$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: kHj5/+xamj+LN0eyom1Cy9w0/PZ+0bdbVPiavVFVPjI= Subject key identifier: 69:CE:B6:14:74:57:22:DA:FC:64:F6:57:E2:F6:EA:B1:5C:CC:22:CB Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 3527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: A1DD Signing time: Thu 16 Apr 2026 14:30:15 +0000 Manifest this update: Thu 16 Apr 2026 14:30:15 +0000 Manifest next update: Thu 23 Apr 2026 14:30:15 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: GlheRMfsPWPIVTbCVhyNu6JEy/dAbzorp7RSGDHDCIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Apr 16 14:30:15 2026 GMT Not After : Apr 23 14:30:15 2026 GMT Subject: CN=69e0f277-fae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:65:0a:2e:14:14:3b:52:a3:2c:30:d0:8e: 2a:ea:01:14:73:87:0d:f5:57:ec:64:72:94:be:91: 8c:c6:ae:c0:fa:a1:1c:46:77:04:4c:66:b7:83:50: 8d:a9:4b:fb:f9:a2:3f:91:15:cc:56:aa:72:7c:f7: 1c:ba:ac:0f:e9:9c:cb:25:c2:69:6f:5c:a2:6e:af: 15:e0:dd:f5:48:a0:7a:9b:85:fc:32:7f:38:81:42: 9e:18:9d:e2:cc:4a:de:72:65:24:16:79:0b:2f:fd: a8:1c:ea:89:5b:f2:43:b3:ba:d1:6b:ec:d4:f8:11: 29:f1:fd:b0:0d:54:3f:a3:2b:f9:99:63:a0:81:db: c2:ac:3a:f1:71:c2:dc:14:d9:fa:20:1d:72:eb:de: 41:c9:69:24:3b:21:96:a4:76:fb:88:e9:08:06:4f: 65:94:91:07:a0:c6:f5:d1:6f:c2:2c:8a:3e:e0:8e: 85:b1:d2:af:15:60:21:1e:b9:ab:95:03:02:b3:dd: b5:57:40:16:af:65:c7:7f:77:ab:27:c3:2d:da:63: 81:d2:70:25:24:6b:c1:8a:e8:03:21:43:20:49:51: 1c:5e:b3:92:32:f3:4b:24:60:4b:ff:7f:41:b5:ac: f4:c9:96:78:06:83:14:4d:b2:6e:53:8c:51:58:c5: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CE:B6:14:74:57:22:DA:FC:64:F6:57:E2:F6:EA:B1:5C:CC:22:CB X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c4:a0:70:55:df:c8:b3:1a:3f:52:c1:a6:1d:9e:70:f6:d6: 9d:6a:61:3f:44:f1:67:9f:ae:78:e5:c4:30:31:31:38:7d:e9: c9:cc:c3:99:2f:19:04:5b:88:ae:54:9d:2d:b9:d4:54:37:f7: bf:e9:a6:8e:4d:67:59:bf:04:17:0f:91:af:4d:9e:1d:41:dd: ed:7b:97:7f:e7:23:21:21:28:21:98:de:5e:88:b8:c7:10:94: 4c:2a:72:b6:10:e5:f7:be:93:c9:53:5e:78:9d:a5:c3:26:95: 05:3f:a5:30:15:3c:81:d2:e1:39:0f:aa:ce:b1:dd:0f:f6:1c: 9e:3d:18:39:ae:20:b0:db:dd:1a:dc:58:30:a6:a3:72:87:c2: 6d:12:76:05:92:9b:f1:bb:df:44:e3:9f:a5:ac:f9:5c:f9:64: 30:0f:19:7a:66:d3:2e:ef:9e:3e:05:ca:4d:d7:7d:76:cc:75: 9a:04:69:2c:74:1e:33:fe:8f:ca:84:12:31:9d:d9:58:e6:d8: e4:ad:c0:d0:8b:cd:71:67:e4:39:d2:6d:c2:da:7a:f2:84:59: e0:25:8b:34:be:f8:06:39:66:75:4f:8d:59:e2:c6:17:4f:55: 2d:f5:7a:52:31:cd:7e:1d:82:92:2e:84:69:b2:f9:73:93:40: 6b:a2:c9:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjYwNDE2MTQzMDE1WhcNMjYwNDIzMTQzMDE1WjAYMRYwFAYD VQQDEw02OWUwZjI3Ny1mYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl9lCi4UFDtSoyww0I4q6gEUc4cN9VfsZHKUvpGMxq7A+qEcRncETGa3g1CN qUv7+aI/kRXMVqpyfPccuqwP6ZzLJcJpb1yibq8V4N31SKB6m4X8Mn84gUKeGJ3i zErecmUkFnkLL/2oHOqJW/JDs7rRa+zU+BEp8f2wDVQ/oyv5mWOggdvCrDrxccLc FNn6IB1y695ByWkkOyGWpHb7iOkIBk9llJEHoMb10W/CLIo+4I6FsdKvFWAhHrmr lQMCs921V0AWr2XHf3erJ8Mt2mOB0nAlJGvBiugDIUMgSVEcXrOSMvNLJGBL/39B taz0yZZ4BoMUTbJuU4xRWMXXYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnOthR0 VyLa/GT2V+L26rFczCLLMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQcSgcFXfyLMaP1LBph2ecPbWnWphP0TxZ5+ueOXEMDExOH3pyczDmS8ZBFuI rlSdLbnUVDf3v+mmjk1nWb8EFw+Rr02eHUHd7XuXf+cjISEoIZjeXoi4xxCUTCpy thDl976TyVNeeJ2lwyaVBT+lMBU8gdLhOQ+qzrHdD/Ycnj0YOa4gsNvdGtxYMKaj cofCbRJ2BZKb8bvfROOfpaz5XPlkMA8ZembTLu+ePgXKTdd9dsx1mgRpLHQeM/6P yoQSMZ3ZWObY5K3A0IvNcWfkOdJtwtp68oRZ4CWLNL74BjlmdU+NWeLGF09VLfV6 UjHNfh2Cki6EabL5c5NAa6LJnw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:59 2026 by rpki-client