$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: nUaMJFt0Zt25SjQaiGb1So9VvDMvcnQ74DwTzHrgpEo= Subject key identifier: BD:51:87:8B:D1:01:63:D9:73:13:C2:36:2F:DA:C5:4C:34:01:AA:71 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D4D Signing time: Thu 16 Apr 2026 17:57:07 +0000 Manifest this update: Thu 16 Apr 2026 17:57:07 +0000 Manifest next update: Thu 23 Apr 2026 17:57:07 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: KieBwgpzazL1AfPMzNQg7bt3iZ0lYtX+titYJ/ND0Zw=) 2: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: 6W0EKCmbhZXUCb3JTj4cb3LX+lvYczLDKfF06TRghFI=) 3: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: n64xYPc/honl4c/2W5UUus2lLDkgfGWSMJZBO6CSTtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Apr 16 17:57:07 2026 GMT Not After : Apr 23 17:57:07 2026 GMT Subject: CN=69e122f3-284b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:2f:7d:62:af:4a:76:e9:fc:af:f7:76:ad: ad:57:a5:1f:bf:de:42:02:03:07:94:65:58:da:86: b3:ef:a3:94:b3:a8:5a:c4:f4:e7:69:a7:89:65:3e: 40:49:51:c8:b0:b0:d4:7d:89:4f:d0:0c:1c:aa:37: 7b:7c:37:4d:06:3c:a0:61:fc:70:e4:56:8a:26:a5: bc:a3:19:9c:21:ea:09:6f:b9:a1:71:1a:ed:f1:3f: 67:66:b0:5b:d5:4c:c9:3e:50:d2:e3:dc:e7:72:c2: 42:5a:47:fe:a9:36:9c:d9:8a:47:9d:b7:4e:27:ff: 67:d2:46:7c:06:4c:47:e2:28:f2:6d:c0:46:a3:bf: c6:5e:45:12:8e:8c:68:d0:ba:11:55:14:ad:78:d3: e1:ce:d6:e0:78:ce:f6:d4:3c:d2:28:a9:92:84:19: 28:c8:52:d2:ae:85:9b:04:30:34:74:22:a5:40:f4: 4f:9b:7b:c8:f0:69:6b:60:da:c2:9d:d9:62:ee:a6: e3:0d:3d:38:dc:79:84:41:ed:f9:fb:ef:0a:c2:3e: 25:e4:e3:7f:71:0b:68:d5:42:8a:47:94:3b:41:94: f0:28:59:b4:43:0a:09:b6:b4:41:92:ff:71:fe:ad: 06:4d:54:1d:aa:77:38:32:31:dc:ad:34:34:77:29: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:51:87:8B:D1:01:63:D9:73:13:C2:36:2F:DA:C5:4C:34:01:AA:71 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:29:16:46:f8:a2:31:dc:90:00:43:fc:bd:c1:69:86:14:92: 3a:c4:59:33:40:b8:e6:32:47:e1:0f:0c:da:30:5d:1d:c2:41: 3d:17:a9:ed:4f:c9:30:13:58:db:74:d9:25:0e:ec:6a:b2:ff: db:09:08:ba:c1:fb:4c:46:db:98:fd:09:42:b0:07:89:a7:3f: a6:f6:c2:93:e0:de:39:14:6c:21:03:61:65:52:05:76:f5:27: f0:0f:5c:d0:19:62:27:bd:af:4b:f8:5e:99:62:88:ff:87:26: 8f:8b:9d:8b:cb:d7:60:91:49:0e:c0:66:11:04:84:79:46:ea: 9b:62:70:b4:73:6f:db:9f:ce:e9:73:7e:eb:05:da:68:8e:6c: d4:e5:20:fe:65:e9:28:62:e6:f9:9f:cc:1a:e2:41:a2:d3:6f: 50:e2:08:e4:07:f6:5d:f9:51:ab:49:d2:35:48:3d:2d:73:64: c2:8a:af:4c:ba:d6:90:17:64:83:79:d1:95:f7:7d:a9:ed:ad: 20:7f:11:52:d5:10:30:3b:5c:b4:11:e7:2b:44:5c:ba:55:4f: cf:05:49:8e:80:8b:db:da:76:fe:06:09:9c:a9:b9:a8:a7:0a: 78:32:f8:71:e1:6f:83:1e:01:f4:93:68:30:e8:c6:3d:d5:a2: 75:35:c6:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjYwNDE2MTc1NzA3WhcNMjYwNDIzMTc1NzA3WjAYMRYwFAYD VQQDEw02OWUxMjJmMy0yODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunwvfWKvSnbp/K/3dq2tV6Ufv95CAgMHlGVY2oaz76OUs6haxPTnaaeJZT5A SVHIsLDUfYlP0Awcqjd7fDdNBjygYfxw5FaKJqW8oxmcIeoJb7mhcRrt8T9nZrBb 1UzJPlDS49zncsJCWkf+qTac2YpHnbdOJ/9n0kZ8BkxH4ijybcBGo7/GXkUSjoxo 0LoRVRSteNPhztbgeM721DzSKKmShBkoyFLSroWbBDA0dCKlQPRPm3vI8GlrYNrC ndli7qbjDT043HmEQe35++8Kwj4l5ON/cQto1UKKR5Q7QZTwKFm0QwoJtrRBkv9x /q0GTVQdqnc4MjHcrTQ0dynXxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1Rh4vR AWPZcxPCNi/axUw0AapxMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALCkWRviiMdyQAEP8vcFphhSSOsRZM0C45jJH4Q8M2jBdHcJBPRep7U/JMBNY 23TZJQ7sarL/2wkIusH7TEbbmP0JQrAHiac/pvbCk+DeORRsIQNhZVIFdvUn8A9c 0BliJ72vS/hemWKI/4cmj4udi8vXYJFJDsBmEQSEeUbqm2JwtHNv25/O6XN+6wXa aI5s1OUg/mXpKGLm+Z/MGuJBotNvUOII5Af2XflRq0nSNUg9LXNkwoqvTLrWkBdk g3nRlfd9qe2tIH8RUtUQMDtctBHnK0RculVPzwVJjoCL29p2/gYJnKm5qKcKeDL4 ceFvgx4B9JNoMOjGPdWidTXGvQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:49 2026 by rpki-client