$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: 7lCL2mhSQ6Mj2esaaWO6DMP+WhW71eEC3faav4gSXbw= Subject key identifier: BB:DA:6D:59:EB:9C:F1:86:52:75:8B:DD:AE:9C:EA:76:53:E7:AA:19 Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 93 Signing time: Fri 17 Apr 2026 07:19:58 +0000 Manifest this update: Fri 17 Apr 2026 07:19:57 +0000 Manifest next update: Fri 24 Apr 2026 07:19:57 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: 2wuIYewponiwFk4gDxbVo+gtsDyZpUeKZkJ+kmwU2RA=) 2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=) 3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Apr 17 07:19:57 2026 GMT Not After : Apr 24 07:19:57 2026 GMT Subject: CN=69e1df1d-0ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:3e:14:63:40:f9:03:6f:df:bc:5e:07:89: a0:68:12:7a:c2:0a:33:39:4c:f3:85:1b:99:cd:26: 58:ba:5c:27:10:cc:d3:45:18:7f:02:19:b6:a3:5f: 81:37:96:0f:2e:47:7f:96:38:be:f6:5b:69:7c:a3: 3b:d6:94:23:b0:a0:8c:fb:a3:6f:b0:8b:66:10:80: cb:1a:9d:7b:40:64:17:4d:80:ef:c3:12:70:d4:16: 56:d1:03:cd:d6:72:f4:cc:10:68:7f:5a:03:b4:a3: 8f:be:e6:ed:34:20:5b:3f:b4:02:93:e0:dc:78:31: 42:84:4f:f7:cf:45:c7:c4:03:bc:6f:60:51:c0:2c: be:1d:75:13:3f:53:03:1b:3d:0e:9d:c7:bf:b4:a9: 3b:fe:f1:45:89:c6:ce:0d:97:c0:e3:ec:b7:61:c4: 35:a8:fd:55:39:78:5c:10:91:e0:44:d2:a1:a2:ed: 4f:ba:3c:38:ed:f9:c9:51:16:16:8a:ad:b3:7b:93: db:f7:fc:55:4d:a7:1b:d1:39:67:9a:4c:81:82:4c: 3f:b9:e8:3d:49:59:3a:84:a2:e9:e8:31:93:6e:53: 7c:3a:6c:14:99:ca:25:04:d3:d6:90:a0:76:13:1a: fa:14:56:07:67:0e:33:bf:7d:68:df:d2:ad:3f:85: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:6D:59:EB:9C:F1:86:52:75:8B:DD:AE:9C:EA:76:53:E7:AA:19 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:61:e5:b5:c8:dd:4f:15:fd:4e:01:33:8f:5e:66:ee:df:04: 83:ce:84:03:35:de:4c:39:f7:37:7e:d6:5b:dd:cf:bf:9e:95: e7:e5:10:b5:ea:54:c9:c0:93:c5:19:43:98:14:2e:e6:1b:d6: 2d:69:47:a1:e5:5b:97:ed:f9:73:bb:ed:f8:d0:82:6b:ba:43: 72:ee:2a:c6:d4:38:02:66:18:e8:5e:68:67:5d:7f:23:51:46: a0:65:75:fa:1e:ab:e2:e8:47:c6:e5:42:f5:e5:4e:e8:d2:63: 53:74:5f:83:23:c9:5c:65:3e:b0:ea:89:5e:50:7e:ed:1f:4a: 29:06:e5:51:28:9e:a5:a8:62:2d:c4:d9:c7:1e:da:7b:a4:1d: 50:7d:db:50:97:ab:01:53:61:77:9c:56:eb:b1:64:8e:24:50: d9:fe:09:4e:0c:54:3f:58:3f:70:cf:75:74:b1:4c:bb:21:9c: 34:6b:48:8f:8b:ff:4a:d8:53:d1:11:72:d7:fd:13:ac:61:4a: 74:aa:64:0b:fa:6b:de:d4:17:85:03:68:d6:62:77:62:09:1e: eb:40:98:c3:5a:6b:4b:5e:78:e9:7a:cb:be:83:c3:9e:38:0e: 90:64:ad:07:e9:f8:2d:e5:54:83:ec:40:cb:2a:3e:9e:da:2c: ec:36:85:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwNDE3MDcxOTU3WhcNMjYwNDI0MDcxOTU3WjAYMRYwFAYD VQQDEw02OWUxZGYxZC0wZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bM+FGNA+QNv37xeB4mgaBJ6wgozOUzzhRuZzSZYulwnEMzTRRh/Ahm2o1+B N5YPLkd/lji+9ltpfKM71pQjsKCM+6NvsItmEIDLGp17QGQXTYDvwxJw1BZW0QPN 1nL0zBBof1oDtKOPvubtNCBbP7QCk+DceDFChE/3z0XHxAO8b2BRwCy+HXUTP1MD Gz0Once/tKk7/vFFicbODZfA4+y3YcQ1qP1VOXhcEJHgRNKhou1Pujw47fnJURYW iq2ze5Pb9/xVTacb0TlnmkyBgkw/ueg9SVk6hKLp6DGTblN8OmwUmcolBNPWkKB2 Exr6FFYHZw4zv31o39KtP4Wt9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvabVnr nPGGUnWL3a6c6nZT56oZMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO2HltcjdTxX9TgEzj15m7t8Eg86EAzXeTDn3N37WW93Pv56V5+UQtepUycCT xRlDmBQu5hvWLWlHoeVbl+35c7vt+NCCa7pDcu4qxtQ4AmYY6F5oZ11/I1FGoGV1 +h6r4uhHxuVC9eVO6NJjU3RfgyPJXGU+sOqJXlB+7R9KKQblUSiepahiLcTZxx7a e6QdUH3bUJerAVNhd5xW67FkjiRQ2f4JTgxUP1g/cM91dLFMuyGcNGtIj4v/SthT 0RFy1/0TrGFKdKpkC/pr3tQXhQNo1mJ3Ygke60CYw1prS1546XrLvoPDnjgOkGSt B+n4LeVUg+xAyyo+ntos7DaFYg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:08:15 2026 by rpki-client