$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: DsBhkhmoTxHnypq8DcRQXginuUqT0GgzDiZrhIsCF2o= Subject key identifier: 6D:8F:60:28:CD:8C:FD:E8:A2:16:70:32:1D:47:39:00:68:04:C9:8C Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1C84 Signing time: Thu 16 Apr 2026 16:08:38 +0000 Manifest this update: Thu 16 Apr 2026 16:08:38 +0000 Manifest next update: Thu 23 Apr 2026 16:08:38 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: xQkY4YWXkvkCI4Qk0dAu5Y1KLIeprfl71sO3r1L4YT0=) 2: 65D82706BACE11F0AAEC4611C4F9AE02.roa (hash: sqvmzo0nBMsekrGisDm87YPLKEUsc2Q0u1zWWfR7WgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7316 (0x1c94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Apr 16 16:08:38 2026 GMT Not After : Apr 23 16:08:38 2026 GMT Subject: CN=69e10986-7b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:97:07:d2:f3:3c:8b:b8:1b:ee:3b:02:78: 96:6f:fc:0a:5b:53:22:1e:a5:f4:43:85:ff:27:67: 55:58:2a:05:af:c1:dc:52:12:a2:c9:c8:d8:9a:f3: 2d:ff:33:da:8f:63:9f:56:10:ae:5d:ba:a6:72:9d: ea:ae:3c:a1:19:46:ec:d7:51:2c:88:cc:eb:0a:a2: 4f:cd:0c:f3:65:53:a3:14:d7:dd:d8:51:32:f9:52: a8:98:96:7c:12:ad:c3:f4:41:e0:7b:20:c2:98:93: 35:a5:2d:11:7a:12:c9:ff:fa:84:29:49:f4:95:0d: c7:80:3c:f2:19:39:ec:81:8d:85:c9:dc:bd:00:f9: 06:d6:eb:1d:d1:fe:fc:f0:e7:c0:31:6a:34:4d:5f: 3d:b6:e3:ed:ff:c4:81:71:dc:cc:67:c3:d9:30:58: 06:b9:44:d6:7f:ba:56:51:36:35:e5:3e:ae:90:d2: bb:8a:55:30:e2:71:f5:fd:af:90:37:f1:0e:08:00: 71:8f:bf:93:eb:6e:a3:b0:6d:77:2d:c9:99:e9:ae: 78:cd:dd:bd:02:7b:63:e4:50:05:58:ed:fe:9b:16: db:94:c3:b5:12:1f:1f:fb:de:46:f4:88:dd:db:6a: a0:19:4c:e9:c0:f0:69:3c:de:0f:b5:e4:d7:b6:98: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8F:60:28:CD:8C:FD:E8:A2:16:70:32:1D:47:39:00:68:04:C9:8C X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:26:2d:ae:9c:b5:65:0e:b6:e7:f7:88:fe:9f:ed:58:2b:ba: 60:d4:a4:5b:14:1d:47:0b:17:c2:23:18:16:89:05:bb:f4:57: 83:ef:b2:0d:0d:b6:c5:9a:47:a8:04:9b:e2:f7:9e:4e:85:2e: df:72:ac:a9:d1:2b:bd:26:af:fd:9d:dd:37:e8:98:a0:49:61: 07:fa:52:b6:0f:e6:a9:32:ac:01:1f:26:51:ed:f7:52:32:b7: 76:46:f2:12:87:d6:6c:44:a1:05:34:fd:4c:02:b6:84:2a:8d: a0:08:27:85:1e:3c:9d:93:c7:84:eb:bf:c5:14:96:7c:00:51: 07:bc:6e:1e:94:ad:ba:e6:52:e4:8a:8b:f9:43:84:2e:8b:07: c2:aa:77:dd:01:3d:53:8e:7b:58:f3:51:85:62:1f:94:5c:9f: 09:49:ec:8c:d7:f8:c4:86:0a:4e:7c:c2:29:b6:04:46:e5:c0: 85:bc:9e:27:69:aa:4f:c1:85:ef:bc:07:8d:8f:52:da:bf:1e: dc:24:7f:23:5d:66:48:cd:18:1c:9e:cd:dd:1a:b5:af:c1:fc: ad:e3:c4:67:eb:11:50:ae:d8:81:d8:db:2e:05:8a:8d:4a:f1: 9f:2c:c8:52:e2:e3:a0:9c:4c:5a:e3:dd:12:99:3c:8f:bc:bc: 81:4c:aa:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjYwNDE2MTYwODM4WhcNMjYwNDIzMTYwODM4WjAYMRYwFAYD VQQDEw02OWUxMDk4Ni03YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOuXB9LzPIu4G+47AniWb/wKW1MiHqX0Q4X/J2dVWCoFr8HcUhKiycjYmvMt /zPaj2OfVhCuXbqmcp3qrjyhGUbs11EsiMzrCqJPzQzzZVOjFNfd2FEy+VKomJZ8 Eq3D9EHgeyDCmJM1pS0RehLJ//qEKUn0lQ3HgDzyGTnsgY2Fydy9APkG1usd0f78 8OfAMWo0TV89tuPt/8SBcdzMZ8PZMFgGuUTWf7pWUTY15T6ukNK7ilUw4nH1/a+Q N/EOCABxj7+T626jsG13LcmZ6a54zd29Antj5FAFWO3+mxbblMO1Eh8f+95G9Ijd 22qgGUzpwPBpPN4PteTXtpgJywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2PYCjN jP3oohZwMh1HOQBoBMmMMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaSYtrpy1ZQ625/eI/p/tWCu6YNSkWxQdRwsXwiMYFokFu/RXg++yDQ22xZpH qASb4veeToUu33KsqdErvSav/Z3dN+iYoElhB/pStg/mqTKsAR8mUe33UjK3dkby EofWbEShBTT9TAK2hCqNoAgnhR48nZPHhOu/xRSWfABRB7xuHpStuuZS5IqL+UOE LosHwqp33QE9U457WPNRhWIflFyfCUnsjNf4xIYKTnzCKbYERuXAhbyeJ2mqT8GF 77wHjY9S2r8e3CR/I11mSM0YHJ7N3Rq1r8H8rePEZ+sRUK7YgdjbLgWKjUrxnyzI UuLjoJxMWuPdEpk8j7y8gUyqFw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:21 2026 by rpki-client