$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: OUnujL2eDCC4a3IaYIcRW9LgMN03ARSkeXur3w8bFGE= Subject key identifier: CA:D8:86:4D:F0:32:3F:F3:0D:61:F1:3B:F4:CB:5A:CD:26:1A:41:60 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: 0134 Signing time: Sun 19 Apr 2026 05:07:41 +0000 Manifest this update: Sun 19 Apr 2026 05:07:41 +0000 Manifest next update: Sun 26 Apr 2026 05:07:41 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: QbEomeCX1UlgpRcVBKRoI9fgd4v7V3Jekf5Lb0n2vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90, serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Apr 19 05:07:41 2026 GMT Not After : Apr 26 05:07:41 2026 GMT Subject: CN=69e4631d-46d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:11:5f:2d:2b:e0:a9:ad:e6:2a:4c:45:ff: 2e:ac:dd:72:3b:54:fa:e7:29:eb:0d:17:b5:43:c9: cd:25:52:22:09:d5:f6:b1:f8:a3:7d:71:60:8c:05: 5b:5c:95:b8:85:cd:07:20:25:f4:4f:86:b6:0a:60: e3:97:99:61:e2:ea:2a:3e:ca:94:64:1f:1d:e9:95: 20:42:2a:8b:21:88:92:b1:38:cc:95:1e:6c:f4:77: 10:a5:35:af:7e:f8:d9:be:70:0e:3a:12:0d:07:9e: d2:02:04:ea:e2:1d:35:09:36:f4:10:65:46:f8:1e: 81:76:26:63:f7:6a:ba:66:03:cd:3c:54:a6:b2:66: fd:aa:13:48:83:76:fe:9a:a0:00:31:ea:be:70:b0: 39:16:13:ff:c3:f9:11:f0:d3:60:2f:4c:5b:30:f9: 67:76:b3:e9:4a:e8:07:90:2c:0f:e0:5c:cf:d1:35: dd:a2:84:dc:a1:d2:7b:75:d0:6d:62:3f:81:2e:54: b4:fa:e1:63:8e:b5:05:e4:13:c5:a3:b4:22:e7:cb: 8e:6e:2c:78:37:bb:33:46:62:3b:5f:c7:b5:57:ff: 3d:5d:dc:4c:90:7c:e9:d1:93:ef:e9:81:a3:93:71: 0d:b4:60:87:ae:53:bc:83:00:4a:45:39:b7:fa:76: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D8:86:4D:F0:32:3F:F3:0D:61:F1:3B:F4:CB:5A:CD:26:1A:41:60 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:60:ba:7b:15:db:96:1e:b5:73:cd:1c:19:a0:10:5f:98:49: 0f:1f:0e:4c:c7:f1:24:58:b5:75:04:f4:9a:79:58:39:bc:79: da:00:9f:ba:23:d8:68:b6:62:43:29:b4:73:4f:59:26:a2:40: 9c:7b:77:92:82:3b:56:a8:c7:1c:6c:04:44:10:34:54:08:6c: f3:b6:72:56:19:9e:23:3c:84:b0:f5:fd:7f:3a:7c:7c:fd:ba: 34:5b:70:fd:d8:41:ac:90:5c:e7:74:2c:74:28:c8:b8:15:e8: 4e:0e:01:c7:72:54:11:84:d0:d3:15:74:0f:ab:39:89:eb:fc: b2:e2:96:87:dd:5d:47:b5:61:b9:9c:61:9a:4c:b8:5e:e8:66: e3:56:02:e5:6c:8c:79:ef:8e:37:30:13:99:da:77:85:7d:a9: 21:0d:f7:10:83:97:0d:60:76:f4:f9:10:52:e6:bc:08:91:59: b4:e5:d4:2e:80:38:5d:96:56:16:b2:0d:51:51:a3:7e:e0:6d: 16:9d:f4:1b:5e:03:f1:21:b3:e6:c9:e2:b3:ae:37:2e:61:70: f1:96:a7:6c:65:f0:d9:4c:61:a4:81:39:e0:1a:46:e1:d8:56: 8e:e8:08:82:c9:ee:27:6f:6e:bb:2e:8a:f1:52:c6:87:4d:19: 5a:40:2b:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGOTAxMTAvBgNVBAUTKEI2MDNEQkYxNDk3RDRCOTM0QUQzQTU5NDFGRTI0MEI3 QUY1REE0ODkwHhcNMjYwNDE5MDUwNzQxWhcNMjYwNDI2MDUwNzQxWjAYMRYwFAYD VQQDEw02OWU0NjMxZC00NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoboRXy0r4Kmt5ipMRf8urN1yO1T65ynrDRe1Q8nNJVIiCdX2sfijfXFgjAVb XJW4hc0HICX0T4a2CmDjl5lh4uoqPsqUZB8d6ZUgQiqLIYiSsTjMlR5s9HcQpTWv fvjZvnAOOhINB57SAgTq4h01CTb0EGVG+B6BdiZj92q6ZgPNPFSmsmb9qhNIg3b+ mqAAMeq+cLA5FhP/w/kR8NNgL0xbMPlndrPpSugHkCwP4FzP0TXdooTcodJ7ddBt Yj+BLlS0+uFjjrUF5BPFo7Qi58uObix4N7szRmI7X8e1V/89XdxMkHzp0ZPv6YGj k3ENtGCHrlO8gwBKRTm3+nZB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrYhk3w Mj/zDWHxO/TLWs0mGkFgMB8GA1UdIwQYMBaAFLYD2/FJfUuTStOllB/iQLevXaSJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y5MC9CRTNCRENDQTY4 RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1TkswNldVSC1KQXQ2OWRw SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y5MC9CRTNCRENDQTY4RTExMUVGOEFDNTk1MjNDNEY5QUUwMi90Z1BiOFVsOVM1 TkswNldVSC1KQXQ2OWRwSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATWC6exXblh61c80cGaAQX5hJDx8OTMfxJFi1dQT0mnlYObx52gCfuiPYaLZi Qym0c09ZJqJAnHt3koI7VqjHHGwERBA0VAhs87ZyVhmeIzyEsPX9fzp8fP26NFtw /dhBrJBc53QsdCjIuBXoTg4Bx3JUEYTQ0xV0D6s5iev8suKWh91dR7VhuZxhmky4 Xuhm41YC5WyMee+ONzATmdp3hX2pIQ33EIOXDWB29PkQUua8CJFZtOXULoA4XZZW FrINUVGjfuBtFp30G14D8SGz5snis643LmFw8ZanbGXw2UxhpIE54BpG4dhWjugI gsnuJ29uuy6K8VLGh00ZWkArtw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:58:29 2026 by rpki-client