$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: 2LpaseaZMGtQUTTt4W4IQk22K9dsr4juRTmWct+qwic= Subject key identifier: 1E:B4:6A:3B:19:74:E8:D6:68:DE:56:26:73:96:07:A7:8A:E5:74:FF Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0A17 Signing time: Thu 16 Apr 2026 19:42:50 +0000 Manifest this update: Thu 16 Apr 2026 19:42:49 +0000 Manifest next update: Thu 23 Apr 2026 19:42:49 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: wFS87EOcbMgYX6uj7JA8X3RCXSweJNoGgcVKReV71Xw=) 2: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=) 3: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Apr 16 19:42:49 2026 GMT Not After : Apr 23 19:42:49 2026 GMT Subject: CN=69e13bba-7037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:86:7d:0e:18:05:3c:bc:c6:8c:ba:98:63: 5e:15:af:c3:33:be:1d:7c:cb:83:6b:9a:c8:ea:bb: 61:18:50:fb:61:35:42:50:4e:7a:26:7f:c3:f4:65: 62:7e:1a:1f:5a:23:f7:17:d8:11:8f:30:8a:88:65: be:e5:6f:d5:e8:36:4d:c1:a0:3b:e6:32:a4:7e:a0: 13:fd:a3:0b:da:66:c5:be:d6:59:2e:84:7a:b7:08: 87:bc:2f:5a:f0:4c:d1:2b:96:53:b5:d4:07:57:42: 30:a3:52:3e:bc:5c:42:76:9d:49:67:77:63:92:15: 8f:67:17:19:63:38:e4:4b:7a:35:93:0a:12:7d:3f: 3c:ad:af:41:09:28:22:a4:ed:64:b4:34:08:9d:60: a0:ae:01:6e:ae:49:c1:a5:3d:f6:d2:c5:9c:fe:68: 2f:5f:79:a0:cd:92:ba:bd:ff:54:65:67:e0:f6:b8: 28:fb:e0:90:bd:61:b7:a7:37:79:bc:07:76:43:8c: 84:63:0f:2b:13:a6:19:b0:0e:d0:18:6e:08:94:68: 1e:09:28:36:f0:7a:ad:88:ae:a0:91:f8:0b:99:9a: 32:69:25:8c:db:a6:b2:f6:a2:e9:45:46:15:6f:57: dc:09:8f:eb:1c:ae:9f:e0:59:fa:8b:81:9a:27:2a: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B4:6A:3B:19:74:E8:D6:68:DE:56:26:73:96:07:A7:8A:E5:74:FF X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f4:a8:70:40:be:3a:cd:53:23:e8:47:d4:45:32:a0:fa:9f: 1c:ab:74:20:b8:b8:2d:75:55:e8:e2:08:de:50:cf:02:49:f1: 36:7e:2a:30:d7:6b:97:bc:a4:5a:c7:2d:9e:fe:59:66:45:0c: 84:07:1c:d3:c5:e8:9d:df:f6:1a:6f:8a:94:a9:6f:91:09:6a: fa:59:e2:4b:56:db:a9:e2:87:e4:47:19:2b:29:03:13:b5:a4: a7:a8:05:b9:68:d7:d0:7e:fc:e9:7b:bc:0a:54:d3:2c:e5:6e: b2:a0:7a:d5:a6:3e:45:ff:fb:a1:38:14:f7:30:a7:5b:e8:3b: c2:53:18:eb:40:b0:b3:7b:42:cd:c3:ae:71:18:f6:fa:0b:ff: 82:f1:07:f3:b5:24:75:6a:f6:d8:a2:76:c5:31:5b:6a:78:71: 3a:ee:b5:c3:3b:d7:68:f1:27:df:c5:8f:4a:b5:a9:c2:29:d0: b5:7b:eb:62:4f:fc:c4:58:be:b5:39:5b:8d:7f:84:08:59:a0: 6b:83:6c:75:f9:69:ed:c0:05:7b:b6:b4:5e:7e:0d:03:a8:a1: 67:75:8b:a3:41:2f:01:bc:75:91:c1:8a:b4:4e:49:88:3c:26: 3d:7c:81:69:66:a0:0f:3e:b9:85:74:ce:73:43:0e:30:3c:e6: 07:b2:48:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwNDE2MTk0MjQ5WhcNMjYwNDIzMTk0MjQ5WjAYMRYwFAYD VQQDEw02OWUxM2JiYS03MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre6GfQ4YBTy8xoy6mGNeFa/DM74dfMuDa5rI6rthGFD7YTVCUE56Jn/D9GVi fhofWiP3F9gRjzCKiGW+5W/V6DZNwaA75jKkfqAT/aML2mbFvtZZLoR6twiHvC9a 8EzRK5ZTtdQHV0Iwo1I+vFxCdp1JZ3djkhWPZxcZYzjkS3o1kwoSfT88ra9BCSgi pO1ktDQInWCgrgFurknBpT320sWc/mgvX3mgzZK6vf9UZWfg9rgo++CQvWG3pzd5 vAd2Q4yEYw8rE6YZsA7QGG4IlGgeCSg28HqtiK6gkfgLmZoyaSWM26ay9qLpRUYV b1fcCY/rHK6f4Fn6i4GaJypR1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB60ajsZ dOjWaN5WJnOWB6eK5XT/MB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACPSocEC+Os1TI+hH1EUyoPqfHKt0ILi4LXVV6OII3lDPAknxNn4qMNdrl7yk Wsctnv5ZZkUMhAcc08Xond/2Gm+KlKlvkQlq+lniS1bbqeKH5EcZKykDE7Wkp6gF uWjX0H786Xu8ClTTLOVusqB61aY+Rf/7oTgU9zCnW+g7wlMY60Cws3tCzcOucRj2 +gv/gvEH87UkdWr22KJ2xTFbanhxOu61wzvXaPEn38WPSrWpwinQtXvrYk/8xFi+ tTlbjX+ECFmga4Nsdflp7cAFe7a0Xn4NA6ihZ3WLo0EvAbx1kcGKtE5JiDwmPXyB aWagDz65hXTOc0MOMDzmB7JIgQ== -----END CERTIFICATE-----Generated at Sat Apr 18 04:00:02 2026 by rpki-client