$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: K6+08/df8HzjKi5g79nmFKGVRqtxoz/wtt7C4++VYXU= Subject key identifier: 2D:7A:25:EC:F4:E5:65:03:76:79:15:82:73:07:92:EC:B1:3E:05:1C Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 13EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 13CF Signing time: Thu 16 Apr 2026 16:53:37 +0000 Manifest this update: Thu 16 Apr 2026 16:53:36 +0000 Manifest next update: Thu 23 Apr 2026 16:53:36 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: 0AD5YTuVbCEHyHZJW6O3YwnFtLki0wJMseMBAYf/M6k=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5098 (0x13ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Apr 16 16:53:36 2026 GMT Not After : Apr 23 16:53:36 2026 GMT Subject: CN=69e11411-fa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:68:fc:c5:fc:61:29:d8:fc:d4:3a:e0:3b:bb: f1:51:90:71:d9:8c:a3:74:d7:c1:19:34:91:55:41: 1f:04:d0:89:15:41:fc:0d:6b:c6:95:ed:6c:fc:28: 8e:b5:fa:94:21:fe:46:76:e7:da:ca:09:34:f4:d3: e3:dd:6f:63:13:c6:11:01:93:4b:ed:5a:c1:b7:6a: cd:66:67:63:e1:a1:db:e9:d5:f5:cc:47:41:19:d6: 06:f2:73:9c:3f:ae:ff:00:f4:ce:f3:1a:9c:90:36: 22:77:e1:f5:e3:3a:ac:41:b2:da:05:ac:cd:d3:f4: bc:3f:99:65:87:12:f4:9a:2d:5a:c2:0d:22:a9:c5: 4f:64:6b:c4:b8:11:a6:e0:44:77:f5:47:42:ed:ed: 67:a8:f4:2b:23:ee:5a:68:51:7a:06:ce:5d:12:32: b7:d3:2b:7d:a2:9c:8a:84:0b:40:61:e7:68:be:25: 80:8a:68:cc:b6:53:5a:8a:b1:8d:1e:bf:a6:bc:27: 72:d5:3e:59:d2:3e:59:bc:e6:79:d7:0f:a9:a5:51: fd:4c:6e:48:4a:84:c3:60:48:06:57:b5:2f:85:75: 86:84:ed:14:32:01:94:bb:f6:3e:36:1a:c2:98:64: 4d:1a:20:71:21:e7:9f:dc:b6:66:52:23:8f:a9:f9: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:25:EC:F4:E5:65:03:76:79:15:82:73:07:92:EC:B1:3E:05:1C X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:71:c8:6d:c4:d6:03:3b:e5:50:43:3c:75:9e:87:86:4e:8e: 21:55:f9:89:3d:19:12:f1:e5:9a:eb:aa:9c:7d:65:5d:3d:5f: 5f:80:8c:e1:c0:5a:82:5a:69:3c:8f:9e:38:8a:10:d0:ee:5b: fb:0b:8e:e1:80:e7:79:f1:52:08:18:62:70:55:31:79:8f:a0: d5:ed:74:61:69:d4:f0:cb:26:10:63:36:7c:b2:eb:29:f0:b7: 55:fd:76:7a:c0:43:ad:3f:4a:0d:89:65:fa:7a:a5:d8:d5:0e: df:a7:b0:4e:3f:e8:cf:cf:39:9b:5d:af:17:93:90:60:58:0c: 72:64:13:98:a2:71:e1:28:49:fb:5b:07:3f:53:fe:f3:9f:b3: 06:e6:4c:5d:c6:68:62:ba:9d:b6:09:c6:b3:1c:6f:27:a7:0a: 41:f8:44:94:17:09:b8:1e:af:a6:12:8b:37:7b:e4:f8:c6:36: cf:2d:b9:8b:17:e9:eb:3d:8a:7c:56:a2:de:f1:fd:3d:6f:76: c6:f6:57:f1:18:85:14:d0:0e:bf:98:8c:93:fc:2a:00:d9:c4: 8e:ac:14:13:9a:4f:da:63:b5:60:d8:d9:0b:9a:48:b8:03:8d: 77:80:1b:20:79:3b:25:41:f1:bc:5b:b6:92:d2:60:20:03:fd: 4e:84:71:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwNDE2MTY1MzM2WhcNMjYwNDIzMTY1MzM2WjAYMRYwFAYD VQQDEw02OWUxMTQxMS1mYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mj8xfxhKdj81DrgO7vxUZBx2YyjdNfBGTSRVUEfBNCJFUH8DWvGle1s/CiO tfqUIf5Gdufaygk09NPj3W9jE8YRAZNL7VrBt2rNZmdj4aHb6dX1zEdBGdYG8nOc P67/APTO8xqckDYid+H14zqsQbLaBazN0/S8P5llhxL0mi1awg0iqcVPZGvEuBGm 4ER39UdC7e1nqPQrI+5aaFF6Bs5dEjK30yt9opyKhAtAYedoviWAimjMtlNairGN Hr+mvCdy1T5Z0j5ZvOZ51w+ppVH9TG5ISoTDYEgGV7UvhXWGhO0UMgGUu/Y+NhrC mGRNGiBxIeef3LZmUiOPqfm5OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC16Jez0 5WUDdnkVgnMHkuyxPgUcMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqHHIbcTWAzvlUEM8dZ6Hhk6OIVX5iT0ZEvHlmuuqnH1lXT1fX4CM4cBaglpp PI+eOIoQ0O5b+wuO4YDnefFSCBhicFUxeY+g1e10YWnU8MsmEGM2fLLrKfC3Vf12 esBDrT9KDYll+nql2NUO36ewTj/oz885m12vF5OQYFgMcmQTmKJx4ShJ+1sHP1P+ 85+zBuZMXcZoYrqdtgnGsxxvJ6cKQfhElBcJuB6vphKLN3vk+MY2zy25ixfp6z2K fFai3vH9PW92xvZX8RiFFNAOv5iMk/wqANnEjqwUE5pP2mO1YNjZC5pIuAONd4Ab IHk7JUHxvFu2ktJgIAP9ToRx/g== -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:09 2026 by rpki-client