$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft File: KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json) Hash identifier: 4Hc8+bHwqPemm7m4C8Ue842lCzEnJlQCywfaUYQj29A= Subject key identifier: 20:0C:4C:4A:B2:2D:FB:71:0B:D4:7A:DB:EB:AF:2A:AC:23:22:9D:2E Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft Manifest number: 0150 Signing time: Fri 17 Apr 2026 04:50:21 +0000 Manifest this update: Fri 17 Apr 2026 04:50:20 +0000 Manifest next update: Fri 24 Apr 2026 04:50:20 +0000 Files and hashes: 1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: PC0pQpOxTgPBz0WWB3m8yQUpFwRoBgkQApdiRXMJ2ZE=) 2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: AmuO5Mz7Oe3J6VbUWmMhACa7zZVIB8sI5+X4h7QzjH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Validity Not Before: Apr 17 04:50:20 2026 GMT Not After : Apr 24 04:50:20 2026 GMT Subject: CN=69e1bc0d-8027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:16:f0:3f:4a:09:b2:2b:ae:8f:95:a7:84: 54:8a:16:96:ad:5e:fd:28:d2:7a:34:f0:af:db:97: d9:83:a7:5c:a8:5e:ec:a1:f0:c7:8a:81:c8:1c:57: f1:21:3f:3c:cf:b7:50:25:47:2a:70:a0:8d:6f:36: 3b:31:16:90:93:18:03:eb:e3:25:e7:90:c6:c0:a7: d6:50:f3:51:35:1d:57:a3:6a:dd:f6:19:1a:ab:07: 47:22:52:f5:fd:e4:57:7b:92:74:1a:e0:57:b7:cd: 49:72:3d:0f:c2:41:9b:e1:44:e2:3b:b1:c0:14:29: c5:66:d2:ea:bc:ed:f8:f0:25:28:2e:eb:a2:b6:9b: da:94:80:c2:96:20:85:84:36:47:98:f7:76:d7:11: 89:a5:0b:72:77:62:c0:de:b8:42:57:0d:0d:7b:ab: 66:d2:89:a8:be:0e:73:b6:7c:d8:d0:dd:16:8c:1e: 11:ce:47:cc:a4:8f:a2:dd:8c:da:92:9b:8c:ac:a9: d8:5f:5e:89:37:49:9f:5a:25:e6:a1:ad:92:7e:da: f5:b2:d6:a7:11:08:64:f4:eb:d0:27:6a:45:fd:f8: 53:ca:9f:e1:17:ba:35:5f:1a:ba:1e:bc:da:34:d1: 61:71:78:43:62:dc:0f:c5:c3:d3:c5:ff:e3:69:a8: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0C:4C:4A:B2:2D:FB:71:0B:D4:7A:DB:EB:AF:2A:AC:23:22:9D:2E X509v3 Authority Key Identifier: keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:6f:0b:46:c2:3d:f6:f2:65:55:33:f9:1d:b4:c5:29:a9: 89:8d:04:bf:b6:e7:18:b2:73:6c:93:53:7d:19:a8:d5:d2:20: ae:ea:eb:5b:6f:a6:cd:c4:a6:31:1d:12:1c:52:5c:61:b5:e4: a6:8d:79:7d:30:1b:ba:58:93:bb:72:cb:c9:5c:f1:31:03:7e: 7b:4a:e9:82:7e:2e:cc:0b:a4:f1:fd:5e:db:76:a8:f5:de:53: 56:7f:11:52:0e:a0:57:f9:b1:b9:c3:be:46:db:e7:9d:67:ae: cb:b8:10:54:18:a4:d3:4d:aa:56:aa:6b:01:94:bf:75:e8:c7: cb:dc:c8:0b:7d:c4:a0:9f:7d:11:6d:59:ee:51:a9:50:f8:d4: e7:05:bc:96:fb:ba:4b:6d:4c:d9:20:5c:34:37:bd:fe:a6:b5: 36:a8:65:e2:24:28:b2:3e:e7:3d:be:21:cd:70:ab:86:29:df: 24:52:f1:aa:2e:79:2d:d3:50:c9:12:3c:08:63:14:3d:13:c2: 42:64:e1:ce:67:22:76:23:fe:eb:12:8f:56:22:1b:7f:10:c0: 7f:fd:1f:49:49:61:ba:58:e2:cb:b9:a2:92:12:e4:df:51:ad: 3d:29:bb:20:f3:d5:64:c9:50:b6:ce:88:81:16:c7:67:fa:55: 89:0f:62:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwRUMxMTAvBgNVBAUTKDI5M0NFMURFRDFBNjQwNEIwMEIyQzBDQ0ZCM0YzQ0VB RkIyMUE1MDgwHhcNMjYwNDE3MDQ1MDIwWhcNMjYwNDI0MDQ1MDIwWjAYMRYwFAYD VQQDEw02OWUxYmMwZC04MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33oW8D9KCbIrro+Vp4RUihaWrV79KNJ6NPCv25fZg6dcqF7sofDHioHIHFfx IT88z7dQJUcqcKCNbzY7MRaQkxgD6+Ml55DGwKfWUPNRNR1Xo2rd9hkaqwdHIlL1 /eRXe5J0GuBXt81Jcj0PwkGb4UTiO7HAFCnFZtLqvO348CUoLuuitpvalIDCliCF hDZHmPd21xGJpQtyd2LA3rhCVw0Ne6tm0omovg5ztnzY0N0WjB4RzkfMpI+i3Yza kpuMrKnYX16JN0mfWiXmoa2Sftr1stanEQhk9OvQJ2pF/fhTyp/hF7o1Xxq6Hrza NNFhcXhDYtwPxcPTxf/jaah7tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAMTEqy LftxC9R62+uvKqwjIp0uMB8GA1UdIwQYMBaAFCk84d7RpkBLALLAzPs/POr7IaUI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBFQy8yNEI4QkZFMDNF NTgxMUVGOTk2REEzMjFDNEY5QUUwMi9LVHpoM3RHbVFFc0Fzc0RNLXo4ODZ2c2hw UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUemgzdEdtUUVzQXNzRE0tejg4NnZzaHBRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBFQy8yNEI4QkZFMDNFNTgxMUVGOTk2REEzMjFDNEY5QUUwMi9LVHpoM3RHbVFF c0Fzc0RNLXo4ODZ2c2hwUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU05vC0bCPfbyZVUz+R20xSmpiY0Ev7bnGLJzbJNTfRmo1dIgrurrW2+mzcSm MR0SHFJcYbXkpo15fTAbuliTu3LLyVzxMQN+e0rpgn4uzAuk8f1e23ao9d5TVn8R Ug6gV/mxucO+RtvnnWeuy7gQVBik002qVqprAZS/dejHy9zIC33EoJ99EW1Z7lGp UPjU5wW8lvu6S21M2SBcNDe9/qa1Nqhl4iQosj7nPb4hzXCrhinfJFLxqi55LdNQ yRI8CGMUPRPCQmThzmcidiP+6xKPViIbfxDAf/0fSUlhuljiy7mikhLk31GtPSm7 IPPVZMlQts6IgRbHZ/pViQ9iUQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:40:21 2026 by rpki-client