$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft File: MTDg-yrjCHHxtEx3xUL__P4dl0A.mft (raw, json) Hash identifier: zkGAUH6ocmG0knPGKLCo/xTj1dO5MhKjtXk6OOwETgw= Subject key identifier: F4:66:37:EE:02:A9:D0:02:0F:56:86:5D:7E:FC:F6:18:9B:09:32:98 Authority key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 Certificate issuer: /CN=A91B8833/serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft Manifest number: 16 Signing time: Wed 15 Apr 2026 08:34:17 +0000 Manifest this update: Wed 15 Apr 2026 08:34:17 +0000 Manifest next update: Wed 22 Apr 2026 08:34:17 +0000 Files and hashes: 1: MTDg-yrjCHHxtEx3xUL__P4dl0A.crl (hash: DCN/kf2hXEGDC5C9uOsKQ+cyz2oMaRQRagw2GTXti4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Validity Not Before: Apr 15 08:34:17 2026 GMT Not After : Apr 22 08:34:17 2026 GMT Subject: CN=69df4d89-6a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:1c:db:a3:bc:cd:52:8e:61:64:c2:03:4a: 3c:30:a0:35:10:fc:25:7b:38:4f:ee:d1:0c:8c:61: 1d:b0:b9:e2:6d:4c:80:84:6f:85:29:bf:c8:c4:de: bd:d4:ec:ea:12:1c:84:2c:42:d8:8a:12:77:ea:16: 06:8e:5f:fb:55:87:5e:cd:35:3a:e3:cd:a7:d4:b3: 32:95:e7:dc:ad:ee:56:60:09:e9:18:92:11:a6:0c: 46:c5:1e:aa:21:82:52:ee:b2:3b:22:44:e6:54:60: a3:8d:81:2b:80:52:b1:a6:66:9e:71:2d:37:44:e0: 85:7a:b7:6a:e0:75:30:b1:a9:19:60:c8:8f:8c:4d: 72:3c:a3:5f:01:9d:40:b3:70:23:2d:19:5d:3b:e7: e9:ab:a0:47:e8:15:08:78:c8:80:17:c9:05:e4:06: b3:3f:a9:b2:aa:47:00:0e:f9:7d:36:04:f5:94:95: 27:27:ae:d6:28:de:c3:f6:94:17:34:30:e1:90:e6: 26:23:b9:35:ba:c6:d4:2e:6a:4d:0d:a0:95:d3:55: 14:ae:ec:eb:eb:d1:85:e2:db:ea:f7:72:ad:a0:5f: 9d:a9:58:21:1b:7d:6e:c5:af:56:5e:db:e7:91:b3: 32:95:5a:c4:2e:f5:89:c9:3e:fc:d0:86:f8:e3:82: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:37:EE:02:A9:D0:02:0F:56:86:5D:7E:FC:F6:18:9B:09:32:98 X509v3 Authority Key Identifier: keyid:31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a5:27:85:04:72:14:c1:aa:e0:46:73:af:0f:3f:b6:3e:f3: 4e:34:cc:75:8d:80:42:af:5d:af:b2:de:65:84:9d:c9:bc:5a: 8c:88:6e:c2:3d:19:67:e9:ee:4c:fd:bb:5a:38:88:d0:b6:e2: 11:1c:77:4c:2d:91:3a:11:8a:50:66:8c:e2:ef:17:f1:5c:5f: 64:96:da:9b:67:6f:7f:92:59:c8:8d:88:e2:d5:d3:d0:c7:a6: e6:7d:55:15:f0:81:7b:26:2f:ab:ec:05:9b:87:4b:c3:08:b9: e6:a7:9c:ef:26:d9:b2:fa:48:67:bc:a0:ca:4d:9a:6e:32:3f: 78:ba:52:f4:38:bd:75:77:d2:e6:b7:ee:62:ba:f5:31:30:d1: ac:bd:a4:76:36:db:3e:c6:e1:7c:fb:06:06:d6:84:14:be:be: 1e:16:70:17:32:9f:40:f2:e7:af:7a:f3:93:a1:88:44:ba:3e: 43:a0:9a:7c:23:5f:4d:46:a3:7b:43:5f:c5:aa:5e:58:71:2b: 22:74:65:ed:32:5a:7c:bf:90:e3:77:4b:2c:08:a3:94:c5:49: b2:9f:de:e8:b7:4d:a5:2a:6b:6d:d8:17:4b:19:33:93:28:51: f5:09:15:13:bb:3b:5b:31:f7:c7:1e:19:89:d1:30:a3:db:88: 97:e0:d7:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODgzMzExMC8GA1UEBRMoMzEzMEUwRkIyQUUzMDg3MUYxQjQ0Qzc3QzU0MkZGRkNG RTFEOTc0MDAeFw0yNjA0MTUwODM0MTdaFw0yNjA0MjIwODM0MTdaMBgxFjAUBgNV BAMTDTY5ZGY0ZDg5LTZhNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCO4Bzbo7zNUo5hZMIDSjwwoDUQ/CV7OE/u0QyMYR2wueJtTICEb4Upv8jE3r3U 7OoSHIQsQtiKEnfqFgaOX/tVh17NNTrjzafUszKV59yt7lZgCekYkhGmDEbFHqoh glLusjsiROZUYKONgSuAUrGmZp5xLTdE4IV6t2rgdTCxqRlgyI+MTXI8o18BnUCz cCMtGV075+mroEfoFQh4yIAXyQXkBrM/qbKqRwAO+X02BPWUlScnrtYo3sP2lBc0 MOGQ5iYjuTW6xtQuak0NoJXTVRSu7Ovr0YXi2+r3cq2gX52pWCEbfW7Fr1Ze2+eR szKVWsQu9YnJPvzQhvjjgjN5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9GY37gKp 0AIPVoZdfvz2GJsJMpgwHwYDVR0jBBgwFoAUMTDg+yrjCHHxtEx3xUL//P4dl0Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0UyMjEwQ0M0MUFC RTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hIeHRFeDN4VUxfX1A0ZGww QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVREZy15cmpDSEh4dEV4M3hVTF9fUDRkbDBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODMzL0UyMjEwQ0M0MUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hI eHRFeDN4VUxfX1A0ZGwwQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBpSeFBHIUwargRnOvDz+2PvNONMx1jYBCr12vst5lhJ3JvFqMiG7CPRln6e5M /btaOIjQtuIRHHdMLZE6EYpQZozi7xfxXF9kltqbZ29/klnIjYji1dPQx6bmfVUV 8IF7Ji+r7AWbh0vDCLnmp5zvJtmy+khnvKDKTZpuMj94ulL0OL11d9Lmt+5iuvUx MNGsvaR2Nts+xuF8+wYG1oQUvr4eFnAXMp9A8uevevOToYhEuj5DoJp8I19NRqN7 Q1/Fql5YcSsidGXtMlp8v5Djd0ssCKOUxUmyn97ot02lKmtt2BdLGTOTKFH1CRUT uztbMffHHhmJ0TCj24iX4NdQ -----END CERTIFICATE-----Generated at Fri Apr 17 07:36:25 2026 by rpki-client