$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: JD3zW6hnt9xuK1gunIV0hZZUQIpW1hR7eEH0zse12/k= Subject key identifier: 5D:D4:C1:D3:78:16:FC:47:B7:D4:6A:FE:D0:BE:7C:BD:C0:94:8B:A8 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0C8B Signing time: Thu 16 Apr 2026 18:51:19 +0000 Manifest this update: Thu 16 Apr 2026 18:51:19 +0000 Manifest next update: Thu 23 Apr 2026 18:51:19 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: e9ONRxi5EfLVqM3Lh8h6iYo9hnqct2Rg7YharOJGDns=) 2: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=) 3: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=) 4: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=) 5: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=) 6: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=) 7: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=) 8: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=) 9: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=) 10: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=) 11: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=) 12: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: DJZwP5yqSI9PpNu/UVHT95YfSOvYQlnM/XHLUm3H7T4=) 13: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=) 14: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=) 15: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=) 16: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=) 17: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Apr 16 18:51:19 2026 GMT Not After : Apr 23 18:51:19 2026 GMT Subject: CN=69e12fa7-8ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:64:39:24:25:42:ef:e4:a0:4c:96:b9:64: 8a:bc:82:c7:35:11:87:e8:62:ce:70:dd:c1:1d:b2: 92:5f:97:6d:e1:ae:a8:14:3d:3d:d6:3a:33:90:8f: 7c:f7:13:35:87:be:da:d0:15:e3:45:f7:0c:c3:18: 80:c9:f2:4a:b9:d9:2a:e1:61:4a:0a:d9:44:3b:ae: 8e:77:07:fc:51:21:38:24:43:d0:72:57:08:b5:24: 76:7d:48:96:72:d0:2d:39:c9:5c:cf:a5:a5:4e:4f: 40:07:40:2f:28:86:54:9c:f9:96:f8:3d:1c:14:44: a4:dd:7a:cd:c7:0c:f1:b9:b5:89:15:91:2c:8a:a6: 9d:32:e0:19:73:18:f8:49:e6:b6:85:eb:79:d0:ad: ac:13:4d:2d:8d:bd:2b:95:ca:32:d0:46:70:08:85: bc:8e:6c:e4:aa:be:4f:8b:f2:c5:2d:10:f2:74:8f: 31:54:e5:1e:f3:22:3c:57:e8:64:3a:97:45:d8:a8: 49:07:94:cd:3b:58:92:25:ec:ec:76:29:ad:fb:c3: 9a:76:d8:55:64:f2:80:45:bd:b8:94:39:48:b0:6e: 32:1c:02:72:11:be:04:ee:12:b9:23:bb:65:15:05: ca:d0:f9:d0:95:36:6e:c6:97:0c:67:a4:a9:7e:a6: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D4:C1:D3:78:16:FC:47:B7:D4:6A:FE:D0:BE:7C:BD:C0:94:8B:A8 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e7:60:00:34:cd:75:02:ef:b1:79:f1:a2:34:a3:27:65:c4: 95:6a:d2:6a:a8:6e:93:e9:56:8d:7b:c9:83:c8:ec:90:a9:f1: 18:1d:be:16:ec:1c:20:18:4b:3f:41:39:67:d1:fb:9f:91:6c: b8:87:47:d7:42:d9:82:0c:68:fb:0f:d1:b2:c3:06:e8:ec:a8: c2:b8:ac:29:c3:ec:9c:77:e9:cd:41:88:9b:73:c1:f3:8f:fd: bf:9d:8c:a8:38:73:a5:c2:31:f2:a4:9a:da:8f:4b:6d:95:ce: 28:3a:1d:93:03:b6:48:e2:87:b0:02:ed:6c:aa:fd:8a:06:f9: a6:99:73:24:3a:04:c5:6d:5e:35:23:5a:17:56:1f:03:de:a3: 7d:c5:d3:47:48:d0:97:f7:da:9d:7b:24:08:51:65:a4:cd:d0: d8:ae:e4:d2:0c:4b:99:54:77:2c:0d:e3:98:01:58:96:f3:da: 9d:07:70:96:83:56:95:b6:f4:58:b9:fa:7e:b9:07:74:6c:53: 99:b2:06:63:cf:16:9a:40:e1:32:11:fb:8f:4f:89:b3:97:b8: ac:ae:25:d9:06:20:a0:4a:0b:6d:eb:6f:e8:94:b2:92:f4:c6: 99:90:e6:77:b9:dc:2f:85:b8:f9:77:30:cb:de:a3:89:a0:7a: eb:a7:bb:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwNDE2MTg1MTE5WhcNMjYwNDIzMTg1MTE5WjAYMRYwFAYD VQQDEw02OWUxMmZhNy04YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVVkOSQlQu/koEyWuWSKvILHNRGH6GLOcN3BHbKSX5dt4a6oFD091jozkI98 9xM1h77a0BXjRfcMwxiAyfJKudkq4WFKCtlEO66Odwf8USE4JEPQclcItSR2fUiW ctAtOclcz6WlTk9AB0AvKIZUnPmW+D0cFESk3XrNxwzxubWJFZEsiqadMuAZcxj4 Sea2het50K2sE00tjb0rlcoy0EZwCIW8jmzkqr5Pi/LFLRDydI8xVOUe8yI8V+hk OpdF2KhJB5TNO1iSJezsdimt+8OadthVZPKARb24lDlIsG4yHAJyEb4E7hK5I7tl FQXK0PnQlTZuxpcMZ6SpfqZC+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3UwdN4 FvxHt9Rq/tC+fL3AlIuoMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjedgADTNdQLvsXnxojSjJ2XElWrSaqhuk+lWjXvJg8jskKnxGB2+FuwcIBhL P0E5Z9H7n5FsuIdH10LZggxo+w/RssMG6OyowrisKcPsnHfpzUGIm3PB84/9v52M qDhzpcIx8qSa2o9LbZXOKDodkwO2SOKHsALtbKr9igb5pplzJDoExW1eNSNaF1Yf A96jfcXTR0jQl/fanXskCFFlpM3Q2K7k0gxLmVR3LA3jmAFYlvPanQdwloNWlbb0 WLn6frkHdGxTmbIGY88WmkDhMhH7j0+Js5e4rK4l2QYgoEoLbetv6JSykvTGmZDm d7ncL4W4+Xcwy96jiaB666e76g== -----END CERTIFICATE-----Generated at Fri Apr 17 05:02:47 2026 by rpki-client