$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft File: TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json) Hash identifier: 4z7plbZnNrJsfTTwCNVDWBmJoCHyjNsK8DC9sKauTes= Subject key identifier: 5A:BA:80:5E:62:57:B4:3A:AC:92:FE:FC:58:74:CE:A7:90:DA:F0:F1 Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft Manifest number: 86 Signing time: Fri 17 Apr 2026 07:20:56 +0000 Manifest this update: Fri 17 Apr 2026 07:20:56 +0000 Manifest next update: Fri 24 Apr 2026 07:20:56 +0000 Files and hashes: 1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: +kMvFaUIIYRGotTGgNnBCGq/q6bipPwajw9A+FoJL3I=) 2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB Validity Not Before: Apr 17 07:20:56 2026 GMT Not After : Apr 24 07:20:56 2026 GMT Subject: CN=69e1df58-b38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:95:72:7b:b8:95:79:13:8e:80:88:d6:22: 1a:8f:2b:bd:c7:61:11:59:a5:87:9b:d8:a5:10:20: db:c0:15:a0:13:d8:e6:c9:54:8d:eb:68:8f:88:3a: 1d:14:16:3e:e3:10:13:6f:ff:e3:ab:1c:16:6a:04: 38:65:b3:23:d2:cc:54:b8:ef:9d:24:fa:ff:22:ff: 9c:3a:22:eb:cc:aa:8d:e4:2d:ea:57:33:b3:6c:50: 47:e1:6f:ca:59:2d:d2:8a:c8:b1:9d:57:74:21:55: 4b:61:4b:6d:25:29:2d:dc:62:6f:a5:93:96:c4:0c: 45:ec:29:5b:0c:d2:9d:01:70:f0:56:37:bf:5f:58: 38:0f:2f:83:64:96:5f:84:13:af:f2:a5:57:71:f7: 31:59:78:8a:ff:78:64:61:ee:5e:2c:55:81:ba:29: 01:7b:cd:f1:bc:1a:a2:36:0d:39:36:5f:18:a0:67: e9:05:61:c1:27:2e:7b:1c:f6:55:a8:c3:ff:7e:c1: 5b:39:b8:0e:21:a8:0e:01:ca:c0:a5:e4:55:4c:e9: 22:ed:45:29:aa:85:80:6f:cd:24:c8:ed:d1:0e:1e: 9e:25:8b:ab:69:d2:8f:f2:43:16:4b:8a:a9:54:6e: 78:4a:97:dd:b1:16:45:e7:8a:04:b7:7f:95:a0:41: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:80:5E:62:57:B4:3A:AC:92:FE:FC:58:74:CE:A7:90:DA:F0:F1 X509v3 Authority Key Identifier: keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:d5:4e:b4:44:4e:96:28:bd:3d:18:36:ca:4a:e9:b4:e4: 68:be:46:06:f7:e5:e9:18:ab:2d:4c:ca:1f:db:7e:3c:2c:22: 53:3e:24:7e:cf:b6:73:c8:d4:dd:15:b0:86:80:90:da:37:00: 24:4d:ce:f0:21:5d:59:a1:4b:96:7d:16:d6:39:aa:63:1b:fe: 40:06:a1:0b:9c:21:4f:b6:70:08:47:61:91:08:d0:16:9c:0e: cf:dc:44:6c:0b:c1:fb:6d:b8:d6:70:64:9a:e4:ea:ef:31:20: 8b:65:b6:35:53:0f:35:e9:1d:58:b9:01:91:4d:94:e1:c8:4c: d2:9f:11:3a:e0:22:0c:c4:1b:cb:30:78:69:c2:22:8c:67:f0: 01:8a:d6:6c:10:dc:58:14:28:14:32:d8:56:51:c4:92:ee:b0: a7:c7:50:ce:a8:77:47:d1:c3:2c:bc:9a:f6:74:b1:27:88:be: 4f:70:da:1f:2d:b3:e1:91:52:60:fb:d2:7a:7d:5d:11:55:b5: 24:77:1a:bb:cc:69:65:da:bd:16:22:5c:85:b5:51:50:5c:56: 61:0e:27:ba:2d:49:27:7b:e2:b2:41:50:dd:37:a2:ff:89:65: 64:67:dd:4b:f6:a9:05:12:2c:40:f4:ae:12:c0:80:4f:78:6a: 11:47:f8:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCNkQxMTAvBgNVBAUTKDRENEYzQUFDQzczOTVBMTNENjQyMDA3Rjk5MTBERjg4 MDQwRTRCQUIwHhcNMjYwNDE3MDcyMDU2WhcNMjYwNDI0MDcyMDU2WjAYMRYwFAYD VQQDEw02OWUxZGY1OC1iMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdqVcnu4lXkTjoCI1iIajyu9x2ERWaWHm9ilECDbwBWgE9jmyVSN62iPiDod FBY+4xATb//jqxwWagQ4ZbMj0sxUuO+dJPr/Iv+cOiLrzKqN5C3qVzOzbFBH4W/K WS3SisixnVd0IVVLYUttJSkt3GJvpZOWxAxF7ClbDNKdAXDwVje/X1g4Dy+DZJZf hBOv8qVXcfcxWXiK/3hkYe5eLFWBuikBe83xvBqiNg05Nl8YoGfpBWHBJy57HPZV qMP/fsFbObgOIagOAcrApeRVTOki7UUpqoWAb80kyO3RDh6eJYuradKP8kMWS4qp VG54SpfdsRZF54oEt3+VoEG1CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFq6gF5i V7Q6rJL+/Fh0zqeQ2vDxMB8GA1UdIwQYMBaAFE1POqzHOVoT1kIAf5kQ34gEDkur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI2RC84NkRGNkM3RTcx MDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdoUFdRZ0JfbVJEZmlBUU9T NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVODZyTWM1V2hQV1FnQl9tUkRmaUFRT1M2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI2RC84NkRGNkM3RTcxMDUxMUYwODU0RjVBMTRDNEY5QUUwMi9UVTg2ck1jNVdo UFdRZ0JfbVJEZmlBUU9TNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWArVTrRETpYovT0YNspK6bTkaL5GBvfl6RirLUzKH9t+PCwiUz4kfs+2c8jU 3RWwhoCQ2jcAJE3O8CFdWaFLln0W1jmqYxv+QAahC5whT7ZwCEdhkQjQFpwOz9xE bAvB+2241nBkmuTq7zEgi2W2NVMPNekdWLkBkU2U4chM0p8ROuAiDMQbyzB4acIi jGfwAYrWbBDcWBQoFDLYVlHEku6wp8dQzqh3R9HDLLya9nSxJ4i+T3DaHy2z4ZFS YPvSen1dEVW1JHcau8xpZdq9FiJchbVRUFxWYQ4nui1JJ3viskFQ3Tei/4llZGfd S/apBRIsQPSuEsCAT3hqEUf4lg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:04 2026 by rpki-client