$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft File: B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json) Hash identifier: WFHUH2wtXR4sgMPzkANCwNm3NNKSeL/Cy4Chba9XAOM= Subject key identifier: 32:FD:AC:88:03:E1:8B:0D:FC:FF:C8:2A:94:18:2D:A8:BF:CC:03:22 Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2 Certificate issuer: /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft Manifest number: 20 Signing time: Fri 17 Apr 2026 08:36:56 +0000 Manifest this update: Fri 17 Apr 2026 08:36:55 +0000 Manifest next update: Fri 24 Apr 2026 08:36:55 +0000 Files and hashes: 1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: UQcFChcy7InkCZrfu4NE9nmxnjUX5jmBMsIsZfoZOPg=) 2: 964C388611F511F1B1F03794113D8C67.roa (hash: aDJ1T/8negVg13w36W/uf7MN9f6atZcUX+4QUHdvnVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2 Validity Not Before: Apr 17 08:36:55 2026 GMT Not After : Apr 24 08:36:55 2026 GMT Subject: CN=69e1f127-dd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:2d:b5:20:b2:59:dd:a1:73:38:f2:45:31: 99:cf:95:d2:28:72:84:7a:80:f9:1c:e1:27:87:84: b5:36:b1:2f:5e:6f:57:6c:b9:be:5b:e0:82:9e:0c: ad:df:19:52:4e:92:e0:21:45:2a:98:1e:ea:5e:5b: 78:42:d0:ee:f1:79:d6:7e:ba:10:c3:8c:65:b6:e8: 89:97:fd:db:10:78:f1:44:60:bb:08:84:52:b0:7c: 87:b6:ee:ae:d6:5a:f1:2c:98:42:a5:03:3b:4a:9a: 01:44:a6:0d:7c:93:2c:c4:04:40:07:f9:3e:08:03: 03:07:c2:7c:40:af:52:0f:a4:99:77:18:52:f9:1b: 3a:ad:3e:04:0b:e0:55:66:b5:c3:8e:78:1b:af:bf: 41:fc:77:bf:c7:ba:1f:90:56:2a:f4:6d:cd:09:a9: 4e:9a:20:29:0d:7e:17:88:93:ce:84:37:2a:4d:cb: a6:27:d2:25:b3:35:33:d8:fb:53:7b:58:11:9e:10: 18:50:52:de:a8:58:0a:09:8f:77:a8:15:2d:c7:0c: f4:26:8b:9e:59:81:ec:db:04:4f:b7:9e:d5:1b:18: 88:10:07:c4:b4:0c:96:8c:7f:1d:3f:ef:8d:c4:ff: 8a:08:87:73:ba:97:8b:b9:36:d4:1b:80:64:00:89: 20:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:AC:88:03:E1:8B:0D:FC:FF:C8:2A:94:18:2D:A8:BF:CC:03:22 X509v3 Authority Key Identifier: keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7c:3c:95:fd:54:47:ea:e5:97:dd:96:b1:77:16:57:29:c4: e3:85:b6:e0:c6:26:59:4e:4e:99:9b:ae:a2:0b:d0:47:a7:5f: e3:2f:ab:91:6d:3c:2e:09:1b:ce:31:d4:29:7b:2a:01:b1:3f: 0c:09:2f:55:99:5a:57:37:7f:9e:22:ed:8b:c9:0a:f6:09:62: e7:54:72:b5:17:42:75:cc:96:02:b3:be:96:d5:e1:da:76:eb: e7:6f:a7:41:db:80:6e:16:c4:92:59:35:22:10:35:5c:20:5f: 1f:5e:36:49:17:e5:92:f4:38:b9:86:ca:4e:f4:08:24:db:90: ec:7e:85:69:3e:67:69:a5:db:d6:77:9c:3a:45:ef:3d:ac:98: 52:d3:9d:75:dc:5e:d4:3f:c0:5b:f1:f6:91:03:34:90:60:48: 96:f2:a2:9b:e3:fc:0e:5d:fd:ef:48:fb:3b:df:4b:5b:b2:a3: d4:05:42:dd:24:8c:8b:01:1d:fa:eb:ac:f7:60:4d:5c:c7:1d: e6:51:0e:d1:b0:cb:89:bd:aa:b6:14:63:58:1a:f2:46:60:f7: 52:6a:58:a1:11:c3:58:15:c0:8b:f2:e8:f4:9f:ea:28:41:ba: 31:b3:1a:03:7e:40:a5:09:66:97:f4:ab:4c:5c:d8:9a:74:11: 5f:4f:13:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFRjExMC8GA1UEBRMoMDdCNDZFNENGM0ZFN0M4QzQ1MDIxOTE1ODAxQTZFNTNE QTIwQUNCMjAeFw0yNjA0MTcwODM2NTVaFw0yNjA0MjQwODM2NTVaMBgxFjAUBgNV BAMTDTY5ZTFmMTI3LWRkOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVMi21ILJZ3aFzOPJFMZnPldIocoR6gPkc4SeHhLU2sS9eb1dsub5b4IKeDK3f GVJOkuAhRSqYHupeW3hC0O7xedZ+uhDDjGW26ImX/dsQePFEYLsIhFKwfIe27q7W WvEsmEKlAztKmgFEpg18kyzEBEAH+T4IAwMHwnxAr1IPpJl3GFL5GzqtPgQL4FVm tcOOeBuvv0H8d7/Huh+QVir0bc0JqU6aICkNfheIk86ENypNy6Yn0iWzNTPY+1N7 WBGeEBhQUt6oWAoJj3eoFS3HDPQmi55ZgezbBE+3ntUbGIgQB8S0DJaMfx0/743E /4oIh3O6l4u5NtQbgGQAiSAZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMv2siAPh iw38/8gqlBgtqL/MAyIwHwYDVR0jBBgwFoAUB7RuTPP+fIxFAhkVgBpuU9ogrLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEVGL0JENTcwRDhBMTFG NDExRjFBOERGQjI4RDExM0Q4QzY3L0I3UnVUUFAtZkl4RkFoa1ZnQnB1VTlvZ3JM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjdSdVRQUC1mSXhGQWhrVmdCcHVVOW9nckxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEVGL0JENTcwRDhBMTFGNDExRjFBOERGQjI4RDExM0Q4QzY3L0I3UnVUUFAtZkl4 RkFoa1ZnQnB1VTlvZ3JMSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXfDyV/VRH6uWX3ZaxdxZXKcTjhbbgxiZZTk6Zm66iC9BHp1/jL6uRbTwuCRvO MdQpeyoBsT8MCS9VmVpXN3+eIu2LyQr2CWLnVHK1F0J1zJYCs76W1eHaduvnb6dB 24BuFsSSWTUiEDVcIF8fXjZJF+WS9Di5hspO9Agk25DsfoVpPmdppdvWd5w6Re89 rJhS05113F7UP8Bb8faRAzSQYEiW8qKb4/wOXf3vSPs730tbsqPUBULdJIyLAR36 66z3YE1cxx3mUQ7RsMuJvaq2FGNYGvJGYPdSalihEcNYFcCL8uj0n+ooQboxsxoD fkClCWaX9KtMXNiadBFfTxND -----END CERTIFICATE-----Generated at Fri Apr 17 21:34:45 2026 by rpki-client