$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: elEPY5TJCPGuFwg1+MXowEitnkGh7EHD6X8L7bjgXtA= Subject key identifier: 70:C2:77:02:CE:CA:C9:2B:A5:D8:B8:80:C3:03:5D:63:71:60:1F:F4 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 05F5 Signing time: Mon 02 Mar 2026 22:58:02 +0000 Manifest this update: Mon 02 Mar 2026 22:58:02 +0000 Manifest next update: Mon 09 Mar 2026 22:58:02 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: DXqaFLkl//KrKya9AnoDArvYl0cjZt/5RLWhrGYhujw=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: waHlPrSIXU1DTG8JgX28cOXJ6bVasMgkvdeHgZb1AOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Mar 2 22:58:02 2026 GMT Not After : Mar 9 22:58:02 2026 GMT Subject: CN=69a615fa-3b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:3d:11:b7:0e:92:60:10:15:3c:69:48:42: 33:a8:c7:66:9b:91:3b:d7:72:a2:1a:7e:3e:98:8e: 18:18:3b:e8:05:c3:9e:b0:4e:79:7e:cc:93:9b:f1: 84:5d:a6:78:53:f0:e1:89:e4:ec:7d:0c:d1:f8:cf: 50:b5:cc:54:c8:2d:5b:73:46:8a:c3:68:d5:f3:30: c7:bf:1d:fa:ac:37:0b:05:1f:c6:6e:11:15:7d:a4: 5a:11:96:79:82:f0:c7:0a:6a:23:51:bd:59:15:ed: 78:22:1c:f7:4f:f1:85:a4:f0:c0:df:b0:4e:92:e6: af:0d:fa:15:12:d9:84:6c:81:0f:78:f0:8a:c5:d9: ea:60:eb:87:03:ed:c5:03:10:e3:ae:d1:49:08:96: ed:1c:7e:ad:6a:16:94:e0:42:98:c0:b0:b3:d5:27: d2:27:f7:f7:b1:46:f0:d1:86:a9:23:bb:06:67:14: 39:10:8c:13:fe:2e:fc:6a:96:ca:6a:9f:48:b7:89: bb:c2:33:0d:09:34:d2:50:b4:b3:6b:fc:9c:9f:7c: 4d:e1:29:3c:83:ad:e6:87:7e:ac:c4:df:e0:76:fa: 87:ab:8d:29:ad:d4:ae:2a:fb:0d:27:a5:31:b0:5e: 56:62:fd:be:ca:20:50:b5:0c:af:ed:9a:c8:88:9d: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:77:02:CE:CA:C9:2B:A5:D8:B8:80:C3:03:5D:63:71:60:1F:F4 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b0:33:e3:0f:20:df:ca:e6:c9:e0:8d:00:b7:09:c0:ff:37: a8:6c:c0:0f:9a:54:e5:d4:8f:56:3a:f3:f3:aa:f5:a3:70:46: a9:a2:f7:23:9e:8b:ca:9d:eb:28:96:28:6a:5c:e9:01:42:9e: 8f:3b:bb:89:86:98:aa:b2:9a:df:b0:77:68:67:4d:24:bb:4d: ed:df:8e:d0:a4:95:e0:4d:1c:00:04:9a:d6:16:55:88:cb:ee: b0:73:b5:96:72:99:76:d3:6d:68:31:09:25:d2:7b:48:c9:0b: 1a:be:49:28:c9:df:ee:47:ad:d9:25:1a:8a:91:d5:c5:5a:d8: 99:70:ae:89:e3:c2:ec:2b:87:38:7a:e8:9f:88:cc:a3:cb:fd: a3:5e:ff:98:71:da:9a:90:12:67:91:34:e8:98:77:9e:42:89: fa:d4:95:ff:19:53:07:ba:d9:2c:c7:40:4a:77:23:79:d2:31: c3:23:b7:5e:27:eb:f2:ae:ef:a3:74:cb:45:d1:16:0e:f7:ea: 92:7e:cd:5f:77:61:f1:fe:ae:9f:03:b7:93:c7:e6:86:82:19: b4:76:34:d3:2b:f2:01:bb:da:fc:19:12:55:45:61:17:a8:df: 8e:8f:5f:5a:e9:4d:9b:ce:5c:83:9b:7a:cb:b8:16:34:51:93: 6f:08:3d:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjYwMzAyMjI1ODAyWhcNMjYwMzA5MjI1ODAyWjAYMRYwFAYD VQQDEw02OWE2MTVmYS0zYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rQ9EbcOkmAQFTxpSEIzqMdmm5E713KiGn4+mI4YGDvoBcOesE55fsyTm/GE XaZ4U/DhieTsfQzR+M9QtcxUyC1bc0aKw2jV8zDHvx36rDcLBR/GbhEVfaRaEZZ5 gvDHCmojUb1ZFe14Ihz3T/GFpPDA37BOkuavDfoVEtmEbIEPePCKxdnqYOuHA+3F AxDjrtFJCJbtHH6tahaU4EKYwLCz1SfSJ/f3sUbw0YapI7sGZxQ5EIwT/i78apbK ap9It4m7wjMNCTTSULSza/ycn3xN4Sk8g63mh36sxN/gdvqHq40prdSuKvsNJ6Ux sF5WYv2+yiBQtQyv7ZrIiJ2GLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDCdwLO yskrpdi4gMMDXWNxYB/0MB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbAz4w8g38rmyeCNALcJwP83qGzAD5pU5dSPVjrz86r1o3BGqaL3I56Lyp3r KJYoalzpAUKejzu7iYaYqrKa37B3aGdNJLtN7d+O0KSV4E0cAASa1hZViMvusHO1 lnKZdtNtaDEJJdJ7SMkLGr5JKMnf7ket2SUaipHVxVrYmXCuiePC7CuHOHron4jM o8v9o17/mHHampASZ5E06Jh3nkKJ+tSV/xlTB7rZLMdASncjedIxwyO3Xifr8q7v o3TLRdEWDvfqkn7NX3dh8f6unwO3k8fmhoIZtHY00yvyAbva/BkSVUVhF6jfjo9f WulNm85cg5t6y7gWNFGTbwg9hQ== -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:05 2026 by rpki-client