m3CNIRjf1EJzY14M3+QIUimocw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:26 2026 by rpki-client