$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: DzhiQvzwOdREksM2G2SsnYxwQZ8c3dTJ3MNVRl4wO3E= Subject key identifier: AA:05:29:BE:31:AC:16:FD:6B:27:63:EF:F4:A7:01:AE:6D:1F:94:7F Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 0320 Signing time: Fri 17 Apr 2026 01:01:41 +0000 Manifest this update: Fri 17 Apr 2026 01:01:40 +0000 Manifest next update: Fri 24 Apr 2026 01:01:40 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: /hFeTt18TMMxltbFYNzYoL+dpL1jjMpgy5mEmq9BB9M=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: extwZoZ4o7qFht4F8tbdr5isEJa1lOyoukk0O3tlrPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: Apr 17 01:01:40 2026 GMT Not After : Apr 24 01:01:40 2026 GMT Subject: CN=69e18674-a1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:ad:fd:a2:af:9a:1e:9b:4a:4c:e9:5a:d5: 7b:f5:5f:d3:50:23:a6:04:5d:d8:bf:97:ef:87:62: 83:44:c0:17:52:ac:0f:a5:c7:62:f0:52:62:35:b0: e5:2f:fd:09:e0:7a:24:c5:e7:1b:42:4b:45:d0:70: 52:68:5c:06:b3:db:6c:da:36:6b:98:4c:54:4f:d7: a2:29:06:8a:f1:75:d0:3a:53:9e:ff:9f:fd:85:57: c6:69:14:05:3a:4e:1b:d5:82:2d:33:ed:66:49:ee: 7c:a3:5c:48:b3:82:76:f7:4c:6c:2e:13:6b:e9:a2: ce:56:72:2c:41:dd:7c:25:4d:ce:3f:6c:ba:64:82: ec:f8:f8:f3:d7:f9:a5:11:50:c2:49:24:07:96:21: 49:01:3c:31:2e:d1:2e:69:32:50:2d:bd:c7:31:c2: 9f:27:a7:8b:a3:4e:32:e8:78:2c:07:4e:32:d8:94: d4:bb:43:00:60:9f:74:9e:59:fa:53:97:11:d5:fd: 14:0d:f2:49:c8:de:7f:e1:a5:b8:a6:79:95:1d:b9: 98:86:55:f2:34:c6:47:7d:04:52:b3:1c:7a:07:1d: 02:50:7f:99:a8:a0:70:61:f3:31:67:24:d6:0d:90: 4b:1f:ab:11:67:02:7b:6b:ae:0c:65:b2:1d:eb:10: dd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:05:29:BE:31:AC:16:FD:6B:27:63:EF:F4:A7:01:AE:6D:1F:94:7F X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b2:f8:09:fa:e5:fa:ce:33:ee:7e:1a:be:5d:eb:af:3d:ae: 7d:07:21:66:32:56:28:02:7b:9b:13:1a:0e:10:9d:e2:fe:e9: f6:84:a1:27:38:50:58:5e:73:ee:ce:f1:fc:f4:03:1e:e1:68: c1:c9:5a:f8:83:0b:90:43:84:bf:d9:ac:ea:9d:d1:90:7d:dd: 8d:97:a3:93:39:b6:f8:db:6f:f9:c5:1b:18:d9:cc:27:74:4b: 02:13:76:db:ea:1a:92:d8:4b:a2:4f:d1:b8:c0:e0:ce:af:37: 00:39:25:8a:41:76:65:ed:f7:89:0e:56:c1:d5:2f:a2:b7:fa: e8:fc:91:ad:28:c4:b7:19:4b:d4:45:26:42:d1:10:b5:8c:2f: 01:bc:76:55:38:7d:2f:93:6e:07:14:3f:5d:14:56:cc:b5:3d: c4:0b:cb:fe:35:ad:92:48:d0:5d:25:5f:5e:37:af:e0:5e:9b: 1a:47:09:01:56:01:8f:68:fa:56:1a:82:67:61:61:02:b6:eb: cb:36:ec:8e:09:dc:64:f2:08:2a:71:c5:c6:d5:4e:ae:db:42: 53:55:20:5e:7a:96:4e:bf:1f:92:db:15:50:3c:2b:63:bf:13: a0:a7:fb:c0:36:a4:8e:5a:64:19:1c:61:9d:40:46:e8:60:c5: 14:0f:e0:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjYwNDE3MDEwMTQwWhcNMjYwNDI0MDEwMTQwWjAYMRYwFAYD VQQDEw02OWUxODY3NC1hMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11yt/aKvmh6bSkzpWtV79V/TUCOmBF3Yv5fvh2KDRMAXUqwPpcdi8FJiNbDl L/0J4HokxecbQktF0HBSaFwGs9ts2jZrmExUT9eiKQaK8XXQOlOe/5/9hVfGaRQF Ok4b1YItM+1mSe58o1xIs4J290xsLhNr6aLOVnIsQd18JU3OP2y6ZILs+Pjz1/ml EVDCSSQHliFJATwxLtEuaTJQLb3HMcKfJ6eLo04y6HgsB04y2JTUu0MAYJ90nln6 U5cR1f0UDfJJyN5/4aW4pnmVHbmYhlXyNMZHfQRSsxx6Bx0CUH+ZqKBwYfMxZyTW DZBLH6sRZwJ7a64MZbId6xDdFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoFKb4x rBb9aydj7/SnAa5tH5R/MB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn7L4Cfrl+s4z7n4avl3rrz2ufQchZjJWKAJ7mxMaDhCd4v7p9oShJzhQWF5z 7s7x/PQDHuFowcla+IMLkEOEv9ms6p3RkH3djZejkzm2+Ntv+cUbGNnMJ3RLAhN2 2+oakthLok/RuMDgzq83ADklikF2Ze33iQ5WwdUvorf66PyRrSjEtxlL1EUmQtEQ tYwvAbx2VTh9L5NuBxQ/XRRWzLU9xAvL/jWtkkjQXSVfXjev4F6bGkcJAVYBj2j6 VhqCZ2FhArbryzbsjgncZPIIKnHFxtVOrttCU1UgXnqWTr8fktsVUDwrY78ToKf7 wDakjlpkGRxhnUBG6GDFFA/gRQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:11 2026 by rpki-client