$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: QhgqmENAvR20BNyzRxOu+UFkWvC0S5Z8t4EbyBnKawE= Subject key identifier: 40:FE:92:10:44:4F:DB:8C:22:46:13:37:92:3E:F1:DB:B8:3A:8F:37 Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 0118 Signing time: Fri 17 Apr 2026 05:34:51 +0000 Manifest this update: Fri 17 Apr 2026 05:34:50 +0000 Manifest next update: Fri 24 Apr 2026 05:34:50 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: Q9/Tq5fs2sE+/LM1BFNeBT61KhMcb3XRlMQAVlJ4HTU=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: 5eXsqyDi4zXv3lkd2PQOUbJIFyY5qvfFcyW7Q/IiG9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Apr 17 05:34:50 2026 GMT Not After : Apr 24 05:34:50 2026 GMT Subject: CN=69e1c67a-6703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:d5:57:b7:b8:fb:f2:01:5d:c2:d8:fc:a3: 41:0f:c3:d7:26:50:62:94:f0:71:26:28:4c:bf:46: 94:56:67:39:90:fa:8c:4e:31:44:40:eb:3e:ea:58: bd:6c:52:02:24:69:d9:c1:ce:b3:2d:e4:d9:11:4d: 04:ea:64:69:3b:b1:b9:16:1f:01:9d:9c:7d:53:22: 7f:77:b4:8c:87:79:5e:2a:1f:ad:99:ef:19:1a:69: 79:ab:12:7d:87:85:d4:ab:40:77:79:72:9e:a1:3f: 81:25:7b:d5:ae:d2:77:c8:25:7d:8f:14:44:fe:58: 1d:e6:94:e7:8a:5d:c7:d6:c2:6e:9d:80:4c:55:8c: 97:11:bd:1d:d6:bb:7b:f7:97:6a:b2:42:02:e5:f2: 41:dd:e4:b4:ca:35:3e:ad:07:0e:9c:e1:9f:d6:0c: 0d:e2:8d:55:55:bc:8b:d8:f0:81:da:c3:12:6e:52: 8b:4d:e5:a0:0a:1e:75:a8:f0:cf:37:83:f4:6b:f8: ff:81:16:7d:75:35:c7:d5:84:92:4d:d8:29:62:ab: a6:f3:e6:3c:52:8d:77:dc:1b:2e:dd:71:33:dc:ca: e4:c7:78:a8:0e:d6:3d:18:02:70:7e:e9:38:b2:7f: cc:c5:bf:25:8b:c4:5e:11:a6:fd:68:f7:83:cc:53: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FE:92:10:44:4F:DB:8C:22:46:13:37:92:3E:F1:DB:B8:3A:8F:37 X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2d:f8:43:71:82:df:a4:30:e9:1e:4d:e1:21:50:72:c1:dd: 1f:b1:27:0e:f4:29:05:75:81:31:f4:c8:d7:21:80:1c:56:d9: 17:26:23:dc:4f:33:a8:67:8c:c0:6e:dc:1e:3c:96:a0:43:d9: c7:c5:c8:b1:b6:4f:20:fd:b5:81:55:72:80:34:4f:47:f6:50: 3d:5a:fd:29:bf:db:53:b3:87:a3:91:4f:ea:9f:d8:5f:fb:a7: f4:d6:d0:df:20:29:fb:b1:00:16:c1:49:70:27:f2:bd:d4:68: eb:e6:e6:4a:3d:57:05:2e:dd:e3:31:4b:f8:86:ea:4e:fb:91: 6a:4a:ff:75:09:a3:aa:7e:c0:e8:61:e6:4b:5d:d5:ae:4f:92: ab:c6:7b:4b:52:3d:8e:50:74:04:da:2a:43:e2:44:ad:50:a6: c4:34:ba:21:c5:d2:40:ef:65:f5:fd:13:fd:8c:22:af:3c:99: 67:c4:25:97:d0:91:3d:03:a1:2c:0c:eb:34:f3:b3:38:28:ed: 6f:1d:c4:ce:58:a8:33:2f:ec:f1:e4:7a:fc:97:fa:26:b6:f8: e3:b0:56:1f:b5:af:93:57:52:ea:aa:41:c1:e9:57:9b:af:78: e0:6a:21:13:ea:8c:92:f6:a5:12:8e:60:72:b2:18:d1:e2:56: f2:a8:f6:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB N0I4MTQ0ODUwHhcNMjYwNDE3MDUzNDUwWhcNMjYwNDI0MDUzNDUwWjAYMRYwFAYD VQQDEw02OWUxYzY3YS02NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrbVV7e4+/IBXcLY/KNBD8PXJlBilPBxJihMv0aUVmc5kPqMTjFEQOs+6li9 bFICJGnZwc6zLeTZEU0E6mRpO7G5Fh8BnZx9UyJ/d7SMh3leKh+tme8ZGml5qxJ9 h4XUq0B3eXKeoT+BJXvVrtJ3yCV9jxRE/lgd5pTnil3H1sJunYBMVYyXEb0d1rt7 95dqskIC5fJB3eS0yjU+rQcOnOGf1gwN4o1VVbyL2PCB2sMSblKLTeWgCh51qPDP N4P0a/j/gRZ9dTXH1YSSTdgpYqum8+Y8Uo133Bsu3XEz3Mrkx3ioDtY9GAJwfuk4 sn/Mxb8li8ReEab9aPeDzFMW8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFED+khBE T9uMIkYTN5I+8du4Oo83MB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk OGhyS3g0eTVNWmludUJSSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATi34Q3GC36Qw6R5N4SFQcsHdH7EnDvQpBXWBMfTI1yGAHFbZFyYj3E8zqGeM wG7cHjyWoEPZx8XIsbZPIP21gVVygDRPR/ZQPVr9Kb/bU7OHo5FP6p/YX/un9NbQ 3yAp+7EAFsFJcCfyvdRo6+bmSj1XBS7d4zFL+IbqTvuRakr/dQmjqn7A6GHmS13V rk+Sq8Z7S1I9jlB0BNoqQ+JErVCmxDS6IcXSQO9l9f0T/YwirzyZZ8Qll9CRPQOh LAzrNPOzOCjtbx3EzlioMy/s8eR6/Jf6Jrb447BWH7Wvk1dS6qpBwelXm6944Goh E+qMkvalEo5gcrIY0eJW8qj2AA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:06:08 2026 by rpki-client