$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft File: tKtoly4-518HsSc9r-d6HC28-cs.mft (raw, json) Hash identifier: lhmJRPw7Pk+WU3rvFSzCetOQ9zYFkE62ycOhSexypW4= Subject key identifier: FA:C3:88:B4:B3:7A:AE:A6:B9:4C:D1:D1:91:4D:D4:76:D4:A9:01:39 Authority key identifier: B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB Certificate issuer: /CN=A91A2886/serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft Manifest number: 20 Signing time: Fri 17 Apr 2026 08:35:57 +0000 Manifest this update: Fri 17 Apr 2026 08:35:57 +0000 Manifest next update: Fri 24 Apr 2026 08:35:57 +0000 Files and hashes: 1: tKtoly4-518HsSc9r-d6HC28-cs.crl (hash: oO6zbNbynf+wXYkLCBCMKCZZc4Fg42Tm1JQrvyu0qwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2886, serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB Validity Not Before: Apr 17 08:35:57 2026 GMT Not After : Apr 24 08:35:57 2026 GMT Subject: CN=69e1f0ed-a4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:7b:7d:dd:a5:36:b1:82:30:ad:ef:68:a1: ba:44:41:8d:fa:4b:b7:76:9b:72:80:3a:2c:ef:24: 53:1a:2e:c6:74:7b:59:b4:4d:2c:c5:81:6f:a7:2c: 5e:5f:4a:1f:0e:f7:6c:7f:90:4f:e0:ef:57:45:04: 9b:08:3f:34:b6:06:d9:05:e2:ec:2a:4b:08:f8:14: c3:8e:c2:9f:79:5b:35:ba:c7:37:2f:70:e4:ab:45: 24:a9:b6:7c:8c:38:49:8a:05:77:3c:5e:35:4b:a8: e1:86:7e:37:ae:dc:80:c4:03:3a:93:67:d2:3d:f0: b9:21:3c:6a:13:d6:b7:c4:ba:ef:cd:a9:bc:35:2d: d8:ea:29:2f:9c:47:ba:3e:ec:c5:a3:32:46:0d:b2: b2:93:b8:95:2c:c8:3c:87:98:c1:fc:5c:6b:fe:59: df:a8:02:af:14:a5:2f:9b:7b:44:01:bf:1d:20:87: 4c:66:e6:e4:08:1c:9d:0a:00:15:cc:74:47:a6:d4: 30:67:ca:42:76:e8:68:77:b1:20:99:65:60:04:ac: ea:c9:4a:de:de:b4:0e:04:9d:a6:cb:9c:a3:91:a2: 8c:d6:ee:b5:0c:3a:be:a4:d3:40:f1:84:40:86:f2: 7f:76:f9:f8:3d:fc:f5:2b:6c:80:7b:96:5d:20:a9: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C3:88:B4:B3:7A:AE:A6:B9:4C:D1:D1:91:4D:D4:76:D4:A9:01:39 X509v3 Authority Key Identifier: keyid:B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:73:47:10:d2:4b:16:65:b5:bb:a2:43:89:21:09:85:a0:86: 81:29:f6:81:2f:2d:e7:ed:02:cc:d7:a2:a2:84:bc:ea:97:07: b2:36:12:29:1d:63:90:0a:4e:80:5d:60:14:fe:fd:a7:02:61: da:e8:fe:5f:08:93:53:d7:24:05:a3:ae:0e:6f:ed:8b:17:eb: aa:e6:0d:5b:0b:a6:52:29:74:6e:3a:6e:c4:9e:8f:a8:87:bc: 95:a9:8d:40:96:20:50:dc:0e:6b:98:e5:e0:af:e2:71:02:da: 00:46:52:6b:86:89:48:d2:de:b7:28:4b:18:77:dc:88:a1:69: df:a3:63:c7:c5:14:19:03:40:30:f7:5b:06:ef:46:21:0a:52: 62:78:73:88:db:cc:4f:37:71:bf:04:4d:7a:b7:12:e0:c3:82: ec:52:3f:6c:10:a0:a3:f0:e2:be:a3:3c:6a:29:e7:b7:cf:12: c9:98:84:f3:6e:84:71:21:e5:72:8e:93:cc:d2:4c:f7:59:79: cc:ae:3f:04:62:f9:71:c9:47:95:b8:b6:2a:53:69:af:b0:00: 12:02:fe:8e:89:5d:c1:b9:2d:f1:63:73:53:18:c1:7e:7d:ac: 6d:0e:87:73:ee:96:d7:89:c1:15:98:00:aa:ba:d7:28:20:da: c6:bd:bb:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjg4NjExMC8GA1UEBRMoQjRBQjY4OTcyRTNFRTc1RjA3QjEyNzNEQUZFNzdBMUMy REJDRjlDQjAeFw0yNjA0MTcwODM1NTdaFw0yNjA0MjQwODM1NTdaMBgxFjAUBgNV BAMTDTY5ZTFmMGVkLWE0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC07Xt93aU2sYIwre9oobpEQY36S7d2m3KAOizvJFMaLsZ0e1m0TSzFgW+nLF5f Sh8O92x/kE/g71dFBJsIPzS2BtkF4uwqSwj4FMOOwp95WzW6xzcvcOSrRSSptnyM OEmKBXc8XjVLqOGGfjeu3IDEAzqTZ9I98LkhPGoT1rfEuu/Nqbw1LdjqKS+cR7o+ 7MWjMkYNsrKTuJUsyDyHmMH8XGv+Wd+oAq8UpS+be0QBvx0gh0xm5uQIHJ0KABXM dEem1DBnykJ26Gh3sSCZZWAErOrJSt7etA4EnabLnKORoozW7rUMOr6k00DxhECG 8n92+fg9/PUrbIB7ll0gqfUlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+sOItLN6 rqa5TNHRkU3UdtSpATkwHwYDVR0jBBgwFoAUtKtoly4+518HsSc9r+d6HC28+csw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2LzZDNTU0NTM0MTBB MzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4SHNTYzlyLWQ2SEMyOC1j cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEt0b2x5NC01MThIc1NjOXItZDZIQzI4LWNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy ODg2LzZDNTU0NTM0MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3L3RLdG9seTQtNTE4 SHNTYzlyLWQ2SEMyOC1jcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRc0cQ0ksWZbW7okOJIQmFoIaBKfaBLy3n7QLM16KihLzqlweyNhIpHWOQCk6A XWAU/v2nAmHa6P5fCJNT1yQFo64Ob+2LF+uq5g1bC6ZSKXRuOm7Eno+oh7yVqY1A liBQ3A5rmOXgr+JxAtoARlJrholI0t63KEsYd9yIoWnfo2PHxRQZA0Aw91sG70Yh ClJieHOI28xPN3G/BE16txLgw4LsUj9sEKCj8OK+ozxqKee3zxLJmITzboRxIeVy jpPM0kz3WXnMrj8EYvlxyUeVuLYqU2mvsAASAv6OiV3BuS3xY3NTGMF+faxtDodz 7pbXicEVmACqutcoINrGvbsI -----END CERTIFICATE-----Generated at Sun Apr 19 09:55:28 2026 by rpki-client