$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: 7aTjw63QuslGBBVdt6rBO4O9PpRNEJ9hiE2paHmY7LY= Subject key identifier: 7F:F2:C7:0E:C6:D1:59:CF:80:70:87:84:3D:82:5D:56:71:C1:EA:B5 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: BD Signing time: Fri 17 Apr 2026 06:47:23 +0000 Manifest this update: Fri 17 Apr 2026 06:47:22 +0000 Manifest next update: Fri 24 Apr 2026 06:47:22 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: u2mXmXx2Uf0Xb0ZDR3naTKI6hV+petL6xCsFAYuRMuY=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Apr 17 06:47:22 2026 GMT Not After : Apr 24 06:47:22 2026 GMT Subject: CN=69e1d77b-f865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:d0:a5:9b:70:bf:5c:23:dc:6d:7e:65:d6: e7:cc:2d:2c:a1:39:66:9d:a0:39:a0:f5:61:cf:ef: 9e:a8:19:cd:48:bf:b5:2b:ca:2b:b7:84:7d:27:35: d2:f1:ef:09:59:67:9a:94:b1:aa:3a:fa:ee:b3:c3: 5f:50:16:c5:ce:41:4a:9d:7d:0d:14:1b:39:e6:b4: 54:bc:d5:e9:6d:38:85:85:31:41:4d:55:3b:f3:cd: c0:c9:cc:6e:57:44:8e:cb:00:5f:fa:29:f7:88:51: db:08:4a:4f:44:d9:8a:22:5f:db:bc:61:6c:4e:8c: a1:54:64:bb:55:c3:e5:30:0e:43:86:19:09:d0:60: 88:7e:fa:4b:e5:5c:1a:62:80:a9:68:bc:8f:43:95: ae:26:e9:bc:fd:d5:7c:bd:87:5c:24:3e:48:a3:90: f9:b6:20:f7:b8:61:44:86:86:91:2c:a0:75:b3:2f: 25:71:bf:cb:ed:f5:8b:e4:bd:29:4f:96:96:c0:d2: cb:69:0b:89:4a:c8:61:ac:63:55:49:33:03:2f:51: fb:97:8b:8e:f5:28:9c:b3:c1:c3:28:1c:f2:41:76: 1a:f7:2f:d7:8f:76:d3:bd:21:62:03:31:c4:11:17: 85:8f:c9:72:3f:87:2c:ae:8d:2c:13:3e:e1:77:82: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:C7:0E:C6:D1:59:CF:80:70:87:84:3D:82:5D:56:71:C1:EA:B5 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a0:78:30:52:0f:b4:d9:bc:1a:13:a2:5d:37:c6:9b:3c:0c: ce:ef:13:2a:57:be:a3:99:ce:d0:e4:29:72:7a:6f:e6:c3:fa: 5c:3e:b5:4c:48:5b:64:43:cc:ed:6c:ad:a7:aa:c4:54:6f:42: 1d:d1:61:30:2f:0d:c4:bf:35:8a:ce:da:0b:ed:a5:68:1e:c6: 40:9b:fb:b1:f2:25:d2:a2:45:b8:3f:32:ad:a1:cb:7f:7d:16: a0:1b:06:8e:a9:10:05:84:3f:0f:8a:d3:06:25:aa:66:30:79: c7:86:24:f5:eb:08:4d:c7:f6:9e:00:85:4f:48:88:8a:8d:47: 72:42:27:86:cc:28:41:e3:bb:55:44:96:d3:3b:13:62:4a:f8: cb:6c:f7:7f:b7:27:a6:63:8a:53:9c:c1:22:be:02:51:f3:9a: 21:45:d5:a1:d9:0c:63:72:81:03:6c:bd:fa:c9:b2:27:ac:71: f7:fa:c7:73:af:ef:ea:fc:c0:63:38:59:70:74:1c:4b:ec:66: 26:bf:41:80:d4:4a:73:6a:4e:c9:df:54:91:1f:28:25:ca:7f: e1:6f:1e:86:17:73:4f:18:d8:b3:0d:1c:e9:44:68:9d:46:c4: 11:40:7b:1a:63:e8:6f:68:9c:13:d3:fb:3b:05:9b:e9:91:d6: c8:b1:d2:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBGQjU4QUE2NDJD NkQwMUI4NzUwHhcNMjYwNDE3MDY0NzIyWhcNMjYwNDI0MDY0NzIyWjAYMRYwFAYD VQQDEw02OWUxZDc3Yi1mODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumfQpZtwv1wj3G1+ZdbnzC0soTlmnaA5oPVhz++eqBnNSL+1K8ort4R9JzXS 8e8JWWealLGqOvrus8NfUBbFzkFKnX0NFBs55rRUvNXpbTiFhTFBTVU7883Aycxu V0SOywBf+in3iFHbCEpPRNmKIl/bvGFsToyhVGS7VcPlMA5DhhkJ0GCIfvpL5Vwa YoCpaLyPQ5WuJum8/dV8vYdcJD5Io5D5tiD3uGFEhoaRLKB1sy8lcb/L7fWL5L0p T5aWwNLLaQuJSshhrGNVSTMDL1H7l4uO9Sics8HDKBzyQXYa9y/Xj3bTvSFiAzHE EReFj8lyP4csro0sEz7hd4LomQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/yxw7G 0VnPgHCHhD2CXVZxweq1MB8GA1UdIwQYMBaAFAoqMxLgi6nEG+fg+1iqZCxtAbh1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi8wMTUwNUEzMDI5 NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFjUWI1LUQ3V0twa0xHMEJ1 SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0RDQi8wMTUwNUEzMDI5NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFj UWI1LUQ3V0twa0xHMEJ1SFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVqB4MFIPtNm8GhOiXTfGmzwMzu8TKle+o5nO0OQpcnpv5sP6XD61TEhbZEPM 7Wytp6rEVG9CHdFhMC8NxL81is7aC+2laB7GQJv7sfIl0qJFuD8yraHLf30WoBsG jqkQBYQ/D4rTBiWqZjB5x4Yk9esITcf2ngCFT0iIio1HckInhswoQeO7VUSW0zsT Ykr4y2z3f7cnpmOKU5zBIr4CUfOaIUXVodkMY3KBA2y9+smyJ6xx9/rHc6/v6vzA YzhZcHQcS+xmJr9BgNRKc2pOyd9UkR8oJcp/4W8ehhdzTxjYsw0c6URonUbEEUB7 GmPob2icE9P7OwWb6ZHWyLHS3Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:40 2026 by rpki-client