$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: 0mRd88Q6lSLAOUrih0oRhsMrzGsm+7Oxg0DOUz6pXOs= Subject key identifier: 00:5D:81:E1:20:0A:20:6C:9F:61:E8:B3:D1:BF:7B:3D:61:D8:5F:20 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 0219 Signing time: Fri 17 Apr 2026 02:35:02 +0000 Manifest this update: Fri 17 Apr 2026 02:35:02 +0000 Manifest next update: Fri 24 Apr 2026 02:35:02 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: sumWvPuiUJRju2j7O5fokt1aGemfj8KSSnXCxG7fCNk=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: Apr 17 02:35:02 2026 GMT Not After : Apr 24 02:35:02 2026 GMT Subject: CN=69e19c56-dc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:ba:8f:46:c2:07:8a:96:3d:35:83:6d:aa: 5e:f0:81:da:a1:3b:15:18:6c:de:a6:b2:e2:1e:cc: b4:28:e7:35:48:ba:3a:24:6b:e6:58:07:7a:22:67: 2f:cb:2a:05:83:b0:58:ad:ee:a4:bd:0e:a3:3b:12: 7c:bf:62:73:bd:bd:9c:5d:ed:59:29:ee:8d:ae:ed: 26:d6:84:0a:99:54:8e:6e:96:26:33:8d:23:71:64: e4:a3:57:d8:26:a4:16:cc:2c:eb:41:31:d3:e8:a3: 03:44:b9:12:eb:e4:98:a0:5b:7b:d2:71:75:0e:d2: 93:d6:02:3e:0e:5d:1c:47:2d:81:34:fc:6e:8b:8b: 44:90:45:06:52:67:61:32:3a:d8:27:41:7a:f3:cf: c8:2a:1b:e4:80:51:03:70:55:c0:76:f7:2b:df:35: f1:12:36:f5:60:b8:df:00:4c:55:53:bf:e7:00:7f: 0b:b7:5d:0a:d6:b2:97:c7:b4:33:f9:05:67:a6:93: 25:60:42:06:1e:a9:49:a3:03:44:9f:a8:33:f1:0d: 8a:99:5a:b6:59:b9:e7:5a:a8:03:66:cf:74:14:d8: fc:53:4e:ff:d8:a1:f1:4e:83:4b:36:3c:cf:74:5f: 9b:76:f0:98:23:8a:5b:f1:75:63:76:da:97:d9:7a: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:81:E1:20:0A:20:6C:9F:61:E8:B3:D1:BF:7B:3D:61:D8:5F:20 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ab:be:93:e5:9d:97:46:67:08:f6:2e:ff:fe:7b:28:b9:9e: 70:e7:0a:ba:e6:48:b2:cb:5b:92:63:94:1f:f8:4a:45:c2:26: e2:f7:3d:98:01:7f:13:09:a1:f8:9b:61:59:52:2c:64:a7:01: 1c:40:48:0f:9d:78:63:21:d2:30:6a:99:75:a9:be:4d:a4:cd: 97:ee:c1:18:2b:6c:3e:f8:ea:d9:7b:bb:9e:d2:e2:4d:9d:b0: 7c:93:1f:24:ee:34:19:87:ca:eb:87:30:b7:fb:23:e6:1e:a9: 15:f3:d4:3e:8e:90:ec:dc:7a:38:8b:44:a1:de:1d:92:3f:d7: a7:e9:f9:0d:66:b6:f4:71:88:b7:e1:2d:7a:67:63:ea:69:aa: 7a:e6:3d:6f:d5:d5:cc:17:44:b0:7a:4b:4c:b1:5b:3c:12:d0: 91:2e:72:ab:18:f7:a6:37:92:f5:58:6a:37:69:9a:11:0e:f5: 66:d1:73:38:5a:11:b1:1b:ed:09:99:62:83:0b:10:e2:93:eb: ef:91:37:0f:53:40:4b:95:04:a3:fc:91:ea:7a:8e:74:21:92: 66:8c:e3:30:b5:30:bf:56:9c:2a:5e:db:d0:a9:23:4b:8f:f6: ca:a3:f1:a8:8d:de:f1:a7:70:8f:43:fe:dc:99:f0:45:41:71: 3d:14:f7:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjYwNDE3MDIzNTAyWhcNMjYwNDI0MDIzNTAyWjAYMRYwFAYD VQQDEw02OWUxOWM1Ni1kYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkUa6j0bCB4qWPTWDbape8IHaoTsVGGzeprLiHsy0KOc1SLo6JGvmWAd6Imcv yyoFg7BYre6kvQ6jOxJ8v2Jzvb2cXe1ZKe6Nru0m1oQKmVSObpYmM40jcWTko1fY JqQWzCzrQTHT6KMDRLkS6+SYoFt70nF1DtKT1gI+Dl0cRy2BNPxui4tEkEUGUmdh MjrYJ0F688/IKhvkgFEDcFXAdvcr3zXxEjb1YLjfAExVU7/nAH8Lt10K1rKXx7Qz +QVnppMlYEIGHqlJowNEn6gz8Q2KmVq2WbnnWqgDZs90FNj8U07/2KHxToNLNjzP dF+bdvCYI4pb8XVjdtqX2XqMDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABdgeEg CiBsn2Hos9G/ez1h2F8gMB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARqu+k+Wdl0ZnCPYu//57KLmecOcKuuZIsstbkmOUH/hKRcIm4vc9mAF/Ewmh +JthWVIsZKcBHEBID514YyHSMGqZdam+TaTNl+7BGCtsPvjq2Xu7ntLiTZ2wfJMf JO40GYfK64cwt/sj5h6pFfPUPo6Q7Nx6OItEod4dkj/Xp+n5DWa29HGIt+Etemdj 6mmqeuY9b9XVzBdEsHpLTLFbPBLQkS5yqxj3pjeS9VhqN2maEQ71ZtFzOFoRsRvt CZligwsQ4pPr75E3D1NAS5UEo/yR6nqOdCGSZozjMLUwv1acKl7b0KkjS4/2yqPx qI3e8adwj0P+3JnwRUFxPRT3xQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:48 2026 by rpki-client