$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: iY4UhWmnjXnfza5ptoq3CO4zWdkXkd8t/M6HAvRREc8= Subject key identifier: 88:01:EC:5E:86:84:FF:E3:7C:48:E0:5A:BB:60:23:53:8B:A1:B9:E4 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 0534 Signing time: Thu 16 Apr 2026 23:26:24 +0000 Manifest this update: Thu 16 Apr 2026 23:26:23 +0000 Manifest next update: Thu 23 Apr 2026 23:26:23 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: nYhZLtBVoV81MWSe4bg2vJoOM8S2ZhHT59lDECRcDU8=) 2: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=) 3: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Apr 16 23:26:23 2026 GMT Not After : Apr 23 23:26:23 2026 GMT Subject: CN=69e17020-a90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:fa:8b:af:29:b9:f0:d6:5e:80:84:b1:be: 1f:d1:80:34:6a:a4:f3:b9:0f:4e:f0:41:31:ec:9e: 07:79:21:1a:0d:76:71:51:68:4f:4b:d2:9c:68:a1: e5:0f:58:9f:98:a7:e7:0b:03:f3:08:2a:fe:a9:89: 8a:22:26:3e:5f:2a:5c:26:bf:4a:c5:e3:39:7f:51: 35:dd:4a:fb:92:a0:4d:35:a1:56:77:90:72:4c:d0: 32:2b:fe:68:9d:09:02:b0:b8:bd:8a:72:e1:63:71: 49:36:73:eb:fa:d5:1f:43:5e:b4:5c:5b:be:2c:81: f8:44:e5:dc:aa:ff:a6:96:41:40:77:f0:61:41:cb: 0a:30:14:aa:38:ee:53:89:d4:0c:bf:ff:07:4c:21: bf:a1:76:09:bd:40:eb:a8:e7:89:ec:55:3b:d4:0a: da:0e:11:bf:40:a2:72:49:e0:9d:8b:39:80:dd:cd: 2a:7d:31:7b:52:b8:42:f6:1a:7e:29:93:64:d7:b5: 2a:74:9a:56:28:ea:cc:61:ab:b9:62:33:0b:0a:56: 69:39:bd:65:d0:b2:bd:13:cc:a1:69:6d:ab:59:22: a9:37:48:0a:2a:3b:cb:dc:5c:dd:a6:a6:8b:b3:0e: f4:f6:eb:33:18:1a:b4:14:0a:6a:35:7d:d5:8d:47: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:01:EC:5E:86:84:FF:E3:7C:48:E0:5A:BB:60:23:53:8B:A1:B9:E4 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:71:94:f3:97:e8:93:60:c9:68:b9:d0:e6:7b:7c:e4:ef:d5: 9d:23:7c:03:cf:df:dd:e4:49:79:d0:1a:f3:95:5a:23:36:be: ad:d5:41:18:6f:4a:7b:3b:f7:83:f3:9c:16:f6:ee:9d:75:10: 81:cc:20:cb:10:50:29:7c:7f:d0:d7:3b:b7:f4:96:de:bc:00: dd:35:f7:eb:37:03:36:27:ae:6a:9c:b1:b2:0a:4b:3a:2e:17: e8:5c:ad:18:bd:89:5b:98:34:cc:d1:de:6b:23:74:f5:ca:61: 89:7a:51:f9:45:5e:6c:8b:9b:a0:5b:f2:43:6a:85:7b:24:df: 37:5f:73:07:ce:81:e6:b1:15:06:da:5f:ea:01:c8:ad:29:e5: d1:90:18:64:d4:b5:96:8f:f5:a8:1f:7b:3f:76:24:1e:80:d4: 4e:72:1a:bb:b1:1f:b5:f6:36:99:18:90:25:15:80:32:19:a3: a9:47:20:d7:49:9c:b4:08:b6:63:4a:fb:4f:23:06:45:51:a2: 6b:60:0c:e9:ec:52:39:c8:2f:e2:28:fa:8c:3f:0d:28:27:56: 5a:67:66:3b:c4:db:e8:2e:cb:d9:36:fd:78:ae:4d:79:6f:96: 2f:ff:d5:5c:cc:ed:6b:35:31:6c:66:ac:db:a6:13:4b:7e:6a: 02:b2:4b:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjYwNDE2MjMyNjIzWhcNMjYwNDIzMjMyNjIzWjAYMRYwFAYD VQQDEw02OWUxNzAyMC1hOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK36i68pufDWXoCEsb4f0YA0aqTzuQ9O8EEx7J4HeSEaDXZxUWhPS9KcaKHl D1ifmKfnCwPzCCr+qYmKIiY+XypcJr9KxeM5f1E13Ur7kqBNNaFWd5ByTNAyK/5o nQkCsLi9inLhY3FJNnPr+tUfQ160XFu+LIH4ROXcqv+mlkFAd/BhQcsKMBSqOO5T idQMv/8HTCG/oXYJvUDrqOeJ7FU71AraDhG/QKJySeCdizmA3c0qfTF7UrhC9hp+ KZNk17UqdJpWKOrMYau5YjMLClZpOb1l0LK9E8yhaW2rWSKpN0gKKjvL3FzdpqaL sw709uszGBq0FApqNX3VjUdrJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgB7F6G hP/jfEjgWrtgI1OLobnkMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoXGU85fok2DJaLnQ5nt85O/VnSN8A8/f3eRJedAa85VaIza+rdVBGG9Kezv3 g/OcFvbunXUQgcwgyxBQKXx/0Nc7t/SW3rwA3TX36zcDNieuapyxsgpLOi4X6Fyt GL2JW5g0zNHeayN09cphiXpR+UVebIuboFvyQ2qFeyTfN19zB86B5rEVBtpf6gHI rSnl0ZAYZNS1lo/1qB97P3YkHoDUTnIau7EftfY2mRiQJRWAMhmjqUcg10mctAi2 Y0r7TyMGRVGia2AM6exSOcgv4ij6jD8NKCdWWmdmO8Tb6C7L2Tb9eK5NeW+WL//V XMztazUxbGas26YTS35qArJLOg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:36:22 2026 by rpki-client