$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json) Hash identifier: IiNo2h6JAUhgIK6L59ZfgKGzfoxfMv6ovNICCizcDIY= Subject key identifier: 3B:F0:FA:95:47:0D:00:17:8F:FC:41:D4:20:AF:90:ED:75:82:75:67 Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0D4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft Manifest number: 0D24 Signing time: Thu 16 Apr 2026 18:06:59 +0000 Manifest this update: Thu 16 Apr 2026 18:06:59 +0000 Manifest next update: Thu 23 Apr 2026 18:06:59 +0000 Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: L0GPSZOiTM55pxBTfGySFamoTRy9EmU0Zdg9Fxzep/Y=) 2: 4C8BB01CF0A511F0AE903042706F56BC.roa (hash: O4BcOq2hKD3I3RD3vTsJAeBqf6AIzX76ZzjjaHK+ElU=) 3: F824C588FF7A11F0B218EB915B6F56BC.roa (hash: vyzv0f1THJyglSIA32Cmr/3tLhp6nkKIDvP00vthIq0=) 4: 4F383CB6FF6B11F0AD4BC885576F56BC.roa (hash: wwbAK8oiejrRqztY01yoKfr0EpZtJpfxnGCsmORuPJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3407 (0xd4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: Apr 16 18:06:59 2026 GMT Not After : Apr 23 18:06:59 2026 GMT Subject: CN=69e12543-6f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cf:a3:e4:1a:df:dc:a8:82:95:b4:c6:9b:1a: be:38:3e:81:1c:23:83:c0:17:5b:d3:00:44:e2:33: b2:1e:8b:73:9d:30:2f:f5:39:aa:4c:90:86:03:83: d1:16:fe:53:29:be:f0:f9:90:42:a4:99:b8:d1:65: 57:01:c3:37:cb:8e:1c:eb:eb:c0:77:a0:1d:61:8f: 93:7d:74:1d:9b:56:ac:72:b9:31:57:40:fd:a4:82: c0:41:0f:1b:49:09:b1:d8:35:2d:18:b4:e7:51:0e: f4:12:b8:0d:f8:23:b7:c4:b9:a4:a0:30:db:e6:52: 78:ba:85:f9:bf:a9:8f:4c:e7:3d:39:56:a6:9d:b1: cc:70:b7:c8:cd:05:92:d2:43:3a:b9:a4:fd:0c:d9: 14:e6:b8:f0:6c:50:88:ff:39:ed:c3:d0:ff:33:55: 78:b0:85:4f:f2:81:4b:88:d0:bc:9c:ee:94:f1:9c: c8:63:6a:26:12:64:73:67:4b:b8:de:4f:50:e5:d9: 07:05:1f:de:5f:30:13:fa:49:a8:ba:c3:9c:cb:5a: 0b:f8:f3:63:ec:83:7f:e1:67:df:34:a7:a3:32:7f: 7b:3a:b3:93:80:26:c8:9e:f8:83:bf:67:33:b3:f0: 25:76:05:e3:ec:7b:4d:71:f9:f4:a7:d7:99:b6:ed: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F0:FA:95:47:0D:00:17:8F:FC:41:D4:20:AF:90:ED:75:82:75:67 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2e:63:26:34:c2:c5:17:4d:74:b8:b4:d5:9e:c6:85:eb:b4: 8e:98:d4:3f:a1:07:05:c9:9d:2b:f7:4f:bb:54:d9:50:67:23: 14:49:f7:fd:27:f3:8c:4b:5c:f4:f5:fe:39:b7:76:e4:f4:e9: da:96:41:30:1e:54:a9:e8:a5:09:b7:dd:92:91:ce:37:7b:a6: 6b:38:0b:bd:c9:dd:f6:64:a9:8b:e2:f4:90:a6:23:45:e3:06: 37:c5:43:3e:60:21:1f:ef:7d:25:fc:6b:6e:1b:32:32:7e:29: 96:e2:db:a6:90:22:55:0b:ff:06:5e:23:29:5a:de:97:ab:97: 22:cf:a2:0a:33:2a:ab:e8:65:0e:5a:4b:47:54:51:a0:b2:0a: 9c:68:4e:41:54:ae:09:c2:2a:6c:5c:06:b9:8c:e2:13:87:cd: 32:f6:6c:68:bd:32:ee:df:11:c9:72:2b:0a:52:b0:82:11:26: b1:6e:88:64:0c:e1:11:a2:16:2b:5b:2d:cc:29:c1:3a:47:29: 37:e8:12:7b:99:61:1b:55:c7:70:86:60:c8:52:da:08:4e:ec: 54:5a:a0:05:5f:fb:97:b2:d2:4f:6b:7c:86:a5:61:bc:1c:ef: 88:2c:2a:cc:45:86:04:c5:eb:ed:0b:5e:9b:6a:5a:4a:13:01: 3e:4c:2c:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjYwNDE2MTgwNjU5WhcNMjYwNDIzMTgwNjU5WjAYMRYwFAYD VQQDEw02OWUxMjU0My02ZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM+j5Brf3KiClbTGmxq+OD6BHCODwBdb0wBE4jOyHotznTAv9TmqTJCGA4PR Fv5TKb7w+ZBCpJm40WVXAcM3y44c6+vAd6AdYY+TfXQdm1ascrkxV0D9pILAQQ8b SQmx2DUtGLTnUQ70ErgN+CO3xLmkoDDb5lJ4uoX5v6mPTOc9OVamnbHMcLfIzQWS 0kM6uaT9DNkU5rjwbFCI/zntw9D/M1V4sIVP8oFLiNC8nO6U8ZzIY2omEmRzZ0u4 3k9Q5dkHBR/eXzAT+kmousOcy1oL+PNj7IN/4WffNKejMn97OrOTgCbInviDv2cz s/AldgXj7HtNcfn0p9eZtu0V6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvw+pVH DQAXj/xB1CCvkO11gnVnMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjVGMi9FRjkwQ0Q0RTAzQjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzky OXZrS0NkX1d1cUd0VG5POG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZi5jJjTCxRdNdLi01Z7Gheu0jpjUP6EHBcmdK/dPu1TZUGcjFEn3/SfzjEtc 9PX+Obd25PTp2pZBMB5UqeilCbfdkpHON3umazgLvcnd9mSpi+L0kKYjReMGN8VD PmAhH+99JfxrbhsyMn4pluLbppAiVQv/Bl4jKVrel6uXIs+iCjMqq+hlDlpLR1RR oLIKnGhOQVSuCcIqbFwGuYziE4fNMvZsaL0y7t8RyXIrClKwghEmsW6IZAzhEaIW K1stzCnBOkcpN+gSe5lhG1XHcIZgyFLaCE7sVFqgBV/7l7LST2t8hqVhvBzviCwq zEWGBMXr7Qtem2paShMBPkwsJA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:39 2026 by rpki-client