$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: NCzuZE9iiHGzdN2jZcSuIiDf9Lmol+RSsMT0ZDrDTv8= Subject key identifier: 36:56:F4:C4:87:91:3E:EC:B4:F0:59:40:37:58:DF:7D:46:6C:60:64 Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 3552 Signing time: Thu 16 Apr 2026 14:59:53 +0000 Manifest this update: Thu 16 Apr 2026 14:59:53 +0000 Manifest next update: Thu 23 Apr 2026 14:59:53 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: Ms8AIOsWPDe0hQYImCKH7Qqp8wp0PRJYSP6USEW/PAU=) 2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: ub2UwmJHfTSxoavuI6+2HDPbk/zf32PQjhZJmlUwhnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Apr 16 14:59:53 2026 GMT Not After : Apr 23 14:59:53 2026 GMT Subject: CN=69e0f969-814e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:9f:4b:24:43:b8:34:77:5a:3f:9f:ae:38: 36:ba:3a:20:60:06:de:02:a8:28:6f:e9:86:ba:c6: 0f:db:20:9e:26:ef:bb:9e:e5:1f:0e:35:3a:64:99: 0c:c5:17:be:ca:fa:86:b5:c7:15:ad:56:0b:f4:1d: c6:b4:47:2a:69:91:0f:89:4c:25:fa:ae:67:d6:84: 09:61:c7:a6:54:53:c7:07:01:25:11:2c:24:67:c8: 7d:a6:17:f2:e8:46:2b:dd:12:20:9b:51:a6:48:7e: e5:78:99:29:cf:59:4b:86:ea:42:b0:54:1d:d4:fc: 86:67:0e:e3:24:ef:56:16:4d:5a:3d:be:92:53:24: 4c:90:a3:b4:b4:8b:e4:f8:a5:46:0b:31:6b:26:58: 19:8e:6d:68:f5:2e:06:0d:6f:f0:cc:8e:8f:fa:23: d8:71:6b:d5:b0:41:00:20:e2:70:10:7d:3d:9a:a4: 8b:4a:05:b5:06:36:e4:37:0f:b2:dd:df:c0:51:9d: 18:b3:b9:ce:95:83:d2:f9:d3:d3:9e:6e:83:28:93: 32:32:9b:54:60:1e:91:0a:4d:74:89:f2:10:42:fb: 3c:bf:df:3c:dd:38:c6:23:e5:a8:75:87:70:b1:3c: 4e:52:0c:de:e1:cf:55:68:4c:80:06:98:d2:f9:4f: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:F4:C4:87:91:3E:EC:B4:F0:59:40:37:58:DF:7D:46:6C:60:64 X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:0b:d7:00:06:48:5a:ef:71:aa:fc:02:36:89:65:2f:36: 94:a3:22:25:ff:e8:fc:1d:17:dc:41:a2:87:40:7f:5a:a0:a8: d0:3c:13:4f:eb:e0:41:84:32:ea:0e:24:17:67:0e:10:b2:b5: f1:11:cb:1b:7e:a4:b7:03:dc:46:9f:81:a6:a1:af:3d:f5:55: ff:bd:6f:d4:50:cb:33:3f:a3:d6:2a:e5:ad:53:37:f3:36:67: 3e:a2:1e:01:57:fe:13:e4:43:cd:fd:d3:04:67:1d:42:68:89: cd:06:88:5b:22:11:f7:d5:eb:a9:66:08:31:6a:76:f1:9e:44: 10:b9:d4:4f:f3:44:9c:a1:6c:d0:a6:ab:f0:f2:ba:d2:ce:10: 9b:c4:b7:0b:96:e7:ee:ac:12:a8:eb:c0:11:dc:3b:79:f5:79: 94:2b:e3:91:c4:2c:a3:1c:95:77:b9:cd:4e:31:b6:3e:f1:bd: 83:34:8d:2c:ce:e1:67:72:a7:cb:8f:20:e1:f4:f7:76:a5:f9: 3c:0a:51:60:24:d3:28:32:ed:ea:7a:07:4b:39:39:a9:44:3b: 4c:a1:14:f4:ae:65:4c:6f:69:22:93:42:e6:4d:14:a9:a4:5c: 8a:ee:d4:06:9a:52:d3:d8:c1:4e:30:8a:e7:9d:45:cb:cc:3a: 41:83:e9:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjYwNDE2MTQ1OTUzWhcNMjYwNDIzMTQ1OTUzWjAYMRYwFAYD VQQDEw02OWUwZjk2OS04MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HGfSyRDuDR3Wj+frjg2ujogYAbeAqgob+mGusYP2yCeJu+7nuUfDjU6ZJkM xRe+yvqGtccVrVYL9B3GtEcqaZEPiUwl+q5n1oQJYcemVFPHBwElESwkZ8h9phfy 6EYr3RIgm1GmSH7leJkpz1lLhupCsFQd1PyGZw7jJO9WFk1aPb6SUyRMkKO0tIvk +KVGCzFrJlgZjm1o9S4GDW/wzI6P+iPYcWvVsEEAIOJwEH09mqSLSgW1BjbkNw+y 3d/AUZ0Ys7nOlYPS+dPTnm6DKJMyMptUYB6RCk10ifIQQvs8v9883TjGI+WodYdw sTxOUgze4c9VaEyABpjS+U/VhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZW9MSH kT7stPBZQDdY331GbGBkMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPmcL1wAGSFrvcar8AjaJZS82lKMiJf/o/B0X3EGih0B/WqCo0DwTT+vgQYQy 6g4kF2cOELK18RHLG36ktwPcRp+BpqGvPfVV/71v1FDLMz+j1irlrVM38zZnPqIe AVf+E+RDzf3TBGcdQmiJzQaIWyIR99XrqWYIMWp28Z5EELnUT/NEnKFs0Kar8PK6 0s4Qm8S3C5bn7qwSqOvAEdw7efV5lCvjkcQsoxyVd7nNTjG2PvG9gzSNLM7hZ3Kn y48g4fT3dqX5PApRYCTTKDLt6noHSzk5qUQ7TKEU9K5lTG9pIpNC5k0UqaRciu7U BppS09jBTjCK551Fy8w6QYPpyg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:24 2026 by rpki-client