$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft File: tpVKYo70-TShCnBay8uQbtYQSAw.mft (raw, json) Hash identifier: 9GvHRAohvSu3wxMrFqWIQdDjehCptED6nVklhA6JizE= Subject key identifier: 45:E7:56:10:33:BA:FB:A1:FB:38:25:2B:E3:88:F9:C3:67:F0:7D:F6 Authority key identifier: B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C Certificate issuer: /CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C Certificate serial: 0C1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft Manifest number: 0C11 Signing time: Mon 02 Mar 2026 00:11:41 +0000 Manifest this update: Mon 02 Mar 2026 00:11:39 +0000 Manifest next update: Mon 09 Mar 2026 00:11:39 +0000 Files and hashes: 1: tpVKYo70-TShCnBay8uQbtYQSAw.crl (hash: /9t1QyzcqyygjgAQrOrBSmN3r5HDvbcLYc7io6G21ig=) 2: 5E117DC82AFC11EAB5FEC955C4F9AE02.roa (hash: EyRtY8sGXhVLDI0pwCgdo02VTIkeCLp4JlBiXWPGscw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3102 (0xc1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE43E, serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C Validity Not Before: Mar 2 00:11:39 2026 GMT Not After : Mar 9 00:11:39 2026 GMT Subject: CN=69a4d5bd-4aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:15:c5:5a:ea:97:04:94:8b:99:3e:8c:de: 7b:80:22:fc:a1:5e:dd:38:71:33:76:bb:44:59:9e: c4:a2:5a:2c:55:df:d1:5e:a2:d2:ed:6c:e4:e0:b8: b0:0b:6d:b4:18:c3:9d:49:a3:ed:74:bd:5c:9c:91: 89:1f:64:68:2f:3c:5e:d4:c7:ad:fe:68:1b:86:90: b7:28:b1:34:67:dd:e5:6d:f3:6f:6b:02:a1:d9:00: e8:5a:e4:30:19:01:14:c1:d5:f5:e3:bf:48:a1:28: 9c:cc:74:6d:49:a7:4e:99:a0:ed:29:cc:d5:80:7f: 7d:00:fa:e8:32:31:28:a3:91:0f:a3:1f:7b:c5:8c: 28:b3:47:6b:fd:51:b3:88:1a:5a:98:11:58:0c:eb: 82:17:60:07:2b:18:36:c7:2f:0a:e1:89:5c:ec:31: e2:3f:36:c9:de:19:8e:ba:dc:7c:33:f2:db:56:0a: 57:91:f0:27:0b:2c:53:2e:a6:79:0e:30:5a:35:65: 6d:be:28:f9:71:b3:69:2e:86:26:54:db:c7:6f:83: a6:71:8e:e5:ad:14:14:ab:63:f2:27:ed:88:55:e5: 48:df:e8:d3:05:a9:0b:a7:99:8a:45:34:f5:79:1e: 44:e1:0e:5e:4b:ea:58:f7:bc:6c:af:e9:af:36:88: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E7:56:10:33:BA:FB:A1:FB:38:25:2B:E3:88:F9:C3:67:F0:7D:F6 X509v3 Authority Key Identifier: keyid:B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:62:55:c9:42:a4:45:34:03:a7:0f:88:97:32:5b:d2:5e:91: d3:ae:9a:3e:09:98:40:dc:34:73:00:e8:05:47:68:49:49:bf: 5b:68:a5:56:41:77:4c:4d:06:7f:39:41:59:ce:77:a7:22:df: c2:ce:b6:16:96:d4:57:d9:ba:4f:18:14:a2:9a:83:d7:67:34: 37:c8:78:40:80:f0:e3:ee:19:25:3f:38:8b:57:c6:a6:62:d5: 89:05:97:0c:14:4b:f5:a4:29:7e:ee:1c:64:d5:72:8b:c3:65: bb:3c:2f:9f:1e:d3:b2:88:1f:98:9f:cd:ce:67:e8:62:b5:31: c7:4b:6e:f8:e8:d2:8b:1a:34:cf:78:09:85:f2:74:1b:8a:bb: f0:75:68:c9:d1:64:fd:8e:cd:1c:93:f4:f8:28:6d:c6:fd:8a: 44:07:52:41:68:97:7a:63:ce:0f:b7:7b:84:68:0c:33:d2:5f: 5a:e7:12:63:96:ef:f4:e0:6e:b3:95:3b:a1:43:14:68:6d:39: a4:cf:f7:67:83:fa:70:55:00:4a:88:2c:b8:4a:6f:8c:6a:c2: d5:26:62:f4:c6:52:82:e8:01:42:54:1d:f4:69:eb:80:4a:36: e2:f0:39:13:78:e8:6f:c9:70:f4:76:bb:88:b8:84:d2:a4:dd: ff:c7:e1:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0M0UxMTAvBgNVBAUTKEI2OTU0QTYyOEVGNEY5MzRBMTBBNzA1QUNCQ0I5MDZF RDYxMDQ4MEMwHhcNMjYwMzAyMDAxMTM5WhcNMjYwMzA5MDAxMTM5WjAYMRYwFAYD VQQDEw02OWE0ZDViZC00YWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/UVxVrqlwSUi5k+jN57gCL8oV7dOHEzdrtEWZ7EolosVd/RXqLS7Wzk4Liw C220GMOdSaPtdL1cnJGJH2RoLzxe1Met/mgbhpC3KLE0Z93lbfNvawKh2QDoWuQw GQEUwdX1479IoSiczHRtSadOmaDtKczVgH99AProMjEoo5EPox97xYwos0dr/VGz iBpamBFYDOuCF2AHKxg2xy8K4Ylc7DHiPzbJ3hmOutx8M/LbVgpXkfAnCyxTLqZ5 DjBaNWVtvij5cbNpLoYmVNvHb4OmcY7lrRQUq2PyJ+2IVeVI3+jTBakLp5mKRTT1 eR5E4Q5eS+pY97xsr+mvNojfOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXnVhAz uvuh+zglK+OI+cNn8H32MB8GA1UdIwQYMBaAFLaVSmKO9Pk0oQpwWsvLkG7WEEgM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTQzRS9DQzAzRkJCODJB RkIxMUVBOERGMzdENTVDNEY5QUUwMi90cFZLWW83MC1UU2hDbkJheTh1UWJ0WVFT QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RwVktZbzcwLVRTaENuQmF5OHVRYnRZUVNBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTQzRS9DQzAzRkJCODJBRkIxMUVBOERGMzdENTVDNEY5QUUwMi90cFZLWW83MC1U U2hDbkJheTh1UWJ0WVFTQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWJVyUKkRTQDpw+IlzJb0l6R066aPgmYQNw0cwDoBUdoSUm/W2ilVkF3TE0G fzlBWc53pyLfws62FpbUV9m6TxgUopqD12c0N8h4QIDw4+4ZJT84i1fGpmLViQWX DBRL9aQpfu4cZNVyi8Nluzwvnx7TsogfmJ/NzmfoYrUxx0tu+OjSixo0z3gJhfJ0 G4q78HVoydFk/Y7NHJP0+Chtxv2KRAdSQWiXemPOD7d7hGgMM9JfWucSY5bv9OBu s5U7oUMUaG05pM/3Z4P6cFUASogsuEpvjGrC1SZi9MZSgugBQlQd9GnrgEo24vA5 E3job8lw9Ha7iLiE0qTd/8fhiA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:41 2026 by rpki-client