$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: aKVlhAYAAj6/VZ7+FyT189XEwqInHUjA04S4qCyExaI= Subject key identifier: C5:CE:51:24:FD:54:65:CF:EE:04:CC:8F:40:B8:CC:B2:A6:FE:6D:6B Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 0236 Signing time: Sun 01 Mar 2026 03:33:30 +0000 Manifest this update: Sun 01 Mar 2026 03:33:29 +0000 Manifest next update: Sun 08 Mar 2026 03:33:29 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: a2DuTbdWk3NYPvzCGh49vC+fJDAxu7bN9YT0Tig8RYU=) 2: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: g8h4AuAjSU2htCTyorJM2XPUCNXDA6cYYOZOcIV/cZY=) 3: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: Ah9DA9XDU6AgPBrVhyRA7IEj119ByF47rhFGR96tGKc=) 4: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: mJLvR1p4ts88KkpVKKt2PVk1iLkTAtrbOa4ytntbS6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Mar 1 03:33:29 2026 GMT Not After : Mar 8 03:33:29 2026 GMT Subject: CN=69a3b38a-733b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:52:85:47:2e:1a:6a:88:b9:40:af:a0:49: 2d:09:e5:10:d7:25:ef:96:57:17:87:9f:37:6a:00: d4:fb:2d:6c:c6:8e:ff:31:5b:17:75:8f:7e:d4:5a: 02:f9:90:eb:14:3a:d1:d0:df:88:50:f4:69:db:89: a1:bc:38:73:46:cf:9c:a2:80:3c:c8:82:90:c4:ee: 84:ca:b2:04:60:28:8b:36:05:4e:ff:35:bf:4e:e2: 1e:93:72:af:4d:a0:0e:ec:4a:41:dc:cd:ba:4c:70: 3d:db:e8:1c:64:72:6a:dd:d8:b3:5d:bb:9d:cf:1c: 80:df:45:ab:a8:02:da:64:7f:47:9b:1a:99:3b:e8: e2:cb:29:06:68:2a:2e:0c:97:33:a5:5a:b1:0c:1a: 98:85:b4:d4:c7:91:86:3a:a3:0b:d6:20:ad:68:7b: 60:e5:bc:1f:44:fc:3d:f9:fa:e5:25:fe:b4:e4:21: 8a:14:bc:ec:7b:4c:75:51:4c:bf:9e:7e:54:3e:70: 92:7e:77:e9:63:0b:a0:1f:ac:22:c0:04:04:d1:11: fb:04:af:55:ae:7f:15:35:2b:82:2e:2d:e4:bd:0e: 85:e8:75:5b:d8:91:34:c1:10:51:50:61:54:2d:61: be:30:eb:9b:71:9b:e0:38:b8:86:ed:3b:73:0b:f4: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CE:51:24:FD:54:65:CF:EE:04:CC:8F:40:B8:CC:B2:A6:FE:6D:6B X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6d:4b:91:2f:16:40:c4:62:eb:de:e7:c5:53:5b:ed:23:67: 3a:b2:ef:34:5e:da:ff:e8:be:3b:7b:a7:c8:11:7b:19:2e:1d: 1a:ec:f7:47:be:6d:af:3f:62:28:48:b8:c6:61:d9:9a:61:1c: 25:34:e1:9a:68:c5:3e:70:89:46:a4:a5:88:ef:f2:e9:69:5e: 90:28:20:c1:03:54:59:9a:7d:bc:57:a8:92:b5:75:86:c8:bf: 52:5e:c1:d3:49:b3:17:b0:71:79:de:0d:f6:b7:e7:3d:41:6b: d6:14:e1:52:eb:3f:92:7d:35:83:53:36:29:6b:8d:5d:f0:58: eb:9a:a2:a2:ce:ce:9e:96:2f:78:05:80:e8:1c:56:c6:5f:eb: ed:f5:dc:3c:01:53:1c:d3:65:69:5b:d6:80:ab:d0:51:40:a6: 98:1b:ea:c0:bd:4a:a5:c0:5c:f5:40:a8:1a:a7:c6:3d:6e:20: 43:bc:59:49:08:c2:93:b8:2d:13:4c:8b:eb:e8:6a:86:e1:58: 78:4f:81:3f:5e:78:22:16:9c:93:4b:89:62:50:c3:07:9d:92: ee:66:cb:d3:32:3d:0d:5e:28:b0:17:ea:32:32:46:d3:86:7b: 63:68:dc:d5:42:7f:fe:2c:c8:2c:37:65:c2:b0:da:eb:b6:df: d3:62:fe:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYwMzAxMDMzMzI5WhcNMjYwMzA4MDMzMzI5WjAYMRYwFAYD VQQDDA02OWEzYjM4YS03MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskZShUcuGmqIuUCvoEktCeUQ1yXvllcXh583agDU+y1sxo7/MVsXdY9+1FoC +ZDrFDrR0N+IUPRp24mhvDhzRs+cooA8yIKQxO6EyrIEYCiLNgVO/zW/TuIek3Kv TaAO7EpB3M26THA92+gcZHJq3dizXbudzxyA30WrqALaZH9HmxqZO+jiyykGaCou DJczpVqxDBqYhbTUx5GGOqML1iCtaHtg5bwfRPw9+frlJf605CGKFLzse0x1UUy/ nn5UPnCSfnfpYwugH6wiwAQE0RH7BK9Vrn8VNSuCLi3kvQ6F6HVb2JE0wRBRUGFU LWG+MOubcZvgOLiG7TtzC/T+WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXOUST9 VGXP7gTMj0C4zLKm/m1rMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANm1LkS8WQMRi697nxVNb7SNnOrLvNF7a/+i+O3unyBF7GS4dGuz3R75trz9i KEi4xmHZmmEcJTThmmjFPnCJRqSliO/y6WlekCggwQNUWZp9vFeokrV1hsi/Ul7B 00mzF7Bxed4N9rfnPUFr1hThUus/kn01g1M2KWuNXfBY65qios7OnpYveAWA6BxW xl/r7fXcPAFTHNNlaVvWgKvQUUCmmBvqwL1KpcBc9UCoGqfGPW4gQ7xZSQjCk7gt E0yL6+hqhuFYeE+BP154Ihack0uJYlDDB52S7mbL0zI9DV4osBfqMjJG04Z7Y2jc 1UJ//izILDdlwrDa67bf02L+Fw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:20 2026 by rpki-client