$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: GwX8OxMxWGAZr7gmRfoxw04OeF7YP6u69ESuN50wdFs= Subject key identifier: 36:A1:37:20:BE:4A:F7:ED:27:42:14:4C:A9:A2:51:86:31:B4:F4:F9 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: 0126 Signing time: Sun 01 Mar 2026 06:46:06 +0000 Manifest this update: Sun 01 Mar 2026 06:46:06 +0000 Manifest next update: Sun 08 Mar 2026 06:46:06 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: ny3Alq2o7KKnksdGxpJ+zXckm5dTpw7QQf3ALr38T5o=) 2: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=) 3: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Mar 1 06:46:06 2026 GMT Not After : Mar 8 06:46:06 2026 GMT Subject: CN=69a3e0ae-5720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:77:c8:a2:5d:6f:3a:28:ad:1b:1e:a2:93: 8b:13:5a:f0:ce:10:13:d8:3d:7e:d5:ab:d5:eb:a7: f8:00:fe:b9:5f:3a:47:5d:44:05:d1:5a:30:4a:dc: 3a:0f:8b:e0:b2:c3:23:b3:17:eb:fc:2e:51:07:b1: 25:99:64:c8:2f:6a:c9:2c:45:5c:6e:41:50:82:02: 72:81:b4:fa:c9:61:ef:9b:40:8d:36:b8:60:84:d7: 03:57:32:2c:7a:8e:8a:99:b2:cf:a7:72:40:b0:c3: 87:28:ae:bb:6c:34:96:b4:42:69:51:5f:84:a2:0b: fc:4e:c1:ab:d8:33:9b:2d:bf:14:86:3f:d8:4d:1d: 78:5f:9a:72:fa:90:53:a4:50:26:a5:99:89:d8:4e: f3:4f:1e:d7:19:4e:69:c8:a1:70:9e:e7:95:02:65: 89:3b:73:02:1c:10:44:d9:fb:92:b3:72:90:37:04: c3:39:97:4b:be:54:c0:20:f6:5d:87:7a:3b:cb:da: 5e:0b:ae:de:45:49:00:e9:1d:2f:1a:9a:46:50:6a: 39:3f:24:5f:51:fe:eb:e8:02:7f:55:aa:af:05:35: ab:03:a2:10:78:cc:9d:54:8d:85:11:60:9a:dd:6b: 29:40:59:4c:80:f8:05:d8:b3:05:51:cc:9a:d3:43: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A1:37:20:BE:4A:F7:ED:27:42:14:4C:A9:A2:51:86:31:B4:F4:F9 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:da:58:41:d1:eb:3a:47:55:95:ee:92:3a:b5:16:9a:e8:10: 10:26:c2:9d:b5:df:76:fb:93:30:62:26:b9:11:d3:fe:53:e6: 74:54:62:7a:a1:9d:b9:b1:db:6d:69:f0:7f:d3:7f:b4:bc:41: 57:71:96:42:e4:d7:04:87:5e:15:16:e8:b1:c3:3f:a1:17:d0: e6:eb:ac:98:b8:1b:2f:c5:fe:52:75:b2:75:9c:02:5e:69:d5: ae:54:d9:90:25:ac:af:60:76:f5:9f:d7:6f:fe:8b:15:b3:38: 5f:93:78:2d:91:c4:3a:55:62:6d:a0:1f:f1:f8:cc:8d:71:67: a5:59:64:ff:a2:c3:b7:04:3d:ab:fa:82:cf:4b:c8:42:54:78: 47:1f:70:cf:4a:83:53:4e:25:33:30:0f:1b:7c:99:ec:60:f8: 07:9e:ef:ab:df:cf:2d:ff:1f:0e:12:73:dc:cd:65:5b:5a:b8: 85:70:b6:cc:29:33:f1:8e:f6:b3:f8:fd:14:f8:df:fd:ee:b4: a2:fd:22:c7:88:db:47:da:92:cd:4d:f8:43:aa:c0:75:4c:de: e5:c3:d0:76:df:f9:fa:20:89:9f:bc:0a:40:7e:94:68:f8:37: ee:f7:7a:69:db:df:ab:9b:21:31:af:74:ec:66:02:be:1e:90: 40:48:e2:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjYwMzAxMDY0NjA2WhcNMjYwMzA4MDY0NjA2WjAYMRYwFAYD VQQDEw02OWEzZTBhZS01NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+x3yKJdbzoorRseopOLE1rwzhAT2D1+1avV66f4AP65XzpHXUQF0VowStw6 D4vgssMjsxfr/C5RB7ElmWTIL2rJLEVcbkFQggJygbT6yWHvm0CNNrhghNcDVzIs eo6KmbLPp3JAsMOHKK67bDSWtEJpUV+Eogv8TsGr2DObLb8Uhj/YTR14X5py+pBT pFAmpZmJ2E7zTx7XGU5pyKFwnueVAmWJO3MCHBBE2fuSs3KQNwTDOZdLvlTAIPZd h3o7y9peC67eRUkA6R0vGppGUGo5PyRfUf7r6AJ/VaqvBTWrA6IQeMydVI2FEWCa 3WspQFlMgPgF2LMFUcya00N+DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDahNyC+ SvftJ0IUTKmiUYYxtPT5MB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx MVhoTlkxZEFfU01EVE92LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNpYQdHrOkdVle6SOrUWmugQECbCnbXfdvuTMGImuRHT/lPmdFRieqGdubHb bWnwf9N/tLxBV3GWQuTXBIdeFRboscM/oRfQ5uusmLgbL8X+UnWydZwCXmnVrlTZ kCWsr2B29Z/Xb/6LFbM4X5N4LZHEOlVibaAf8fjMjXFnpVlk/6LDtwQ9q/qCz0vI QlR4Rx9wz0qDU04lMzAPG3yZ7GD4B57vq9/PLf8fDhJz3M1lW1q4hXC2zCkz8Y72 s/j9FPjf/e60ov0ix4jbR9qSzU34Q6rAdUze5cPQdt/5+iCJn7wKQH6UaPg37vd6 advfq5shMa907GYCvh6QQEjiIQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:01 2026 by rpki-client