$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: dYYskjVUbwOOX1PYTOoSe7iDurQACaqU5IRb6hXgSRQ= Subject key identifier: 77:29:41:6D:FA:CD:D5:F9:7F:4B:F2:CA:86:2A:25:46:06:FB:30:B1 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 01AF Signing time: Mon 02 Mar 2026 01:17:14 +0000 Manifest this update: Mon 02 Mar 2026 01:17:13 +0000 Manifest next update: Mon 09 Mar 2026 01:17:13 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: sdepeDUbm4Q39Z6hN2k4omuzts++acLT4RaNldqYMp8=) 2: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE=) 3: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: /qNeMoHq2aNx85z5DTHQgQr12JfNKIytF+LLvQVIEvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Mar 2 01:17:13 2026 GMT Not After : Mar 9 01:17:13 2026 GMT Subject: CN=69a4e519-68db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:be:6a:85:0e:0a:c4:f6:65:74:d6:ce:af: 8c:ad:7e:f8:06:f9:a1:54:5f:cb:02:95:e5:1a:03: 2b:79:3f:aa:9f:1a:23:90:49:07:28:84:61:16:41: bc:1f:35:8f:11:ae:56:eb:b1:bb:42:50:41:2d:d2: 55:ca:74:fd:50:01:98:26:0a:d8:4e:44:51:d9:27: b7:7b:fa:02:57:09:e5:e6:c7:a8:6a:88:f7:e3:07: a5:18:00:55:88:da:f0:22:1b:78:13:3b:b9:1d:85: 0e:06:d4:4c:f8:c7:67:92:78:7e:3d:dd:07:59:3a: ec:e7:e1:de:70:d1:e3:d5:01:b9:50:b5:f1:5b:83: 8d:44:95:52:1a:31:14:a0:90:bd:1d:66:f7:c6:a8: e6:ff:62:f1:97:30:8b:86:37:bd:73:8f:38:de:4c: 55:9f:ad:22:09:11:1c:14:46:ca:1f:ea:24:9d:da: fe:84:1e:21:ce:9a:f6:24:ff:d6:bc:d9:aa:a1:e0: 16:bc:17:aa:5e:84:8d:bd:b1:28:96:af:9f:8a:d1: 0a:eb:75:65:d3:58:4c:94:a8:88:92:51:06:39:82: 5f:42:7f:63:21:3e:11:99:50:dd:94:a2:2a:a3:b3: f0:d1:0f:0c:58:ff:d0:08:f0:79:f1:a4:3d:25:bc: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:41:6D:FA:CD:D5:F9:7F:4B:F2:CA:86:2A:25:46:06:FB:30:B1 X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:31:cd:84:6a:13:75:3b:c0:d5:52:20:20:2c:8d:80:2d:ed: aa:e1:74:d5:31:0a:1e:d6:0b:a4:bb:d4:ee:18:9e:f8:08:2c: 49:08:bb:a4:d1:b5:f3:90:65:e6:a2:8b:8b:b5:0c:7b:c5:af: 2a:fb:98:c3:b8:65:f5:01:15:81:41:b6:8a:98:bf:84:14:cb: c6:f6:e5:d8:af:09:3b:51:f6:5d:b1:eb:2d:e5:fa:ed:bd:61: 87:1c:4d:7a:d0:79:1f:7d:95:7f:d8:66:64:1c:0b:8f:bf:2d: e3:89:7e:20:ed:77:aa:01:81:6b:a6:29:b1:66:3a:05:c7:47: 70:e0:54:e4:12:49:f7:28:da:7b:fa:d5:a4:06:a6:a4:2f:0e: 71:dc:06:71:5e:e8:2e:f7:9a:a9:82:46:4b:2f:a5:d0:e4:c6: f2:d4:8e:50:4e:0d:5c:6e:bc:ed:ff:4b:64:81:e6:c7:f2:35: fd:5d:11:96:9d:6a:35:f0:14:32:59:2a:75:6a:3f:0d:ba:09: 02:81:c0:1c:62:2e:c2:50:71:2f:28:59:e9:8d:b4:a5:b9:60: 6d:e8:63:06:48:86:37:75:6d:cf:c8:47:1d:ad:a7:bd:1e:8a: e3:1e:92:e1:4f:85:a4:54:b2:32:29:c9:a0:5f:6c:92:1a:5c: 2b:34:12:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjYwMzAyMDExNzEzWhcNMjYwMzA5MDExNzEzWjAYMRYwFAYD VQQDEw02OWE0ZTUxOS02OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwom+aoUOCsT2ZXTWzq+MrX74BvmhVF/LApXlGgMreT+qnxojkEkHKIRhFkG8 HzWPEa5W67G7QlBBLdJVynT9UAGYJgrYTkRR2Se3e/oCVwnl5seoaoj34welGABV iNrwIht4Ezu5HYUOBtRM+Mdnknh+Pd0HWTrs5+HecNHj1QG5ULXxW4ONRJVSGjEU oJC9HWb3xqjm/2LxlzCLhje9c4843kxVn60iCREcFEbKH+okndr+hB4hzpr2JP/W vNmqoeAWvBeqXoSNvbEolq+fitEK63Vl01hMlKiIklEGOYJfQn9jIT4RmVDdlKIq o7Pw0Q8MWP/QCPB58aQ9JbyAzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcpQW36 zdX5f0vyyoYqJUYG+zCxMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3 bXhicGwxQUc0U0pWSUZ5UFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMDHNhGoTdTvA1VIgICyNgC3tquF01TEKHtYLpLvU7hie+AgsSQi7pNG185Bl 5qKLi7UMe8WvKvuYw7hl9QEVgUG2ipi/hBTLxvbl2K8JO1H2XbHrLeX67b1hhxxN etB5H32Vf9hmZBwLj78t44l+IO13qgGBa6YpsWY6BcdHcOBU5BJJ9yjae/rVpAam pC8OcdwGcV7oLveaqYJGSy+l0OTG8tSOUE4NXG687f9LZIHmx/I1/V0Rlp1qNfAU MlkqdWo/DboJAoHAHGIuwlBxLyhZ6Y20pblgbehjBkiGN3Vtz8hHHa2nvR6K4x6S 4U+FpFSyMinJoF9skhpcKzQS1Q== -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:59 2026 by rpki-client