$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: fi3U4qX3/FG84uCKcuYJrMGtN3kFUC7Fm+Pg7JVrEkk= Subject key identifier: C6:3E:B3:36:7C:DC:DE:49:A8:37:BC:60:D2:DD:4E:FB:92:17:D0:87 Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 0A Signing time: Fri 17 Apr 2026 08:53:16 +0000 Manifest this update: Fri 17 Apr 2026 08:53:16 +0000 Manifest next update: Fri 24 Apr 2026 08:53:16 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: E90FluUeF81rBdtLn+0QNdNLWdOIYiU1zJ9Tpha2cS0=) 2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) 3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: Apr 17 08:53:16 2026 GMT Not After : Apr 24 08:53:16 2026 GMT Subject: CN=69e1f4fc-94da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:9e:d1:05:29:f1:b8:36:b2:3e:2e:1a:af: 75:0f:48:74:66:65:0e:7d:f7:4c:a9:c2:b3:d4:ca: 40:42:f8:82:f6:dc:f4:6b:63:4c:ca:d8:15:f6:b9: 91:39:a5:fa:d6:36:ff:fe:c4:7c:c1:96:0f:24:06: 7a:f6:63:bb:7c:35:e5:ce:58:ed:fe:c7:81:58:91: 78:38:26:fe:36:57:12:12:d5:9c:bd:14:7e:7d:c7: 37:bc:ad:f4:e9:36:a0:dd:66:97:96:a8:9c:00:68: ea:85:b3:c4:1e:a8:26:88:94:9d:e8:3a:f4:6c:ad: 22:8c:81:23:ff:b5:8f:76:8d:13:04:9c:39:96:cb: 18:72:d2:48:ba:97:d3:d2:9c:92:40:f4:99:fe:ae: 5c:33:91:9f:e9:61:22:f6:91:c1:88:ca:df:de:d2: 9c:6f:d5:76:19:06:7f:c8:e7:fd:2d:4f:51:98:f7: 87:ff:64:59:56:63:4b:3e:30:88:1e:f3:75:e9:89: c3:72:5e:bc:84:d1:bf:c2:c5:85:60:52:2e:7c:90: b7:8c:0e:57:7b:3e:99:55:b2:a1:bd:fe:94:34:35: 76:53:64:34:99:c4:9a:62:bb:a1:d0:c2:52:0a:cb: e1:8b:4d:86:23:31:cc:7a:30:0a:d1:8f:a7:0c:ea: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3E:B3:36:7C:DC:DE:49:A8:37:BC:60:D2:DD:4E:FB:92:17:D0:87 X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cd:2c:a1:42:75:72:08:79:14:fb:ea:e7:b6:71:02:8e:f3: df:c4:f0:65:8c:63:14:3a:4f:cb:5b:a0:67:c2:be:72:95:a3: 5f:7f:56:66:43:3a:c0:28:f5:1a:ec:29:a3:06:da:92:17:cb: c0:9a:50:ca:8a:c8:95:17:77:0f:45:86:fe:53:f9:10:7e:bd: 10:88:97:ce:10:b0:59:a0:c4:d7:ae:44:36:c0:31:2f:a7:88: 8c:33:bc:f9:0d:23:dc:3a:9e:09:5b:95:d2:4e:b5:22:20:22: 2e:07:f1:ea:9b:f2:93:d1:9f:fb:40:29:31:0f:64:e7:52:4c: 61:21:af:e8:8b:4d:1a:53:7b:3e:cc:97:10:d5:30:ee:4c:e3: 4d:31:ea:7a:8b:57:d4:a1:e0:06:dd:db:19:e9:7b:82:76:ec: f9:45:1a:3d:29:8e:68:6e:ad:c4:b2:4e:cb:f2:08:ea:b4:3a: 64:b1:10:c1:00:5a:a6:60:7c:f1:12:d0:fb:90:62:cd:11:5c: fc:c0:d0:4a:da:6b:f0:c3:e2:3c:89:a3:fa:18:8b:2d:41:c6: 22:e2:46:73:23:94:cf:83:31:08:67:5d:e7:bb:de:ed:a9:75: b0:f4:53:a8:3f:12:73:76:72:0b:c2:a5:3b:ca:a6:cd:2b:35: 42:c3:61:dd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjA0MTcwODUzMTZaFw0yNjA0MjQwODUzMTZaMBgxFjAUBgNV BAMTDTY5ZTFmNGZjLTk0ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbPp7RBSnxuDayPi4ar3UPSHRmZQ5990ypwrPUykBC+IL23PRrY0zK2BX2uZE5 pfrWNv/+xHzBlg8kBnr2Y7t8NeXOWO3+x4FYkXg4Jv42VxIS1Zy9FH59xze8rfTp NqDdZpeWqJwAaOqFs8QeqCaIlJ3oOvRsrSKMgSP/tY92jRMEnDmWyxhy0ki6l9PS nJJA9Jn+rlwzkZ/pYSL2kcGIyt/e0pxv1XYZBn/I5/0tT1GY94f/ZFlWY0s+MIge 83XpicNyXryE0b/CxYVgUi58kLeMDld7PplVsqG9/pQ0NXZTZDSZxJpiu6HQwlIK y+GLTYYjMcx6MArRj6cM6uEHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxj6zNnzc 3kmoN7xg0t1O+5IX0IcwHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFzSyhQnVyCHkU++rntnECjvPfxPBljGMUOk/LW6Bnwr5ylaNff1ZmQzrAKPUa 7CmjBtqSF8vAmlDKisiVF3cPRYb+U/kQfr0QiJfOELBZoMTXrkQ2wDEvp4iMM7z5 DSPcOp4JW5XSTrUiICIuB/Hqm/KT0Z/7QCkxD2TnUkxhIa/oi00aU3s+zJcQ1TDu TONNMep6i1fUoeAG3dsZ6XuCduz5RRo9KY5obq3Esk7L8gjqtDpksRDBAFqmYHzx EtD7kGLNEVz8wNBK2mvww+I8iaP6GIstQcYi4kZzI5TPgzEIZ13nu97tqXWw9FOo PxJzdnILwqU7yqbNKzVCw2Hd -----END CERTIFICATE-----Generated at Fri Apr 17 20:23:50 2026 by rpki-client