$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft File: -c2wYYjVT9E3MDC5IMjkRdstPVc.mft (raw, json) Hash identifier: Q0wwIvIR0U08Tv/z5/pkGKU9f/iESFFKKf+/fECeFx0= Subject key identifier: 01:47:E6:C5:5D:F0:CB:1D:D4:B7:0C:6C:74:A8:79:BE:A0:C3:B8:A6 Authority key identifier: F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57 Certificate issuer: /CN=A91A99F8/serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft Manifest number: D4 Signing time: Fri 17 Apr 2026 06:31:31 +0000 Manifest this update: Fri 17 Apr 2026 06:31:31 +0000 Manifest next update: Fri 24 Apr 2026 06:31:31 +0000 Files and hashes: 1: -c2wYYjVT9E3MDC5IMjkRdstPVc.crl (hash: 05g6ftS4+drJkDpgm/1zrk15OX+dlGbb+W4u9UZzLtM=) 2: C4D0CEECACF611F0AC34117FC4F9AE02.roa (hash: FiHQ8LCYnnxAYhB+CVfO9AnLMeg+kwDxPRYRsj7xuLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99F8, serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57 Validity Not Before: Apr 17 06:31:31 2026 GMT Not After : Apr 24 06:31:31 2026 GMT Subject: CN=69e1d3c3-f527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:8a:f9:99:f7:22:8c:b2:8b:07:8c:ad:b7: f5:88:1e:a5:0d:97:d6:d5:61:4b:96:6c:24:54:4c: 37:00:cd:f9:1c:79:8b:8b:1c:4b:85:5b:51:92:ac: 28:fe:64:a6:41:ac:57:f8:a4:f0:f5:f9:d8:3b:40: 3d:0e:35:dd:63:76:07:d5:43:df:ae:d0:de:cf:b5: b1:f7:6e:cf:92:11:cf:27:96:f1:fa:a7:04:d0:b2: 82:c3:ba:33:2b:4b:97:da:a4:15:46:0c:02:2d:20: 4b:fb:18:ef:5a:75:96:c8:83:68:5e:1e:a9:3d:8c: 50:65:68:2f:6e:6d:e2:bb:25:b1:30:a3:04:48:0a: f6:a2:a1:de:09:f6:81:c2:33:01:8f:2f:12:72:5a: af:cc:70:52:8d:44:4e:11:58:07:12:25:da:20:c9: 70:1d:9f:06:56:d4:de:92:fa:7d:9e:2a:09:66:67: 48:7d:ca:b8:98:a0:bd:d8:8e:92:17:06:ce:cd:5a: bc:ce:80:89:eb:3e:8b:46:cf:e2:9f:27:82:37:48: d8:2f:81:7a:85:a0:1f:95:98:5c:45:f0:40:df:16: 2c:97:8f:58:5e:34:ae:64:12:6e:76:6a:b7:36:87: 4b:a7:49:f2:0e:75:f4:80:70:a8:c6:ab:b1:ba:25: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:E6:C5:5D:F0:CB:1D:D4:B7:0C:6C:74:A8:79:BE:A0:C3:B8:A6 X509v3 Authority Key Identifier: keyid:F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:36:37:37:ee:48:a3:62:d1:ab:57:5c:92:34:e6:cd:29:81: 20:90:2c:fb:45:75:12:31:83:02:ee:24:48:98:b3:a0:da:52: cf:7f:29:30:83:43:a9:5a:f5:bd:ec:40:48:ca:f8:e8:3b:92: 2a:54:d8:e4:db:f9:86:5c:dd:dc:d2:12:fe:17:41:1c:ad:5d: 51:09:fe:8d:53:55:7e:b5:42:9e:1d:6f:91:83:64:cc:7c:f1: 05:58:1e:36:50:0c:2a:de:3c:1b:30:84:cd:12:a3:a7:d1:0d: 97:5f:d7:76:ed:f7:ca:e6:45:23:46:73:0b:93:24:38:41:a1: c4:68:52:e5:5b:e5:5b:2f:0d:14:a0:3c:fd:d7:67:94:97:c6: 3e:f0:d7:13:b7:10:31:47:e9:4b:85:26:a3:99:58:4e:85:d5: 72:cc:c2:55:68:ab:8a:c4:1f:1a:42:08:38:b2:a2:b2:6e:ed: b5:ce:75:c6:5f:50:e1:23:74:a6:66:26:ba:01:57:74:a0:b1: c2:58:a7:42:2b:04:c2:b6:35:44:87:82:88:de:9b:3d:c6:e8: d8:9c:e7:aa:24:bb:a6:bb:f5:b6:6c:3b:50:b2:b1:fa:92:2a: 3c:7f:b1:31:b9:35:00:83:84:f3:3a:b1:08:f2:da:63:c9:a8: 06:2c:e8:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5RjgxMTAvBgNVBAUTKEY5Q0RCMDYxODhENTRGRDEzNzMwMzBCOTIwQzhFNDQ1 REIyRDNENTcwHhcNMjYwNDE3MDYzMTMxWhcNMjYwNDI0MDYzMTMxWjAYMRYwFAYD VQQDEw02OWUxZDNjMy1mNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjD2K+Zn3IoyyiweMrbf1iB6lDZfW1WFLlmwkVEw3AM35HHmLixxLhVtRkqwo /mSmQaxX+KTw9fnYO0A9DjXdY3YH1UPfrtDez7Wx927PkhHPJ5bx+qcE0LKCw7oz K0uX2qQVRgwCLSBL+xjvWnWWyINoXh6pPYxQZWgvbm3iuyWxMKMESAr2oqHeCfaB wjMBjy8SclqvzHBSjUROEVgHEiXaIMlwHZ8GVtTekvp9nioJZmdIfcq4mKC92I6S FwbOzVq8zoCJ6z6LRs/inyeCN0jYL4F6haAflZhcRfBA3xYsl49YXjSuZBJudmq3 NodLp0nyDnX0gHCoxquxuiXIOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFH5sVd 8Msd1LcMbHSoeb6gw7imMB8GA1UdIwQYMBaAFPnNsGGI1U/RNzAwuSDI5EXbLT1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlGOC83QTREN0I4ODA0 QTcxMUYwQjRENzM5ODJDNEY5QUUwMi8tYzJ3WVlqVlQ5RTNNREM1SU1qa1Jkc3RQ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jMndZWWpWVDlFM01EQzVJTWprUmRzdFBWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTlGOC83QTREN0I4ODA0QTcxMUYwQjRENzM5ODJDNEY5QUUwMi8tYzJ3WVlqVlQ5 RTNNREM1SU1qa1Jkc3RQVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTY3N+5Io2LRq1dckjTmzSmBIJAs+0V1EjGDAu4kSJizoNpSz38pMINDqVr1 vexASMr46DuSKlTY5Nv5hlzd3NIS/hdBHK1dUQn+jVNVfrVCnh1vkYNkzHzxBVge NlAMKt48GzCEzRKjp9ENl1/Xdu33yuZFI0ZzC5MkOEGhxGhS5VvlWy8NFKA8/ddn lJfGPvDXE7cQMUfpS4Umo5lYToXVcszCVWirisQfGkIIOLKism7ttc51xl9Q4SN0 pmYmugFXdKCxwlinQisEwrY1RIeCiN6bPcbo2JznqiS7prv1tmw7ULKx+pIqPH+x Mbk1AIOE8zqxCPLaY8moBizoog== -----END CERTIFICATE-----Generated at Fri Apr 17 10:28:23 2026 by rpki-client