$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: 2C1PYvo5/h+fXuKhquKC944tHNM81WxXJ1iisVfJlcY= Subject key identifier: DD:27:0B:4C:3E:FD:0A:A8:B4:91:CA:69:2E:B7:F4:28:E0:18:0C:29 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D0C Signing time: Mon 02 Mar 2026 01:57:20 +0000 Manifest this update: Mon 02 Mar 2026 01:57:18 +0000 Manifest next update: Mon 09 Mar 2026 01:57:18 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: 7NglPullwRknQjnBFGBTGzVOPrGhLQCcaqN8ou4HM8k=) 2: 4C8BB01CF0A511F0AE903042706F56BC.roa (hash: O4BcOq2hKD3I3RD3vTsJAeBqf6AIzX76ZzjjaHK+ElU=) 3: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: wwbAK8oiejrRqztY01yoKfr0EpZtJpfxnGCsmORuPJk=) 4: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: vyzv0f1THJyglSIA32Cmr/3tLhp6nkKIDvP00vthIq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Mar 2 01:57:18 2026 GMT Not After : Mar 9 01:57:18 2026 GMT Subject: CN=69a4ee7f-56f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:43:70:89:97:22:ea:41:88:e4:d5:74:52: eb:88:cc:ea:b1:b0:c5:ee:b4:5b:74:ad:3c:c9:8a: f7:e9:19:52:e9:c3:da:02:a2:21:eb:3b:b3:04:5f: 8a:ce:46:4a:92:1e:6f:fa:eb:a3:57:17:b9:ec:ce: d7:1f:87:c5:32:23:e1:47:d0:e7:89:ef:9e:a2:97: 12:b9:f3:e4:94:34:60:cb:fa:b3:7b:f6:1c:c2:04: 3d:70:e0:96:2f:82:c4:16:5a:58:6e:3d:d4:95:5f: f1:f5:96:74:b6:70:66:39:b0:a4:bd:a8:a3:32:89: 61:9d:3c:40:fb:fe:cc:06:16:1b:ea:15:4a:b7:d5: 27:68:7f:f5:69:65:4e:5b:db:41:78:5f:ab:d5:be: e4:96:d2:18:9a:34:05:ef:21:18:04:60:ff:63:3d: fe:63:06:f6:8b:de:44:84:84:a1:e6:10:51:0e:44: 2d:5e:5d:8c:5a:83:26:15:00:18:8f:f6:d3:54:73: 88:87:ad:62:71:64:06:57:e3:ac:dc:23:a5:cb:58: 15:20:77:de:ef:ac:43:ac:80:8a:4e:75:1d:97:39: 07:ca:48:c3:4a:7d:73:c3:62:23:2e:94:76:b7:33: 02:4c:5a:ff:bd:67:d1:92:2c:1d:63:0f:75:69:84: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:0B:4C:3E:FD:0A:A8:B4:91:CA:69:2E:B7:F4:28:E0:18:0C:29 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:62:a9:f1:8f:f4:ba:d6:e3:b0:52:0d:ea:1b:4f:4b:e6:b7: cb:4a:05:6e:6e:5c:cd:f7:9d:5c:56:c3:f0:54:9e:a4:e6:2b: 5e:54:85:66:b5:37:5f:41:84:0e:cd:a1:c3:07:2c:b5:21:5a: 3b:1f:7c:56:31:c5:fd:cc:79:28:72:4d:a3:e3:59:89:0d:f1: 5c:a1:8d:e2:64:e9:0d:03:8c:84:04:80:21:61:34:88:b2:65: 70:62:68:11:35:16:c3:4f:b8:66:22:a6:34:4f:16:f6:62:be: 39:1a:0e:43:b1:4f:f3:39:e0:77:bc:f6:ab:b5:20:a2:1e:10: fc:88:10:d9:f7:36:67:33:72:1d:47:9b:62:f5:91:f2:db:d1: 32:b3:01:f1:27:71:67:2c:0b:4e:2f:d6:ad:03:0e:da:df:8b: 95:7c:ba:32:13:12:3f:a8:2b:c4:88:98:e5:b1:27:d8:17:84: 29:55:76:74:d3:03:c3:42:f6:14:6b:72:4d:08:4d:54:57:75: d4:e1:5d:c9:41:5b:4b:fd:b3:e5:f0:5c:75:0f:12:d1:cf:20: 04:dd:26:c8:78:21:1a:dc:fb:6e:d5:9d:91:38:57:20:a1:e9: ee:c9:a4:13:a8:09:69:b0:83:99:01:5b:50:1e:95:92:e7:c9: 6e:7d:0a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwMzAyMDE1NzE4WhcNMjYwMzA5MDE1NzE4WjAYMRYwFAYD VQQDEw02OWE0ZWU3Zi01NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUxDcImXIupBiOTVdFLriMzqsbDF7rRbdK08yYr36RlS6cPaAqIh6zuzBF+K zkZKkh5v+uujVxe57M7XH4fFMiPhR9Dnie+eopcSufPklDRgy/qze/YcwgQ9cOCW L4LEFlpYbj3UlV/x9ZZ0tnBmObCkvaijMolhnTxA+/7MBhYb6hVKt9UnaH/1aWVO W9tBeF+r1b7kltIYmjQF7yEYBGD/Yz3+Ywb2i95EhISh5hBRDkQtXl2MWoMmFQAY j/bTVHOIh61icWQGV+Os3COly1gVIHfe76xDrICKTnUdlzkHykjDSn1zw2IjLpR2 tzMCTFr/vWfRkiwdYw91aYSN/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0nC0w+ /QqotJHKaS639CjgGAwpMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd2Kp8Y/0utbjsFIN6htPS+a3y0oFbm5czfedXFbD8FSepOYrXlSFZrU3X0GE Ds2hwwcstSFaOx98VjHF/cx5KHJNo+NZiQ3xXKGN4mTpDQOMhASAIWE0iLJlcGJo ETUWw0+4ZiKmNE8W9mK+ORoOQ7FP8zngd7z2q7Ugoh4Q/IgQ2fc2ZzNyHUebYvWR 8tvRMrMB8SdxZywLTi/WrQMO2t+LlXy6MhMSP6grxIiY5bEn2BeEKVV2dNMDw0L2 FGtyTQhNVFd11OFdyUFbS/2z5fBcdQ8S0c8gBN0myHghGtz7btWdkThXIKHp7smk E6gJabCDmQFbUB6VkufJbn0Kwg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:24 2026 by rpki-client