$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: pKm3W3fA8gjns+SxVNCRCqupf5nf+2R16mJCKCVD0EI= Subject key identifier: 20:81:8E:5D:F1:E9:07:55:78:4F:58:C5:83:57:29:DA:1C:32:00:EB Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 286B Signing time: Sun 01 Mar 2026 23:28:47 +0000 Manifest this update: Sun 01 Mar 2026 23:28:46 +0000 Manifest next update: Sun 08 Mar 2026 23:28:46 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: cSv9GdRaa6hCWzk1R7mzYzAy+Wb9dcvytX+CndJp06c=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10376 (0x2888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Mar 1 23:28:46 2026 GMT Not After : Mar 8 23:28:46 2026 GMT Subject: CN=69a4cbaf-4db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:30:d3:3a:6f:57:3d:a8:62:82:a1:32:31:ef: df:8c:2b:fc:f5:7e:fd:c6:db:31:2a:df:bf:03:9c: 92:79:9c:b3:05:14:1b:2e:dd:6f:f8:6b:2f:80:b9: 37:ed:57:1a:6e:fd:f9:51:6b:8a:71:ac:e7:61:53: e5:d4:6f:b8:eb:3b:2f:7c:58:55:2b:1c:cc:02:9b: 7f:60:7b:61:de:cb:08:f6:76:a9:b4:3f:c7:ff:eb: cc:e4:c8:93:ba:53:e6:71:22:cc:12:04:0d:6b:fd: 54:e9:c9:1e:5b:51:34:4a:84:8b:45:75:50:c0:a9: 76:3a:f3:9f:2a:8a:7b:76:ff:57:32:93:40:bc:d6: 53:0e:4a:a9:71:8a:13:57:f2:88:2b:e1:66:b1:21: d4:15:0b:85:04:20:78:f1:9b:3a:c3:a2:84:d9:96: 6f:f9:a8:8c:22:18:96:cc:d4:79:e8:52:e1:bf:c5: b9:0c:62:66:70:eb:1b:f9:f2:d9:9b:60:98:4b:1d: 6c:36:7d:d8:5f:5d:b8:84:34:de:e4:34:bb:b2:98: 7d:9c:14:ac:d3:de:d1:34:15:12:7c:a9:37:f1:da: 12:cd:12:3b:1f:c9:9a:12:20:1a:d5:71:c8:ce:d7: 5e:48:a8:3c:2e:f6:9d:4c:0d:d0:37:0c:2d:97:90: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:81:8E:5D:F1:E9:07:55:78:4F:58:C5:83:57:29:DA:1C:32:00:EB X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:09:21:04:1e:bf:8e:51:9a:fe:9f:7f:ff:48:9e:94:4e:44: 84:2f:b2:47:bc:48:f0:c7:9a:43:7a:c4:69:0c:ba:e7:e8:03: e4:48:40:45:d6:4a:14:54:8e:d1:c2:0e:96:bd:1c:03:c3:7a: 3d:cd:8e:e5:11:4d:05:7c:a4:a5:b6:ae:75:1d:4a:0e:13:c9: b7:bd:75:1c:25:09:7a:6f:f1:d6:02:63:a9:34:a6:66:59:ee: ae:bf:17:e8:d6:d4:82:81:47:99:a4:42:b2:bf:97:e6:a3:9d: a2:61:5c:2e:a5:da:78:56:03:54:d3:7c:f6:93:a1:8d:d9:b3: 2b:3b:48:1c:0c:ad:62:3c:f3:d4:61:c6:57:bd:18:35:19:d4: ca:a3:34:12:fc:17:c2:c8:6b:8a:2d:20:05:6e:3b:79:41:94: 1f:9f:18:5f:4c:3b:16:80:b1:b2:be:c6:4b:34:3d:24:08:61: 7f:7c:02:64:db:d9:1b:17:9e:9a:76:7b:67:cd:66:58:a8:92: 1a:15:ec:2f:8c:0a:2d:23:aa:85:24:8b:89:9d:2c:4b:bb:34: 24:ea:64:6e:2a:89:64:87:96:e9:d0:3b:50:fe:61:32:3d:34: a1:c1:de:22:6f:2b:9b:41:bf:78:5a:83:60:f3:3d:2d:e3:97: e0:82:4e:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjYwMzAxMjMyODQ2WhcNMjYwMzA4MjMyODQ2WjAYMRYwFAYD VQQDEw02OWE0Y2JhZi00ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzDTOm9XPahigqEyMe/fjCv89X79xtsxKt+/A5ySeZyzBRQbLt1v+GsvgLk3 7Vcabv35UWuKcaznYVPl1G+46zsvfFhVKxzMApt/YHth3ssI9naptD/H/+vM5MiT ulPmcSLMEgQNa/1U6ckeW1E0SoSLRXVQwKl2OvOfKop7dv9XMpNAvNZTDkqpcYoT V/KIK+FmsSHUFQuFBCB48Zs6w6KE2ZZv+aiMIhiWzNR56FLhv8W5DGJmcOsb+fLZ m2CYSx1sNn3YX124hDTe5DS7sph9nBSs097RNBUSfKk38doSzRI7H8maEiAa1XHI ztdeSKg8LvadTA3QNwwtl5BJPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCBjl3x 6QdVeE9YxYNXKdocMgDrMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqgkhBB6/jlGa/p9//0ielE5EhC+yR7xI8MeaQ3rEaQy65+gD5EhARdZKFFSO 0cIOlr0cA8N6Pc2O5RFNBXykpbaudR1KDhPJt711HCUJem/x1gJjqTSmZlnurr8X 6NbUgoFHmaRCsr+X5qOdomFcLqXaeFYDVNN89pOhjdmzKztIHAytYjzz1GHGV70Y NRnUyqM0EvwXwshrii0gBW47eUGUH58YX0w7FoCxsr7GSzQ9JAhhf3wCZNvZGxee mnZ7Z81mWKiSGhXsL4wKLSOqhSSLiZ0sS7s0JOpkbiqJZIeW6dA7UP5hMj00ocHe Im8rm0G/eFqDYPM9LeOX4IJOWw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:39 2026 by rpki-client