$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: CPEXI3zJq6zZEePEoNnKo/Ck+vxV6chKllBqKc7oDN8= Subject key identifier: E5:8D:A7:FC:9A:80:3D:E0:14:B1:27:7D:D0:4C:59:CD:6B:F4:A8:99 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 0494 Signing time: Thu 16 Apr 2026 23:57:58 +0000 Manifest this update: Thu 16 Apr 2026 23:57:58 +0000 Manifest next update: Thu 23 Apr 2026 23:57:58 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: Blp39MdJMZeOXT4bniUX/WyQSJ4ukc1UpxehIf9BBL8=) 2: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: uBxr7p6TwpA9INGB4KedC2EYtx+upfxJFxMsenv5Y3Q=) 3: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: 2HGFVACffkGhDeLHJzK3N3Q2oFmACWhF8TcKRliN94o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Apr 16 23:57:58 2026 GMT Not After : Apr 23 23:57:58 2026 GMT Subject: CN=69e17786-cdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:c1:57:29:79:c1:6e:d8:6e:3c:cb:57:05: 21:a1:b9:78:f4:2c:7e:39:cb:23:7e:e9:24:2d:33: 85:e3:e5:2b:54:14:d1:a9:41:48:3e:0d:c2:0d:57: 67:6a:7e:7b:84:da:82:0a:5a:89:73:a1:a4:50:21: d6:80:f8:1d:50:f1:94:e3:4e:dc:41:3f:aa:9e:9c: 01:91:c9:51:4b:38:25:0d:48:70:95:57:e5:18:f3: 8c:56:9d:d1:f3:89:01:49:d2:ab:c3:c8:ec:95:0f: b2:5f:c9:31:0b:fa:37:82:ac:ef:d7:b4:64:31:c7: 67:d5:38:d4:c7:e5:dd:3e:32:78:90:00:94:5d:23: 00:45:1f:25:2f:e7:d0:3e:04:75:5e:ea:e1:49:b0: c8:9c:3a:45:c5:e9:1a:51:88:a3:10:93:73:92:6e: 7a:07:85:4c:7a:31:b4:c2:66:8e:b3:49:2e:78:3b: 4f:1f:51:d5:9b:ca:1f:ab:c6:a1:08:8d:fc:15:42: c7:b8:a6:91:ed:64:95:eb:32:15:cf:de:2e:77:19: d3:bc:0f:3b:80:53:fd:0d:a7:82:bd:77:77:99:0b: ae:fe:c3:db:cb:f7:de:32:71:aa:d6:d9:8a:3b:fb: b6:12:74:22:4c:02:64:61:1f:2d:f9:e3:e7:45:be: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8D:A7:FC:9A:80:3D:E0:14:B1:27:7D:D0:4C:59:CD:6B:F4:A8:99 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:fa:18:f3:18:a0:c8:e8:4c:84:af:9f:bc:1f:b8:e2:fb:c0: 6e:85:37:48:50:ad:36:bb:c0:3a:b9:35:51:2e:29:36:29:41: 9a:4c:75:75:90:f4:aa:2b:36:a3:33:46:dd:b2:7f:6e:83:d9: 9e:86:4b:f1:e3:3b:50:76:e2:45:00:80:24:97:80:c6:32:b0: 87:2a:4f:c4:39:34:0e:d1:3e:30:d8:f8:6c:5c:69:ad:34:fd: cc:ae:94:48:e5:85:2d:af:b0:16:ba:93:0c:72:dd:ca:67:4f: ef:14:89:90:0d:d1:81:8e:3b:53:cd:fd:24:ea:79:af:71:d2: e2:8d:aa:95:3b:09:f3:e9:90:fe:7f:10:40:e8:63:f9:e1:79: 1e:26:b0:da:fe:1b:cb:bf:8d:7a:e6:02:38:c5:d9:95:4b:a2: df:bc:04:fe:d8:06:e4:41:ed:25:a8:34:ae:3c:77:b5:8b:7e: b4:b8:7f:dc:21:cf:7e:33:6b:fa:3e:e0:e1:24:b9:44:60:fc: 6c:52:63:f8:cc:5a:5f:00:0c:be:76:7e:14:8e:ac:1d:98:a1: 22:1a:32:61:01:73:98:1c:da:3d:3e:7c:3e:75:55:2e:52:b3: 05:0a:b1:03:58:f0:db:93:e1:fe:a5:2b:6d:53:b1:72:db:37: 9e:29:64:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjYwNDE2MjM1NzU4WhcNMjYwNDIzMjM1NzU4WjAYMRYwFAYD VQQDEw02OWUxNzc4Ni1jZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMTBVyl5wW7YbjzLVwUhobl49Cx+OcsjfukkLTOF4+UrVBTRqUFIPg3CDVdn an57hNqCClqJc6GkUCHWgPgdUPGU407cQT+qnpwBkclRSzglDUhwlVflGPOMVp3R 84kBSdKrw8jslQ+yX8kxC/o3gqzv17RkMcdn1TjUx+XdPjJ4kACUXSMARR8lL+fQ PgR1XurhSbDInDpFxekaUYijEJNzkm56B4VMejG0wmaOs0kueDtPH1HVm8ofq8ah CI38FULHuKaR7WSV6zIVz94udxnTvA87gFP9DaeCvXd3mQuu/sPby/feMnGq1tmK O/u2EnQiTAJkYR8t+ePnRb47YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWNp/ya gD3gFLEnfdBMWc1r9KiZMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQvoY8xigyOhMhK+fvB+44vvAboU3SFCtNrvAOrk1US4pNilBmkx1dZD0qis2 ozNG3bJ/boPZnoZL8eM7UHbiRQCAJJeAxjKwhypPxDk0DtE+MNj4bFxprTT9zK6U SOWFLa+wFrqTDHLdymdP7xSJkA3RgY47U839JOp5r3HS4o2qlTsJ8+mQ/n8QQOhj +eF5Hiaw2v4by7+NeuYCOMXZlUui37wE/tgG5EHtJag0rjx3tYt+tLh/3CHPfjNr +j7g4SS5RGD8bFJj+MxaXwAMvnZ+FI6sHZihIhoyYQFzmBzaPT58PnVVLlKzBQqx A1jw25Ph/qUrbVOxcts3nilk/w== -----END CERTIFICATE-----Generated at Fri Apr 17 15:40:06 2026 by rpki-client