$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft File: REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json) Hash identifier: lNMVfFgubR1TaxClq++uVDHm/3G8lVM6vEFBTOyEIkQ= Subject key identifier: 28:C3:C6:B4:51:24:EF:A8:C4:22:71:FF:B4:CD:87:19:8C:6C:D9:D6 Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6 Certificate issuer: /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6 Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft Manifest number: 352C Signing time: Thu 16 Apr 2026 15:14:48 +0000 Manifest this update: Thu 16 Apr 2026 15:14:48 +0000 Manifest next update: Thu 23 Apr 2026 15:14:48 +0000 Files and hashes: 1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: gg/k2OrVBK5ezFSKaOfg2OtXpv2jTLiyheu39lZFwx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD73B, serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6 Validity Not Before: Apr 16 15:14:48 2026 GMT Not After : Apr 23 15:14:48 2026 GMT Subject: CN=69e0fce8-0931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:17:79:7d:2f:fb:a7:fe:bf:7c:2b:12:b9:32: 9a:e2:b4:7b:b4:5d:6b:59:33:12:30:74:0e:2a:42: 60:1b:eb:05:97:4a:03:52:eb:34:cd:60:c0:06:43: b1:ef:65:0f:be:0c:0a:dc:1a:cc:1a:2e:49:0f:53: 4a:db:f5:60:26:38:f3:e9:48:ab:3a:d6:c0:bf:37: 1d:01:9c:4d:45:ec:56:f3:5d:1c:cf:57:d3:d3:00: 8e:a4:a5:09:53:bd:1b:d0:38:78:2e:7c:d2:1d:4d: 68:9a:6e:66:df:d7:86:62:c1:17:ce:39:90:4e:a6: a5:87:98:76:cc:41:b2:c6:d0:16:11:4e:30:a1:b0: 26:ff:d8:3a:b7:5f:56:5d:f1:e3:53:4b:37:dc:d1: f9:6e:ce:ab:00:de:3c:74:9f:b7:e5:b6:15:ef:dd: d0:fd:7f:25:09:9e:8f:67:96:05:70:b7:f7:b3:49: 87:ff:21:9a:db:67:30:eb:9d:34:7b:16:3a:d0:76: 54:95:f4:53:cf:9a:75:98:22:d3:54:2f:c1:97:63: c1:9a:68:8d:b6:ea:62:d6:dc:4d:9f:af:9a:10:8f: 94:c4:fb:5b:1a:bd:89:bd:72:56:7f:c8:b6:b8:ce: f5:10:3d:13:ef:c4:5d:63:6d:9c:32:6c:ea:50:d7: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C3:C6:B4:51:24:EF:A8:C4:22:71:FF:B4:CD:87:19:8C:6C:D9:D6 X509v3 Authority Key Identifier: keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:71:cf:26:6b:8b:2b:84:7c:a0:fd:b5:6a:94:e4:55:54:5d: 6b:a3:5c:5e:c1:dd:79:70:72:97:b6:52:8b:a8:39:64:8c:a2: da:87:f7:eb:fe:3d:54:b7:83:e0:2a:cc:3f:80:41:88:cd:81: ae:58:43:0c:7f:3c:06:70:df:d8:2e:eb:a0:96:16:ad:95:a1: 73:7b:19:3e:08:a5:0e:6b:d4:fb:97:2f:91:34:33:c5:2f:6b: 6f:e6:7e:00:4c:d1:f1:fc:dd:66:f9:21:15:07:c6:7b:6b:76: eb:68:36:ba:e8:b0:0a:29:32:40:af:d6:0f:f7:3f:89:92:62: 43:4a:63:6f:ab:e3:a4:f2:e2:22:9a:cf:30:8c:1f:70:c0:97: 34:f3:4a:07:03:83:a9:c8:b5:b5:83:dc:95:5e:18:3a:ac:fa: 67:74:18:05:83:f2:00:c6:5e:9a:40:ef:0c:53:50:c1:61:14: 3f:71:fb:33:c5:a9:e2:83:20:f5:61:98:29:96:af:16:3f:04: 32:62:ad:00:3c:0d:c2:98:bd:7e:04:78:18:08:8b:94:9c:84: 02:1f:e9:e1:fd:08:17:ac:c9:ef:41:52:d8:a2:99:6c:8f:c4: f0:56:b7:aa:da:67:ee:bf:be:62:f6:cb:dc:7d:cf:fc:98:e3: ef:41:07:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ3M0IxMTAvBgNVBAUTKDQ0NDg0QzlGM0E3M0Y3MTk1NzJCOEJDOEExQTFGRDlF NTlGQTg0RjYwHhcNMjYwNDE2MTUxNDQ4WhcNMjYwNDIzMTUxNDQ4WjAYMRYwFAYD VQQDEw02OWUwZmNlOC0wOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiRd5fS/7p/6/fCsSuTKa4rR7tF1rWTMSMHQOKkJgG+sFl0oDUus0zWDABkOx 72UPvgwK3BrMGi5JD1NK2/VgJjjz6UirOtbAvzcdAZxNRexW810cz1fT0wCOpKUJ U70b0Dh4LnzSHU1omm5m39eGYsEXzjmQTqalh5h2zEGyxtAWEU4wobAm/9g6t19W XfHjU0s33NH5bs6rAN48dJ+35bYV793Q/X8lCZ6PZ5YFcLf3s0mH/yGa22cw6500 exY60HZUlfRTz5p1mCLTVC/Bl2PBmmiNtupi1txNn6+aEI+UxPtbGr2JvXJWf8i2 uM71ED0T78RdY22cMmzqUNfQ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjDxrRR JO+oxCJx/7TNhxmMbNnWMB8GA1UdIwQYMBaAFERITJ86c/cZVyuLyKGh/Z5Z+oT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDczQi8yNkJERjMyQzFE QUExMUUyQkUyNUE2QTUwOEIwMkNEMi9SRWhNbnpwejl4bFhLNHZJb2FIOW5sbjZo UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFaE1uenB6OXhsWEs0dklvYUg5bmxuNmhQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDczQi8yNkJERjMyQzFEQUExMUUyQkUyNUE2QTUwOEIwMkNEMi9SRWhNbnpwejl4 bFhLNHZJb2FIOW5sbjZoUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADXHPJmuLK4R8oP21apTkVVRda6NcXsHdeXByl7ZSi6g5ZIyi2of36/49VLeD 4CrMP4BBiM2BrlhDDH88BnDf2C7roJYWrZWhc3sZPgilDmvU+5cvkTQzxS9rb+Z+ AEzR8fzdZvkhFQfGe2t262g2uuiwCikyQK/WD/c/iZJiQ0pjb6vjpPLiIprPMIwf cMCXNPNKBwODqci1tYPclV4YOqz6Z3QYBYPyAMZemkDvDFNQwWEUP3H7M8Wp4oMg 9WGYKZavFj8EMmKtADwNwpi9fgR4GAiLlJyEAh/p4f0IF6zJ70FS2KKZbI/E8Fa3 qtpn7r++YvbL3H3P/Jjj70EHSg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:23:43 2026 by rpki-client