$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: jmp21iyTdg0/Lnvqvm5kJarkzqRptg0qrnyTao41W+s= Subject key identifier: 56:4B:A1:EE:C3:DE:9C:EB:60:8A:9F:D1:11:F9:C4:77:4B:45:73:D9 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 05E0 Signing time: Thu 16 Apr 2026 22:58:45 +0000 Manifest this update: Thu 16 Apr 2026 22:58:44 +0000 Manifest next update: Thu 23 Apr 2026 22:58:44 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: pAjRptRod2wfxJKaPCFc8sNmuzPbbo1oqVcj1PkA4Wc=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: +1hhCYUIxlCa2Yw+101XYnenXc2fZJwDnEsS0lMdUl0=) 3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: yO5pYh5kSLeQxWbh/IwZl8/NyVYKsbLWb0OeBMKvlS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Apr 16 22:58:44 2026 GMT Not After : Apr 23 22:58:44 2026 GMT Subject: CN=69e169a5-41a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:5d:75:0e:9d:ec:20:bc:f2:ea:fd:86:38: 8a:fb:bc:51:17:cc:78:72:cb:83:c2:77:04:df:5f: 9b:e9:b5:cd:64:c8:77:ac:14:71:22:00:0c:a5:e9: 04:f3:73:2c:6c:ba:88:c4:4b:e0:a5:4a:dc:4b:38: 42:97:a9:38:a6:77:a9:5f:96:2d:f9:42:71:7c:40: fb:94:4d:9c:a2:a1:58:0b:d5:95:21:82:35:e0:dd: 39:ca:e4:26:50:b4:38:0d:cb:eb:59:cc:4b:19:3b: 19:bc:25:96:d3:7a:a5:f3:5f:04:ba:e6:be:26:49: 50:7c:4d:0c:67:4c:47:cc:14:06:30:87:0c:4f:fe: 73:bf:ac:e9:18:30:00:16:e3:7a:5c:25:4e:2e:a2: fa:37:5e:1b:95:86:33:c6:05:b3:d1:e8:f1:9e:5f: 22:c7:60:4d:95:88:cc:2e:34:41:b0:64:67:b4:7e: 3a:91:9e:8d:62:4d:d8:81:71:a6:85:58:d2:0e:09: ae:1d:1c:4f:84:4e:ba:44:25:d1:f3:7f:92:eb:8c: cf:f1:cd:39:3f:a5:d8:81:07:58:56:5b:a1:31:9b: a0:a3:13:35:aa:00:41:ee:2b:07:ff:22:d2:98:55: db:79:f5:b6:80:ce:7c:14:d4:15:ff:e2:23:f9:45: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:A1:EE:C3:DE:9C:EB:60:8A:9F:D1:11:F9:C4:77:4B:45:73:D9 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a4:e0:a1:21:8f:55:b9:7d:2b:8f:e5:64:e4:ce:78:d7:71: f0:ba:b4:5d:78:29:72:86:ff:d9:e5:b0:67:13:20:33:de:d4: c5:28:60:1c:21:fe:b6:a1:b1:cd:54:d9:36:94:e2:07:92:31: 9b:88:13:f9:e0:63:e7:4d:fa:57:e2:44:95:59:75:fa:70:57: c8:9a:b8:7e:7d:35:0c:a7:a7:2d:35:84:5d:77:d6:17:91:ab: 4c:fe:ba:f9:ed:6b:12:34:7d:cc:00:83:7b:7c:eb:a8:8a:24: ec:f4:fe:49:eb:e6:e9:c6:9b:ff:ba:33:57:af:1b:01:ac:43: 67:0b:46:88:60:57:2c:0a:a2:c6:70:eb:02:30:36:3c:98:26: b9:6f:7c:6a:25:d5:e4:13:5c:e2:df:95:60:34:8c:5b:4f:7a: cf:71:71:24:ff:01:2e:21:98:6f:f1:59:af:01:56:9b:ed:a7: d5:c6:2d:d3:d9:29:9f:17:d8:29:df:90:21:49:f0:74:fd:a9: 49:6b:46:2a:ac:bc:66:46:4d:f7:83:fa:40:d2:73:a8:3f:f7: 30:a4:a4:53:58:8a:8c:1b:97:44:64:75:15:58:8d:62:34:32: 2e:e9:98:c6:de:e6:2d:7a:33:3f:ea:2f:fc:ff:f0:1b:14:97: 31:31:9c:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjYwNDE2MjI1ODQ0WhcNMjYwNDIzMjI1ODQ0WjAYMRYwFAYD VQQDEw02OWUxNjlhNS00MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RBddQ6d7CC88ur9hjiK+7xRF8x4csuDwncE31+b6bXNZMh3rBRxIgAMpekE 83MsbLqIxEvgpUrcSzhCl6k4pnepX5Yt+UJxfED7lE2coqFYC9WVIYI14N05yuQm ULQ4DcvrWcxLGTsZvCWW03ql818Euua+JklQfE0MZ0xHzBQGMIcMT/5zv6zpGDAA FuN6XCVOLqL6N14blYYzxgWz0ejxnl8ix2BNlYjMLjRBsGRntH46kZ6NYk3YgXGm hVjSDgmuHRxPhE66RCXR83+S64zP8c05P6XYgQdYVluhMZugoxM1qgBB7isH/yLS mFXbefW2gM58FNQV/+Ij+UXt9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZLoe7D 3pzrYIqf0RH5xHdLRXPZMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABKTgoSGPVbl9K4/lZOTOeNdx8Lq0XXgpcob/2eWwZxMgM97UxShgHCH+tqGx zVTZNpTiB5Ixm4gT+eBj5036V+JElVl1+nBXyJq4fn01DKenLTWEXXfWF5GrTP66 +e1rEjR9zACDe3zrqIok7PT+Sevm6cab/7ozV68bAaxDZwtGiGBXLAqixnDrAjA2 PJgmuW98aiXV5BNc4t+VYDSMW096z3FxJP8BLiGYb/FZrwFWm+2n1cYt09kpnxfY Kd+QIUnwdP2pSWtGKqy8ZkZN94P6QNJzqD/3MKSkU1iKjBuXRGR1FViNYjQyLumY xt7mLXozP+ov/P/wGxSXMTGcsg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:58 2026 by rpki-client