$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: FuzKScPua4AAOoFJeZD/0bbKoUL5hUV1yP0VJyP4ARY= Subject key identifier: CA:3E:A9:CA:2C:D7:78:92:83:10:52:EA:C0:DF:B2:DF:5D:51:7E:A7 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 0A5E Signing time: Sat 18 Apr 2026 19:33:21 +0000 Manifest this update: Sat 18 Apr 2026 19:33:20 +0000 Manifest next update: Sat 25 Apr 2026 19:33:20 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: E/Sel8pTjWCfPfAfYqr+zdAmVwB8SJIw+XjR/yJOuCQ=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: Gm0Iwe0hSOSwYso1nbi24JBkZ2QvXApNu8KFYRfNQDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Apr 18 19:33:20 2026 GMT Not After : Apr 25 19:33:20 2026 GMT Subject: CN=69e3dc81-190a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:83:2b:91:dd:53:84:08:37:2a:d7:d8:72: e2:0d:d2:e7:98:31:9a:f9:50:19:2b:81:e3:70:b5: 8f:99:2f:0f:7a:ea:d5:f1:af:27:0e:62:f3:dc:f5: d8:00:f8:71:fc:95:af:87:a5:fd:28:1a:e9:ce:fa: a2:f5:df:e2:64:4e:df:a7:d1:5a:54:ca:34:d3:64: 24:dd:fd:33:10:28:ac:ba:b3:51:72:76:94:13:5b: 34:f4:3d:4d:2f:b0:3d:81:6a:8c:36:38:9f:a9:cc: 41:47:08:92:f7:c8:db:84:21:ae:5c:dc:9e:eb:54: 36:29:b9:43:cf:43:e1:e6:f2:75:c5:36:f9:0c:18: 24:b4:d1:2b:53:24:62:7f:1a:c9:6e:c8:11:98:ab: 52:4e:73:01:86:11:51:34:55:96:99:f9:84:2c:57: 5e:50:6f:cc:c8:4b:e6:b5:07:d4:1c:c4:9e:6a:52: 74:df:91:d0:5b:2d:ef:4f:46:44:b1:ab:31:95:59: ef:27:99:d2:b3:26:12:9b:da:37:b8:93:33:85:f9: 64:89:8b:1d:47:3e:79:81:ef:8e:e9:34:45:c2:11: 32:19:10:e9:79:1a:cd:90:c2:19:7d:58:1d:df:12: 66:71:17:f2:22:40:cf:ba:09:f7:40:bd:29:4d:71: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3E:A9:CA:2C:D7:78:92:83:10:52:EA:C0:DF:B2:DF:5D:51:7E:A7 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:78:46:a3:eb:0d:70:f3:9d:1d:3d:10:0b:6c:4f:da:ce:3c: 53:c0:97:b3:93:a3:2a:a4:0a:f9:3f:17:ac:91:88:7f:29:b4: 4f:3d:e7:ef:4d:d7:89:39:ed:25:a2:c0:84:f8:d2:61:78:8d: 1a:3f:d6:67:42:21:8c:19:e1:26:8b:d3:29:61:81:62:47:7f: d0:47:0d:d9:14:b8:a9:63:d8:d3:03:45:50:00:a9:37:fd:6a: c3:1a:34:29:d1:ad:42:7e:d6:fc:a5:92:c5:46:23:8f:30:d4: 41:2c:98:8d:35:1f:83:39:5d:74:5a:bd:3d:98:3a:df:9a:81: 18:12:af:90:15:ef:07:48:37:91:44:f7:ad:84:e7:02:f1:22: 16:64:8e:ea:92:ee:db:c7:e7:fc:33:90:16:b1:d0:fc:ae:4f: dc:2f:13:8c:3b:95:cb:eb:f4:aa:2a:6f:4c:91:34:b5:f2:91: 80:f6:ed:15:7f:3c:68:a0:8b:45:c6:3f:47:f1:49:35:5f:df: 69:02:6b:c1:c3:96:94:d2:80:18:75:04:fa:6e:bd:21:51:17: 63:5a:78:e1:cc:cd:a8:db:b2:04:1d:4f:69:16:54:f5:d4:6a: 5e:54:5c:56:6e:1c:47:da:f4:37:26:14:69:44:98:e9:d7:dd: bf:9a:a7:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjYwNDE4MTkzMzIwWhcNMjYwNDI1MTkzMzIwWjAYMRYwFAYD VQQDEw02OWUzZGM4MS0xOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgKDK5HdU4QINyrX2HLiDdLnmDGa+VAZK4HjcLWPmS8PeurV8a8nDmLz3PXY APhx/JWvh6X9KBrpzvqi9d/iZE7fp9FaVMo002Qk3f0zECisurNRcnaUE1s09D1N L7A9gWqMNjifqcxBRwiS98jbhCGuXNye61Q2KblDz0Ph5vJ1xTb5DBgktNErUyRi fxrJbsgRmKtSTnMBhhFRNFWWmfmELFdeUG/MyEvmtQfUHMSealJ035HQWy3vT0ZE sasxlVnvJ5nSsyYSm9o3uJMzhflkiYsdRz55ge+O6TRFwhEyGRDpeRrNkMIZfVgd 3xJmcRfyIkDPugn3QL0pTXGrcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMo+qcos 13iSgxBS6sDfst9dUX6nMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE3hGo+sNcPOdHT0QC2xP2s48U8CXs5OjKqQK+T8XrJGIfym0Tz3n703XiTnt JaLAhPjSYXiNGj/WZ0IhjBnhJovTKWGBYkd/0EcN2RS4qWPY0wNFUACpN/1qwxo0 KdGtQn7W/KWSxUYjjzDUQSyYjTUfgzlddFq9PZg635qBGBKvkBXvB0g3kUT3rYTn AvEiFmSO6pLu28fn/DOQFrHQ/K5P3C8TjDuVy+v0qipvTJE0tfKRgPbtFX88aKCL RcY/R/FJNV/faQJrwcOWlNKAGHUE+m69IVEXY1p44czNqNuyBB1PaRZU9dRqXlRc Vm4cR9r0NyYUaUSY6dfdv5qnTg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:28:17 2026 by rpki-client