$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft File: tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json) Hash identifier: 36QafA0SDpURUpqjZSgQL1sG1hK70p6ve6v/hvn81Oo= Subject key identifier: A7:B2:36:A3:42:5E:E7:C3:D2:51:44:D2:53:60:E1:54:A0:9A:93:6B Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 Certificate issuer: /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft Manifest number: 52 Signing time: Sun 01 Mar 2026 09:36:00 +0000 Manifest this update: Sun 01 Mar 2026 09:35:59 +0000 Manifest next update: Sun 08 Mar 2026 09:35:59 +0000 Files and hashes: 1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: /O631P1NcwJso4rxCXBA36PedfSTFRGISnAXEtk9g90=) 2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: 3U7vBnQl/Kdt2pXpdCyuzs/qAnaveVs4aYr8QCEMg6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2 Validity Not Before: Mar 1 09:35:59 2026 GMT Not After : Mar 8 09:35:59 2026 GMT Subject: CN=69a40880-b858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:48:9b:59:01:9b:3e:5c:7d:9d:f1:be:bd: e1:f1:62:aa:52:3a:fc:b7:b6:64:c9:50:a8:51:f0: b7:c0:1f:bb:5e:b9:c6:1d:a9:23:32:e3:95:33:54: 93:8f:17:fc:d9:a1:58:d8:f3:fd:e2:24:ac:1b:16: 45:5b:bf:2d:9a:36:03:7f:42:92:bc:59:c3:3f:f0: f5:eb:85:b8:91:46:d2:d7:ca:8b:45:b2:83:0e:75: be:e6:e0:0d:7f:5d:2e:9b:50:02:77:51:a7:0d:3d: 3c:90:fa:c4:71:c9:f3:39:c3:f5:8c:d8:23:c2:3b: 49:f1:d2:1e:46:de:5b:0b:d9:3a:e5:95:d7:85:1a: 0a:1f:36:b0:cb:82:bd:b0:51:2b:73:9b:b0:ba:9c: a9:5a:87:8a:9e:4a:c6:23:d5:fb:2e:d7:26:a2:5d: 7e:0a:01:6f:a5:65:69:ce:71:d4:44:e8:a5:7e:bb: 92:24:85:93:32:25:5f:0a:32:2d:08:97:9e:b3:2a: 81:6b:19:7f:3c:f0:5c:28:34:fd:b1:f1:4e:5b:48: b3:ff:9c:1e:f0:b2:04:78:f4:ef:7e:de:5d:b5:5b: 05:0f:45:fd:07:6c:8b:cd:5b:f9:9f:fe:2a:2c:88: 75:7a:ab:fe:26:1e:58:73:4d:3e:13:71:5e:4c:9a: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B2:36:A3:42:5E:E7:C3:D2:51:44:D2:53:60:E1:54:A0:9A:93:6B X509v3 Authority Key Identifier: keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:67:75:11:fe:48:2e:c6:f0:3e:e0:82:f9:6c:e0:89:c9: 12:fe:ce:13:ec:44:73:d6:f3:d5:47:ae:3e:e7:97:f2:be:bb: 01:87:8c:0f:9f:8d:f4:76:8c:ac:3e:9c:b1:50:e3:f1:01:ef: 95:33:7d:21:79:05:a2:72:da:32:71:aa:4f:61:c7:72:09:14: 9a:7f:55:55:6f:67:5d:27:e0:e8:1b:9e:0e:dd:cb:42:42:05: 10:78:7b:4d:87:a8:c7:0f:da:41:1a:9c:c2:4e:a0:c1:91:2d: 37:84:fc:98:32:5b:32:10:a5:a6:ad:2a:cb:e2:d3:c4:8a:72: b6:ef:a3:4a:c8:6d:4f:fd:3c:b2:c4:0f:29:4c:ff:d1:af:26: 0e:6c:20:92:ac:10:25:51:c4:81:f9:ab:c2:b4:92:a1:6f:f9: e0:ce:07:72:73:14:cc:51:18:88:99:86:34:9c:82:a9:cc:f0: 59:e9:28:d7:3b:99:c0:c6:77:52:0f:f1:d8:51:5e:cb:ea:45: 55:fb:4e:58:3e:df:16:cc:dc:46:58:a4:0d:2d:64:2e:cf:3e: 83:d6:23:dc:2d:a8:8d:88:81:02:4c:e0:58:21:8d:2d:29:26: 6e:60:6e:9e:17:e7:fd:5c:fa:1d:c6:12:af:c1:ae:f5:74:8c: 9b:7e:69:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTkyODExMC8GA1UEBRMoQjVCMzVGOTI0RUI1QzMyRkJCNDE4NjdEM0ExNjZFNEE5 NkJCRUNBMjAeFw0yNjAzMDEwOTM1NTlaFw0yNjAzMDgwOTM1NTlaMBgxFjAUBgNV BAMTDTY5YTQwODgwLWI4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXl0ibWQGbPlx9nfG+veHxYqpSOvy3tmTJUKhR8LfAH7teucYdqSMy45UzVJOP F/zZoVjY8/3iJKwbFkVbvy2aNgN/QpK8WcM/8PXrhbiRRtLXyotFsoMOdb7m4A1/ XS6bUAJ3UacNPTyQ+sRxyfM5w/WM2CPCO0nx0h5G3lsL2TrlldeFGgofNrDLgr2w UStzm7C6nKlah4qeSsYj1fsu1yaiXX4KAW+lZWnOcdRE6KV+u5IkhZMyJV8KMi0I l56zKoFrGX888FwoNP2x8U5bSLP/nB7wsgR49O9+3l21WwUPRf0HbIvNW/mf/ios iHV6q/4mHlhzTT4TcV5Mmtc1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp7I2o0Je 58PSUUTSU2DhVKCak2swHwYDVR0jBBgwFoAUtbNfkk61wy+7QYZ9OhZuSpa77KIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5OTI4LzU3REZCRUJDOTg0 RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdL SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGJOZmtrNjF3eS03UVlaOU9oWnVTcGE3N0tJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 OTI4LzU3REZCRUJDOTg0RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3kt N1FZWjlPaFp1U3BhNzdLSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJg2d1Ef5ILsbwPuCC+WzgickS/s4T7ERz1vPVR64+55fyvrsBh4wPn430doys PpyxUOPxAe+VM30heQWictoycapPYcdyCRSaf1VVb2ddJ+DoG54O3ctCQgUQeHtN h6jHD9pBGpzCTqDBkS03hPyYMlsyEKWmrSrL4tPEinK276NKyG1P/TyyxA8pTP/R ryYObCCSrBAlUcSB+avCtJKhb/ngzgdycxTMURiImYY0nIKpzPBZ6SjXO5nAxndS D/HYUV7L6kVV+05YPt8WzNxGWKQNLWQuzz6D1iPcLaiNiIECTOBYIY0tKSZuYG6e F+f9XPodxhKvwa71dIybfmlV -----END CERTIFICATE-----Generated at Mon Mar 2 06:25:34 2026 by rpki-client