$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json) Hash identifier: XQFTY7gPlevRQsY/JIofv9Q2USk1k83fVfR/pgiRdUc= Subject key identifier: 0A:0E:95:E5:3E:BF:0B:78:D4:03:F5:97:63:AB:F7:99:C6:9B:BE:ED Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft Manifest number: 0436 Signing time: Sun 01 Mar 2026 01:04:54 +0000 Manifest this update: Sun 01 Mar 2026 01:04:53 +0000 Manifest next update: Sun 08 Mar 2026 01:04:53 +0000 Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: 1TbD9wXgYl5rYX+c22rAztGI8c8TVnUeXIgl1wmqPp0=) 2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: D0wo+x5/eI47vVGDL5twz0n4up2ZDNjTCVO1Xyw3jxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: Mar 1 01:04:53 2026 GMT Not After : Mar 8 01:04:53 2026 GMT Subject: CN=69a390b5-17aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:9a:6f:ef:ee:16:cf:6a:7f:af:9a:74:c9: 75:ec:45:73:9c:b2:4c:e1:e1:3b:2b:bd:ad:00:17: c2:e9:06:6a:fb:cb:d7:b5:85:59:22:22:67:f6:9e: f3:39:ad:b8:e3:89:3f:35:8c:eb:c8:19:f1:24:6f: 8a:88:12:bd:00:c8:bf:0c:ad:c5:89:a6:b6:5a:15: 39:94:e7:7b:17:58:f1:c2:7d:51:8f:61:81:eb:de: b7:36:e1:cf:8a:ac:e4:2b:49:ac:39:60:59:cd:1f: ce:a0:14:5a:21:48:22:ab:70:71:5d:c7:36:56:82: 7a:a6:8e:ae:1c:77:d1:f6:bc:be:3f:cd:d3:a2:40: 13:74:25:45:bc:c8:a2:d3:26:a6:6d:7f:d2:79:6b: b4:1b:95:5f:58:ba:5a:0c:3d:62:f2:31:19:10:cc: bc:73:72:c5:c8:07:06:9c:6d:8c:18:f2:78:75:40: e7:63:15:d7:c0:13:3a:4a:c7:e1:7d:9e:7e:ef:d1: 51:9d:62:c9:37:93:76:5b:67:93:04:fa:e7:34:6c: d3:b4:65:89:87:12:cd:e7:14:77:4f:7e:e2:89:6a: ac:9d:c0:03:4b:7f:3c:7c:5f:ef:08:af:f7:ee:4c: 61:0c:2f:09:cb:05:66:83:3b:cb:7a:9d:0a:0f:f7: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:95:E5:3E:BF:0B:78:D4:03:F5:97:63:AB:F7:99:C6:9B:BE:ED X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8e:92:cc:a8:62:15:be:49:e5:ea:32:14:76:af:12:31:17: aa:ec:d8:2e:f3:e9:8b:f2:85:84:be:02:92:89:52:8a:da:62: db:35:37:a3:bb:f7:83:73:3e:f6:99:cb:64:4e:96:b9:a7:f6: 60:aa:ee:43:fd:5d:18:14:a9:d0:10:3f:24:48:81:e0:bd:5c: b4:b0:5d:fd:e6:86:77:89:12:31:d5:6a:5d:8a:9f:a0:b4:ca: 26:80:73:36:19:b7:a5:b6:f4:7f:02:f6:de:7d:32:a4:2b:f4: 9d:0c:a6:f6:d8:82:75:ff:d4:c7:1c:3c:aa:a3:e4:88:1d:79: 66:3e:02:44:0b:05:f5:59:7e:74:17:e1:17:93:7a:b1:f2:17: 63:4b:d5:ae:a7:b6:cd:cc:e9:96:b5:76:58:0a:be:c7:86:56: 5e:d9:22:07:8c:06:e8:bf:80:92:ac:db:cf:54:45:4a:96:30: fe:2d:8e:09:97:12:b6:63:43:5e:bc:65:53:ed:07:2a:3a:ec: 25:5c:37:2e:34:32:02:f5:c8:12:c6:3e:7d:48:f9:05:75:2b: 14:a7:05:fa:5c:f1:fc:34:36:56:b3:4d:b4:55:54:13:da:fe: 65:9f:0b:01:3e:5c:0d:d7:b7:00:a4:d3:fe:b4:b0:b1:80:20: 9a:83:0e:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjYwMzAxMDEwNDUzWhcNMjYwMzA4MDEwNDUzWjAYMRYwFAYD VQQDDA02OWEzOTBiNS0xN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqKab+/uFs9qf6+adMl17EVznLJM4eE7K72tABfC6QZq+8vXtYVZIiJn9p7z Oa2444k/NYzryBnxJG+KiBK9AMi/DK3Fiaa2WhU5lOd7F1jxwn1Rj2GB6963NuHP iqzkK0msOWBZzR/OoBRaIUgiq3BxXcc2VoJ6po6uHHfR9ry+P83TokATdCVFvMii 0yambX/SeWu0G5VfWLpaDD1i8jEZEMy8c3LFyAcGnG2MGPJ4dUDnYxXXwBM6Ssfh fZ5+79FRnWLJN5N2W2eTBPrnNGzTtGWJhxLN5xR3T37iiWqsncADS388fF/vCK/3 7kxhDC8JywVmgzvLep0KD/de9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoOleU+ vwt41AP1l2Or95nGm77tMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh X1JMTFg2UGtpRjM4MkZBRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADY6SzKhiFb5J5eoyFHavEjEXquzYLvPpi/KFhL4CkolSitpi2zU3o7v3g3M+ 9pnLZE6Wuaf2YKruQ/1dGBSp0BA/JEiB4L1ctLBd/eaGd4kSMdVqXYqfoLTKJoBz Nhm3pbb0fwL23n0ypCv0nQym9tiCdf/Uxxw8qqPkiB15Zj4CRAsF9Vl+dBfhF5N6 sfIXY0vVrqe2zczplrV2WAq+x4ZWXtkiB4wG6L+Akqzbz1RFSpYw/i2OCZcStmND XrxlU+0HKjrsJVw3LjQyAvXIEsY+fUj5BXUrFKcF+lzx/DQ2VrNNtFVUE9r+ZZ8L AT5cDde3AKTT/rSwsYAgmoMOJQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:30 2026 by rpki-client