$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft File: TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json) Hash identifier: U6Lotbo3kf/+dQES3NbxkbSjbBmoDimORvWgODahUTo= Subject key identifier: B9:8C:8B:17:3E:04:CE:48:CC:14:49:CD:8B:37:F4:D5:46:DC:AE:3F Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B Certificate issuer: /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft Manifest number: 07B4 Signing time: Mon 02 Mar 2026 02:07:02 +0000 Manifest this update: Mon 02 Mar 2026 02:07:00 +0000 Manifest next update: Mon 09 Mar 2026 02:07:00 +0000 Files and hashes: 1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: 2BnWFpoyMC7Zcx49v7IO1Jhpd8DxDMytWMpJIaFLtWM=) 2: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=) 3: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=) 4: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B Validity Not Before: Mar 2 02:07:00 2026 GMT Not After : Mar 9 02:07:00 2026 GMT Subject: CN=69a4f0c6-d211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:aa:31:1d:81:47:dd:a9:40:cb:c6:d8:d1: 61:4b:19:89:b7:b3:3c:0c:51:d4:74:a0:83:6b:25: 4f:96:f3:98:f6:0d:49:86:9e:fc:0e:c3:15:55:3e: 41:8a:d2:55:da:2a:21:59:c7:5e:16:ad:48:2f:ab: 14:f0:07:8b:4f:56:e2:5a:c0:f9:9f:22:87:22:c9: 0d:33:b7:1e:fc:71:d7:49:ac:60:39:84:ba:f9:ba: 84:5b:ee:a8:9c:70:d4:e9:d3:0a:5c:26:87:c3:53: 36:f9:ea:ae:41:bd:c6:42:e4:c0:a1:b0:c8:90:32: b9:c3:85:89:5f:46:86:f1:7c:6e:6e:9b:2c:11:4b: fe:a4:da:ab:32:a5:3c:0e:0f:69:23:7c:19:51:5c: f7:ef:9c:76:3e:31:b0:29:14:99:69:27:77:fd:d9: 9d:b8:1b:73:ac:8f:2b:47:b1:ed:d2:ef:50:75:43: 9e:60:80:d9:0c:42:95:f7:ef:f7:83:2b:78:f2:85: d5:5a:04:cf:b8:a3:e4:58:62:02:bb:7c:ea:3c:70: d7:ce:bf:ea:9f:8e:6b:64:86:d6:b1:6c:83:97:20: 50:6a:2b:ed:0c:ad:81:1a:78:13:e4:93:71:9f:15: 5a:2d:47:35:a3:80:36:55:93:25:7b:35:d4:69:24: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8C:8B:17:3E:04:CE:48:CC:14:49:CD:8B:37:F4:D5:46:DC:AE:3F X509v3 Authority Key Identifier: keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ea:c0:44:99:ae:6c:e7:40:3f:36:33:79:93:8f:6b:d5:6e: b5:ec:b3:96:0a:b7:9e:86:59:85:94:cb:42:90:fc:f9:8d:e2: e9:14:eb:ba:89:cd:fa:df:e3:8a:e0:93:57:5d:41:10:cd:b3: eb:c1:bf:35:00:8e:65:a3:61:1e:19:e3:89:d6:ba:09:e7:08: f6:db:61:15:61:24:d2:fd:a6:14:aa:a7:8d:4a:e2:3d:56:28: ed:d5:19:8d:45:8c:9e:5a:0d:9c:cd:14:8b:8c:e4:5f:0b:21: 1c:9e:03:cd:43:8b:76:70:f7:f9:77:ab:0d:0f:e2:b9:17:a6: 79:b1:bf:27:16:fd:f1:9c:c0:25:18:dc:a0:86:09:23:e7:8b: d7:97:dc:cc:fc:86:42:01:21:a6:fd:90:e7:db:e7:77:34:cb: 18:21:5c:98:a2:79:fc:8c:1c:2f:d4:26:fb:0a:e4:7f:5c:70: 19:66:f7:75:a5:cf:06:fa:76:0a:07:26:01:6c:cb:77:d8:d1: 0c:c1:d9:0b:cb:dc:4e:b0:e3:4c:6e:8c:97:fc:1d:6f:b6:46: d2:1b:8f:19:1d:e1:b4:a2:be:9c:ce:4f:eb:52:8e:24:e4:21: 86:9f:18:92:bb:9e:74:1b:4d:51:b7:0d:29:75:b7:d9:7f:c9: 23:8d:81:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3MjYxMTAvBgNVBAUTKDREODQ3NTIzRTVCREQ5RTNCODk2OTgyOEEwNEJGRURB MkIwQzAzMUIwHhcNMjYwMzAyMDIwNzAwWhcNMjYwMzA5MDIwNzAwWjAYMRYwFAYD VQQDEw02OWE0ZjBjNi1kMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf6qMR2BR92pQMvG2NFhSxmJt7M8DFHUdKCDayVPlvOY9g1Jhp78DsMVVT5B itJV2iohWcdeFq1IL6sU8AeLT1biWsD5nyKHIskNM7ce/HHXSaxgOYS6+bqEW+6o nHDU6dMKXCaHw1M2+equQb3GQuTAobDIkDK5w4WJX0aG8XxubpssEUv+pNqrMqU8 Dg9pI3wZUVz375x2PjGwKRSZaSd3/dmduBtzrI8rR7Ht0u9QdUOeYIDZDEKV9+/3 gyt48oXVWgTPuKPkWGICu3zqPHDXzr/qn45rZIbWsWyDlyBQaivtDK2BGngT5JNx nxVaLUc1o4A2VZMlezXUaSRcPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmMixc+ BM5IzBRJzYs39NVG3K4/MB8GA1UdIwQYMBaAFE2EdSPlvdnjuJaYKKBL/torDAMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzcyNi85QzRGNTMwQTM4 QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJlTzRscGdvb0V2LTJpc01B eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RZUjFJLVc5MmVPNGxwZ29vRXYtMmlzTUF4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzcyNi85QzRGNTMwQTM4QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJl TzRscGdvb0V2LTJpc01BeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+rARJmubOdAPzYzeZOPa9Vuteyzlgq3noZZhZTLQpD8+Y3i6RTruonN+t/j iuCTV11BEM2z68G/NQCOZaNhHhnjida6CecI9tthFWEk0v2mFKqnjUriPVYo7dUZ jUWMnloNnM0Ui4zkXwshHJ4DzUOLdnD3+XerDQ/iuRemebG/Jxb98ZzAJRjcoIYJ I+eL15fczPyGQgEhpv2Q59vndzTLGCFcmKJ5/IwcL9Qm+wrkf1xwGWb3daXPBvp2 CgcmAWzLd9jRDMHZC8vcTrDjTG6Ml/wdb7ZG0huPGR3htKK+nM5P61KOJOQhhp8Y kruedBtNUbcNKXW32X/JI42BbA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:20 2026 by rpki-client