$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft File: TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json) Hash identifier: P+w/AzZkWoCGrifxtw5mvDJ0bI2JMpWjIknmZJicMS8= Subject key identifier: 0E:C4:EB:8C:64:B3:BC:54:A0:A3:40:F5:7C:35:00:4F:75:72:7A:AD Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft Manifest number: 014C Signing time: Sun 01 Mar 2026 06:11:32 +0000 Manifest this update: Sun 01 Mar 2026 06:11:32 +0000 Manifest next update: Sun 08 Mar 2026 06:11:32 +0000 Files and hashes: 1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: jmFG7J4/tTr19wyNUruETldwz9EN7eeIqCXVeWv9B3s=) 2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: DqAscZot5tvFIRSwhun0FkboyMxWikjQ2XKpTFYg9ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Mar 1 06:11:32 2026 GMT Not After : Mar 8 06:11:32 2026 GMT Subject: CN=69a3d894-9a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:98:4b:62:60:f4:28:5d:5d:60:a0:fd:cb: 26:c4:58:94:7b:31:3d:f9:0a:27:ca:eb:93:5f:da: 2c:f8:a3:eb:f1:f4:2d:e0:04:8d:c9:16:d6:1d:e0: d4:72:0a:c9:b7:d4:b7:2a:1b:7f:e3:40:97:51:8a: 12:15:df:44:32:c3:05:ba:ab:95:0a:fa:93:1f:96: e6:62:a5:dd:f2:e8:3e:28:2b:54:e7:d4:7e:b9:d5: 73:0b:b2:93:b5:09:25:98:a1:df:d7:b1:95:23:c5: 90:f9:cb:ea:87:7f:3a:bf:4a:a4:4c:6a:eb:64:1d: c3:db:77:21:94:e0:fa:e0:35:27:4f:02:2e:fe:9c: 1b:b3:4c:67:e0:f7:7d:8c:40:9d:b0:91:b7:4f:54: 84:7e:9f:e6:33:30:51:34:93:db:10:9d:14:91:5c: a9:c8:32:47:c9:22:80:38:9b:d8:25:9b:8a:a7:06: cd:a6:56:0c:5d:43:b9:42:0b:4f:ea:58:23:e9:a1: 4a:55:7c:ee:65:46:96:13:64:56:17:82:89:95:d1: b6:13:c3:bb:70:ea:62:36:14:98:8d:d5:a6:3c:7f: 58:8b:f8:0e:76:f0:a7:50:3e:4f:e1:24:aa:e1:ef: d1:57:ac:cc:aa:8a:5d:04:f2:61:b6:2f:f2:d9:b1: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:EB:8C:64:B3:BC:54:A0:A3:40:F5:7C:35:00:4F:75:72:7A:AD X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1e:23:d3:f2:4e:4b:5a:77:7a:82:c4:80:3f:5e:8d:46:3b: 9c:59:70:ae:45:87:a4:14:e4:75:48:14:f2:e6:56:b6:db:07: 4c:53:3e:9b:3a:6c:f5:f1:49:d7:ac:c2:22:68:a2:eb:8c:3a: 01:a9:e0:55:53:02:ca:9c:49:1a:2f:ae:46:11:e1:f8:d1:67: e9:4f:37:30:c6:5e:dd:f2:fd:4e:a8:bd:f1:70:ef:f5:87:0d: 12:36:08:a6:80:4b:64:a7:43:28:ad:ac:4f:3f:3a:e0:46:91: b9:0f:f3:89:c9:5d:73:c1:6b:4f:37:c7:44:83:87:f7:bc:9c: 62:76:65:f6:0a:03:b6:b4:b2:df:52:48:18:99:eb:63:fa:4b: b4:bc:7a:45:fd:44:eb:a2:41:f6:fb:3f:de:19:e7:95:72:11: 58:e4:e8:2f:9d:e1:ee:40:54:30:e2:20:19:e1:82:35:c6:da: 68:20:f0:76:ef:5b:d6:32:f2:0e:ff:66:b3:b3:65:49:33:e6: 78:40:62:2d:48:c2:ae:82:36:96:7a:9d:6b:4b:ec:b5:df:c3: 40:55:43:7c:bd:3b:97:bf:9c:3d:7a:7d:6c:8c:5f:e6:08:24: a9:49:55:2f:d1:7c:96:f2:13:76:19:02:95:82:66:7e:60:0d: 90:22:eb:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjYwMzAxMDYxMTMyWhcNMjYwMzA4MDYxMTMyWjAYMRYwFAYD VQQDEw02OWEzZDg5NC05YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcWYS2Jg9ChdXWCg/csmxFiUezE9+QonyuuTX9os+KPr8fQt4ASNyRbWHeDU cgrJt9S3Kht/40CXUYoSFd9EMsMFuquVCvqTH5bmYqXd8ug+KCtU59R+udVzC7KT tQklmKHf17GVI8WQ+cvqh386v0qkTGrrZB3D23chlOD64DUnTwIu/pwbs0xn4Pd9 jECdsJG3T1SEfp/mMzBRNJPbEJ0UkVypyDJHySKAOJvYJZuKpwbNplYMXUO5QgtP 6lgj6aFKVXzuZUaWE2RWF4KJldG2E8O7cOpiNhSYjdWmPH9Yi/gOdvCnUD5P4SSq 4e/RV6zMqopdBPJhti/y2bG1kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7E64xk s7xUoKNA9Xw1AE91cnqtMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm UVozelBmc0dpRndjTklpeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKB4j0/JOS1p3eoLEgD9ejUY7nFlwrkWHpBTkdUgU8uZWttsHTFM+mzps9fFJ 16zCImii64w6AangVVMCypxJGi+uRhHh+NFn6U83MMZe3fL9Tqi98XDv9YcNEjYI poBLZKdDKK2sTz864EaRuQ/zicldc8FrTzfHRIOH97ycYnZl9goDtrSy31JIGJnr Y/pLtLx6Rf1E66JB9vs/3hnnlXIRWOToL53h7kBUMOIgGeGCNcbaaCDwdu9b1jLy Dv9ms7NlSTPmeEBiLUjCroI2lnqda0vstd/DQFVDfL07l7+cPXp9bIxf5ggkqUlV L9F8lvITdhkClYJmfmANkCLr8A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:23 2026 by rpki-client