$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: m7U0wt3XW6IWQdSjnnXA8jeOKmLLIJ5XSFt3zMa/KPw= Subject key identifier: B2:26:7C:7B:70:26:39:15:AF:2E:01:5F:93:16:D4:7E:80:E4:A5:FD Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0218 Signing time: Fri 17 Apr 2026 02:39:21 +0000 Manifest this update: Fri 17 Apr 2026 02:39:20 +0000 Manifest next update: Fri 24 Apr 2026 02:39:20 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: oa/EqVpKmNZcVVk4vV0473NG2/mqbg7vy3n18W+E/8Q=) 2: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: PPUG38GrYc1pSvAs42aCMPByXIt0IlvrGE9mP2N9xD4=) 3: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: ZuQdvo3O3mwgbl46FNxheRRrkq5c13FZ1QLKqfjZUX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Apr 17 02:39:20 2026 GMT Not After : Apr 24 02:39:20 2026 GMT Subject: CN=69e19d59-fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:aa:ce:4a:cb:16:aa:3f:80:89:eb:be:e9: 5f:d4:20:6d:40:2b:e1:a9:39:8f:f6:b7:64:79:fc: 9c:54:c2:ea:15:e6:5c:8f:17:64:96:53:5b:e2:ea: ad:8e:cb:0c:6d:e2:c8:30:d7:11:b8:a0:3c:13:e1: ef:75:3e:b7:c7:95:61:e7:82:85:f9:f9:6a:11:ca: 8b:2a:f3:0e:9d:df:c3:ff:d1:77:16:ae:ca:ff:71: 89:ca:36:c7:3f:ea:80:8e:83:55:3b:61:1b:bb:80: 2d:aa:21:7e:5f:22:be:bd:ff:01:e4:48:22:1c:a2: 8a:06:32:40:38:5f:38:36:0d:1c:e2:48:c5:f8:3c: c8:41:be:56:be:80:56:ab:e2:ae:70:88:b3:da:4d: 00:22:5b:18:95:dd:97:f7:ea:ce:60:2d:5d:af:44: eb:de:0b:8f:bf:73:d1:f6:7d:3b:48:0b:31:09:de: 21:eb:02:06:a4:a9:9e:6e:fe:2e:37:d7:a3:2c:d1: 82:9a:be:59:77:82:78:f7:ae:63:19:88:e0:bc:48: 72:da:6f:52:cf:38:e5:35:c9:21:91:da:cd:da:f9: ea:4d:20:6e:98:06:36:f6:63:d7:bd:35:97:70:d0: 7c:2d:13:a1:f9:67:10:43:a4:de:6f:c1:e0:c8:de: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:26:7C:7B:70:26:39:15:AF:2E:01:5F:93:16:D4:7E:80:E4:A5:FD X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:ec:0d:a5:34:97:61:b5:f0:a9:f5:be:ff:5a:b7:ea:74: b5:d5:cb:9f:84:15:ca:cf:99:1f:24:56:65:0e:72:b9:ff:8b: 3b:84:8b:d2:90:65:3c:37:b5:0e:2a:d5:00:6c:15:65:69:cd: 09:f5:b7:94:0a:93:a0:bc:19:16:3e:06:86:47:c3:c2:7a:29: e9:b5:5a:5c:49:56:f5:4f:63:22:cc:a5:07:0a:cc:cd:38:4d: b5:3a:7f:de:1b:d8:fb:cb:6d:8a:75:5e:7f:e7:a9:65:df:72: 48:5a:7c:89:23:8d:77:c0:7f:54:ae:b7:6a:be:f2:f6:17:e9: e5:ed:c6:eb:b2:cb:d1:00:5e:c6:a1:16:4f:2e:5b:83:14:4c: 12:09:4a:f1:ca:38:ed:ae:67:ce:0d:11:e5:cb:ef:06:13:bf: b5:e8:4b:14:6a:9d:d2:b9:da:67:54:61:e0:53:8b:4d:d8:a5: b0:6d:ce:79:c1:1b:d5:7a:42:10:d8:f0:12:cb:98:41:fa:fa: 85:a9:c1:fe:63:48:a0:cb:10:ea:86:9a:8d:28:f3:e1:1e:20: 7e:1d:24:2e:66:e8:e5:4b:2b:ac:96:e4:cd:98:54:53:f6:86: e3:2b:d0:75:01:a6:3e:d3:89:fb:9d:11:fe:7f:12:55:3c:61: 8e:f2:28:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwNDE3MDIzOTIwWhcNMjYwNDI0MDIzOTIwWjAYMRYwFAYD VQQDEw02OWUxOWQ1OS1mYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0aqzkrLFqo/gInrvulf1CBtQCvhqTmP9rdkefycVMLqFeZcjxdkllNb4uqt jssMbeLIMNcRuKA8E+HvdT63x5Vh54KF+flqEcqLKvMOnd/D/9F3Fq7K/3GJyjbH P+qAjoNVO2Ebu4AtqiF+XyK+vf8B5EgiHKKKBjJAOF84Ng0c4kjF+DzIQb5WvoBW q+KucIiz2k0AIlsYld2X9+rOYC1dr0Tr3guPv3PR9n07SAsxCd4h6wIGpKmebv4u N9ejLNGCmr5Zd4J4965jGYjgvEhy2m9SzzjlNckhkdrN2vnqTSBumAY29mPXvTWX cNB8LROh+WcQQ6Teb8HgyN6yLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLImfHtw JjkVry4BX5MW1H6A5KX9MB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEbsDaU0l2G18Kn1vv9at+p0tdXLn4QVys+ZHyRWZQ5yuf+LO4SL0pBlPDe1 DirVAGwVZWnNCfW3lAqToLwZFj4GhkfDwnop6bVaXElW9U9jIsylBwrMzThNtTp/ 3hvY+8ttinVef+epZd9ySFp8iSONd8B/VK63ar7y9hfp5e3G67LL0QBexqEWTy5b gxRMEglK8co47a5nzg0R5cvvBhO/tehLFGqd0rnaZ1Rh4FOLTdilsG3OecEb1XpC ENjwEsuYQfr6hanB/mNIoMsQ6oaajSjz4R4gfh0kLmbo5UsrrJbkzZhUU/aG4yvQ dQGmPtOJ+50R/n8SVTxhjvIo1g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:11 2026 by rpki-client