$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: 3KPt4FhqdO1h2RGBAXqIUFEz8MSv8OjAZkA0cqD33hg= Subject key identifier: 29:2D:94:D7:AD:BF:6E:B4:78:A2:F6:A6:04:FD:92:36:74:97:EB:AC Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 1D Signing time: Fri 17 Apr 2026 08:37:08 +0000 Manifest this update: Fri 17 Apr 2026 08:37:07 +0000 Manifest next update: Fri 24 Apr 2026 08:37:07 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: L5tZyXBSmL8ZztzOrVg25Y6NjHPr/JBHsu5ZDGAYa/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: Apr 17 08:37:07 2026 GMT Not After : Apr 24 08:37:07 2026 GMT Subject: CN=69e1f133-aae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:54:20:fd:33:f2:58:f8:2c:cc:f0:b4:16: 4c:31:f4:19:69:78:f7:1f:5b:e3:d5:de:4a:ef:b8: cb:e2:95:0d:73:94:2c:11:df:c0:ac:4d:5d:ee:1f: f2:b6:bd:22:81:63:f0:45:90:d5:10:6e:1b:37:99: 99:4b:4d:c1:56:1c:a9:b7:76:85:00:72:b0:8e:44: c2:c1:49:14:d4:42:d9:c2:11:e8:03:38:f0:d6:2e: 01:7c:6a:1c:4f:48:b2:99:e9:0e:f3:7c:19:14:14: 3e:ad:43:21:68:66:38:87:35:ff:ec:94:50:ba:98: 33:fd:bc:b9:87:45:92:d6:f3:47:fc:58:46:08:2e: 1f:71:a6:ca:7d:54:31:dc:2e:96:85:87:64:e4:ca: 2b:5d:41:39:c9:f0:49:1c:76:d9:73:37:e4:8e:04: 3a:cd:c6:78:3a:b3:9b:1f:c3:aa:a9:69:ca:98:a9: eb:27:91:da:7e:c4:d9:3d:e7:1a:60:f3:73:fe:f6: 75:6f:81:7c:4e:fe:d6:38:28:91:a1:54:a2:9f:a0: c3:4c:22:e4:d2:7b:89:e3:d0:03:90:e7:2a:0d:ce: 40:37:4b:88:ac:04:91:60:6c:82:65:01:83:3d:02: 33:3a:6e:fe:af:43:30:ca:93:52:f0:62:98:33:6f: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2D:94:D7:AD:BF:6E:B4:78:A2:F6:A6:04:FD:92:36:74:97:EB:AC X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:59:69:38:9d:c4:e2:a6:8a:27:21:b4:02:24:cb:ad:9d: e3:ff:8d:4b:32:d6:97:0b:19:54:e4:47:af:73:58:2f:b8:9f: b5:f5:9d:74:a2:1a:f7:e9:9f:50:69:14:a8:27:f2:d0:98:3f: f5:c6:be:9a:4a:37:15:94:7e:7f:b4:2a:ea:ed:71:40:a8:75: a4:07:a8:6d:5f:67:6d:18:b5:da:59:f8:34:f2:14:81:0c:6f: 5c:2e:8c:b8:de:f5:d4:81:a9:42:0f:bc:db:e5:77:81:52:e2: 87:40:5c:3a:6a:5b:6d:ff:11:3a:b9:bb:ad:d5:cf:ad:64:b3: 9c:be:ce:f9:05:d6:a8:29:69:64:8a:b4:7a:d6:48:19:1e:50: c5:5d:14:57:fa:fd:b0:a4:0e:f0:14:80:4f:63:59:44:a1:83: 9d:e2:a1:e1:6f:ca:e1:bb:14:f9:ba:d7:4e:56:0d:67:7d:89: e5:80:8d:19:5d:38:be:41:6f:09:4e:6a:93:9c:4f:23:00:ff: 94:24:d8:56:b4:84:7e:ae:df:c0:37:57:cb:8a:6f:f1:74:5f: 7d:f8:da:a1:e5:de:73:2b:51:98:f6:af:03:bf:96:47:b8:8a: 6d:3b:0b:94:dd:12:9d:f9:52:47:0f:c5:f4:ec:76:84:b8:ef: eb:c6:f2:23 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjA0MTcwODM3MDdaFw0yNjA0MjQwODM3MDdaMBgxFjAUBgNV BAMTDTY5ZTFmMTMzLWFhZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJslQg/TPyWPgszPC0Fkwx9BlpePcfW+PV3krvuMvilQ1zlCwR38CsTV3uH/K2 vSKBY/BFkNUQbhs3mZlLTcFWHKm3doUAcrCORMLBSRTUQtnCEegDOPDWLgF8ahxP SLKZ6Q7zfBkUFD6tQyFoZjiHNf/slFC6mDP9vLmHRZLW80f8WEYILh9xpsp9VDHc LpaFh2TkyitdQTnJ8EkcdtlzN+SOBDrNxng6s5sfw6qpacqYqesnkdp+xNk95xpg 83P+9nVvgXxO/tY4KJGhVKKfoMNMIuTSe4nj0AOQ5yoNzkA3S4isBJFgbIJlAYM9 AjM6bv6vQzDKk1LwYpgzb06tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKS2U162/ brR4ovamBP2SNnSX66wwHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB1LFlpOJ3E4qaKJyG0AiTLrZ3j/41LMtaXCxlU5Eevc1gvuJ+19Z10ohr36Z9Q aRSoJ/LQmD/1xr6aSjcVlH5/tCrq7XFAqHWkB6htX2dtGLXaWfg08hSBDG9cLoy4 3vXUgalCD7zb5XeBUuKHQFw6altt/xE6ubut1c+tZLOcvs75BdaoKWlkirR61kgZ HlDFXRRX+v2wpA7wFIBPY1lEoYOd4qHhb8rhuxT5utdOVg1nfYnlgI0ZXTi+QW8J TmqTnE8jAP+UJNhWtIR+rt/AN1fLim/xdF99+Nqh5d5zK1GY9q8Dv5ZHuIptOwuU 3RKd+VJHD8X07HaEuO/rxvIj -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:41 2026 by rpki-client