$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: SwETEEjTGvv8lY2m2lmMYw1aZinZfKFOsEAE4AJXEjw= Subject key identifier: 12:BC:CC:F6:97:E2:A2:02:29:6A:A4:86:89:CB:8D:38:AE:0B:F0:A2 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0D61 Signing time: Mon 02 Mar 2026 00:53:57 +0000 Manifest this update: Mon 02 Mar 2026 00:53:56 +0000 Manifest next update: Mon 09 Mar 2026 00:53:56 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: dUKtZ0Nl43v5yQCZq7eMN1OzhQsq7BOKChC8zADxFdo=) 2: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: V07yp4azfzM5YFQd3DFJvRMzAViuDBC6g0jJfgu6wvI=) 3: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: 1qbYu5KRZI3rxH4kzvhF/miC5oW7IXAqReX/2/VUDaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Mar 2 00:53:56 2026 GMT Not After : Mar 9 00:53:56 2026 GMT Subject: CN=69a4dfa5-2ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:cc:3e:ea:a0:c7:c6:87:96:8c:4c:f9:78: eb:79:53:69:72:e4:af:f0:75:d2:72:9d:1f:f2:36: 83:67:a4:f8:0f:2e:f9:2c:34:d9:bb:5f:e6:63:e6: 43:d4:b5:8d:1f:ab:23:16:c8:cb:bb:69:cc:a2:e5: e5:dc:70:b8:36:91:58:91:fa:29:79:4d:7d:5c:b6: 02:63:73:2e:fb:fc:7d:91:b9:80:18:ba:cc:f0:c7: 6d:5d:ee:7f:bc:42:59:5e:26:37:b0:36:01:df:3b: e9:43:ef:54:4d:ad:da:b2:c0:0d:88:1d:c7:e3:a2: ff:b1:ba:69:e3:e9:1a:12:b2:c8:fe:b9:0b:d3:e3: b2:a4:2b:db:ee:67:83:51:10:de:10:ea:1f:0c:ff: 92:f6:e7:de:91:b3:b5:89:d6:0e:67:1f:97:3a:ca: 56:4a:b9:4d:6e:f8:57:77:cc:aa:de:28:f3:9c:f8: ed:b3:37:66:8a:ac:a5:c2:c1:99:62:7f:fa:97:48: f9:95:f9:99:de:ed:a3:8b:92:62:e8:85:f5:9d:4e: 19:b3:e7:ad:11:62:97:4f:e5:bc:4c:33:fe:54:f3: 78:3e:10:9c:8e:e0:3a:26:ec:85:b1:8e:c1:f6:6a: 7e:57:b1:37:81:5f:d8:b3:88:d8:9d:42:f3:32:8f: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BC:CC:F6:97:E2:A2:02:29:6A:A4:86:89:CB:8D:38:AE:0B:F0:A2 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:af:ca:b3:b9:14:00:48:ff:75:58:91:f7:06:5b:49:36: 9a:71:9f:18:fb:da:14:5a:be:84:7c:b6:b7:42:44:3e:6b:ba: fe:32:a9:6e:38:b4:ec:e1:d9:e5:6e:9d:b0:26:ac:c9:fc:c5: 7f:57:2c:3d:86:f2:f9:21:84:1f:62:9f:65:b3:c6:6b:3e:a0: c7:e0:62:63:b6:07:13:18:a9:87:d8:64:97:75:5f:a8:e4:b6: 21:1a:72:21:45:c2:6b:30:bd:8d:3e:ab:ab:96:5a:04:ff:06: 1e:1d:25:b8:97:f5:99:6f:e7:ad:ba:bd:18:0f:b9:44:34:94: d2:9b:6a:d1:78:38:94:05:46:b0:53:9a:c6:9e:e1:b9:f9:c0: d3:fa:54:dc:e3:00:f3:50:90:3c:d4:ec:c7:c7:91:e0:8f:33: dd:c5:ee:0b:b9:bf:bb:de:7d:22:ce:b1:fe:ed:ca:9c:f6:83: 84:18:7a:41:de:42:d0:e7:ec:c7:79:71:64:29:13:ce:49:93: c9:4b:53:e8:fa:6d:f9:78:f9:44:4b:78:ba:12:31:99:8c:e5: 1c:ec:ab:45:62:4a:41:c5:99:35:c2:26:87:36:7f:67:1c:a5: bc:be:40:50:99:8f:f8:63:f5:f2:eb:54:f5:ec:19:67:de:76: ba:ec:96:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwMzAyMDA1MzU2WhcNMjYwMzA5MDA1MzU2WjAYMRYwFAYD VQQDEw02OWE0ZGZhNS0yYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh8rMPuqgx8aHloxM+XjreVNpcuSv8HXScp0f8jaDZ6T4Dy75LDTZu1/mY+ZD 1LWNH6sjFsjLu2nMouXl3HC4NpFYkfopeU19XLYCY3Mu+/x9kbmAGLrM8MdtXe5/ vEJZXiY3sDYB3zvpQ+9UTa3assANiB3H46L/sbpp4+kaErLI/rkL0+OypCvb7meD URDeEOofDP+S9ufekbO1idYOZx+XOspWSrlNbvhXd8yq3ijznPjtszdmiqylwsGZ Yn/6l0j5lfmZ3u2ji5Ji6IX1nU4Zs+etEWKXT+W8TDP+VPN4PhCcjuA6JuyFsY7B 9mp+V7E3gV/Ys4jYnULzMo9L/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBK8zPaX 4qICKWqkhonLjTiuC/CiMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfSevyrO5FABI/3VYkfcGW0k2mnGfGPvaFFq+hHy2t0JEPmu6/jKpbji07OHZ 5W6dsCasyfzFf1csPYby+SGEH2KfZbPGaz6gx+BiY7YHExiph9hkl3VfqOS2IRpy IUXCazC9jT6rq5ZaBP8GHh0luJf1mW/nrbq9GA+5RDSU0ptq0Xg4lAVGsFOaxp7h ufnA0/pU3OMA81CQPNTsx8eR4I8z3cXuC7m/u959Is6x/u3KnPaDhBh6Qd5C0Ofs x3lxZCkTzkmTyUtT6Ppt+Xj5REt4uhIxmYzlHOyrRWJKQcWZNcImhzZ/ZxylvL5A UJmP+GP18utU9ewZZ952uuyWJA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:57:37 2026 by rpki-client