$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft File: tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json) Hash identifier: I0hZ+tLfufstqCBSym9bDtDrDTczZQDit8vQCf/eXhY= Subject key identifier: E1:54:73:F6:B3:01:01:F8:B8:63:0F:D4:83:05:F0:0F:16:CA:BE:8C Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 Certificate issuer: /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft Manifest number: 60 Signing time: Fri 17 Apr 2026 07:42:07 +0000 Manifest this update: Fri 17 Apr 2026 07:42:06 +0000 Manifest next update: Fri 24 Apr 2026 07:42:06 +0000 Files and hashes: 1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: VAPFbRiBGKM67tAi/3P43Q5Y6PXGiaY7ftIPkMWROgU=) 2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: PpvqloufX06LkcG9zYWZ5Pcx+1uUm6NtfRlAU1EzgwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228 Validity Not Before: Apr 17 07:42:06 2026 GMT Not After : Apr 24 07:42:06 2026 GMT Subject: CN=69e1e44f-5b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:3f:a6:95:41:d2:4e:82:04:d3:bb:65:02: cd:22:a2:0d:e5:fa:19:46:91:52:a5:73:fa:be:f1: c6:7a:07:c7:43:d3:d0:9f:39:bc:2d:d8:87:07:ff: 1a:d7:9a:c3:6a:97:be:07:6f:09:0d:3a:9c:da:99: 42:29:b2:96:ce:94:d8:a4:5e:01:b4:50:51:9b:d1: b1:80:67:ff:2f:c4:ee:44:7a:4d:d5:80:21:fa:d0: 53:9f:0e:79:12:74:27:25:bf:48:4e:5e:88:3f:e6: e2:ce:74:c8:8f:1a:c2:ad:70:2d:f7:2b:63:3c:db: bd:9e:73:e9:8e:70:5e:65:47:df:05:19:72:06:3c: 40:7d:6b:71:fd:16:69:a5:60:cc:71:a1:0d:3a:cd: 9c:46:a6:7b:bb:d3:6d:9b:4c:bc:54:16:8d:73:c5: 7c:dc:2e:5f:d8:86:33:62:57:98:38:0c:29:ab:31: 8a:48:93:29:03:d1:78:62:27:45:62:d3:1d:38:a3: 37:db:3d:94:8b:ca:a0:b2:37:4b:e5:40:80:e0:9b: 21:1d:53:de:54:6c:d3:f9:e5:04:e1:c8:ef:30:38: e2:fb:e0:c1:64:e0:48:68:3e:3a:c5:9b:9a:ee:e5: 33:f3:b9:71:1e:0e:19:bf:bf:20:7a:4f:18:99:54: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:73:F6:B3:01:01:F8:B8:63:0F:D4:83:05:F0:0F:16:CA:BE:8C X509v3 Authority Key Identifier: keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:77:6a:2c:65:3d:53:4e:41:ec:46:24:48:20:e9:24:7b:33: 65:fc:14:44:b4:6f:e4:7c:00:05:e6:df:ca:94:a8:a8:ef:af: 1b:49:38:ea:61:2d:12:a3:36:47:c0:f5:44:34:79:f5:82:ed: 0b:9b:4e:99:6c:96:dc:f7:d9:88:6c:5e:8d:0c:b7:83:b5:ca: 43:f8:36:48:3d:20:d3:44:68:c0:e9:5d:5e:a2:2e:18:6f:c7: e3:6a:a6:b3:83:b6:9d:90:6c:ae:c7:54:2e:51:00:22:e8:b9: d8:8b:e5:6f:70:74:20:76:3f:18:d0:e2:51:37:7f:97:cd:25: a9:bd:1c:4e:6c:79:df:cc:f0:c7:22:db:5b:a6:2b:8c:41:84: a2:75:d3:f9:3e:e8:33:77:3b:4d:c9:86:93:e4:2a:35:53:16: 3e:ac:fd:3a:53:59:f1:61:ec:45:ec:64:99:a7:e8:aa:c5:54: 5b:2f:d4:a6:d4:13:6f:9b:f8:d2:b1:11:71:87:e5:41:59:9d: b2:eb:c3:2f:0d:55:58:2a:6a:1d:0f:a6:74:79:cc:83:90:ad: 4d:9d:19:70:0b:40:84:f7:92:c5:b4:54:21:b3:1b:e1:a6:03: 05:6c:9c:69:07:1a:6c:bb:30:10:92:d0:14:58:95:ad:1f:28: b0:77:4f:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDBERTExMC8GA1UEBRMoQjY0M0ZFQjMwMzI3NDIxNDhGM0FGOUMzNTM5MzM4RDU1 NDkzNzIyODAeFw0yNjA0MTcwNzQyMDZaFw0yNjA0MjQwNzQyMDZaMBgxFjAUBgNV BAMTDTY5ZTFlNDRmLTViOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsxT+mlUHSToIE07tlAs0iog3l+hlGkVKlc/q+8cZ6B8dD09CfObwt2IcH/xrX msNql74HbwkNOpzamUIpspbOlNikXgG0UFGb0bGAZ/8vxO5Eek3VgCH60FOfDnkS dCclv0hOXog/5uLOdMiPGsKtcC33K2M8272ec+mOcF5lR98FGXIGPEB9a3H9Fmml YMxxoQ06zZxGpnu7022bTLxUFo1zxXzcLl/YhjNiV5g4DCmrMYpIkykD0XhiJ0Vi 0x04ozfbPZSLyqCyN0vlQIDgmyEdU95UbNP55QThyO8wOOL74MFk4EhoPjrFm5ru 5TPzuXEeDhm/vyB6TxiZVNjHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4VRz9rMB Afi4Yw/UgwXwDxbKvowwHwYDVR0jBBgwFoAUtkP+swMnQhSPOvnDU5M41VSTcigw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMERFLzRGNzY5RDU4QTk4 RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhTUE92bkRVNU00MVZTVGNp Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdGtQLXN3TW5RaFNQT3ZuRFU1TTQxVlNUY2lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MERFLzRGNzY5RDU4QTk4RjExRjBCMUZBNTA2NkM0RjlBRTAyL3RrUC1zd01uUWhT UE92bkRVNU00MVZTVGNpZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAYd2osZT1TTkHsRiRIIOkkezNl/BREtG/kfAAF5t/KlKio768bSTjqYS0SozZH wPVENHn1gu0Lm06ZbJbc99mIbF6NDLeDtcpD+DZIPSDTRGjA6V1eoi4Yb8fjaqaz g7adkGyux1QuUQAi6LnYi+VvcHQgdj8Y0OJRN3+XzSWpvRxObHnfzPDHIttbpiuM QYSiddP5PugzdztNyYaT5Co1UxY+rP06U1nxYexF7GSZp+iqxVRbL9Sm1BNvm/jS sRFxh+VBWZ2y68MvDVVYKmodD6Z0ecyDkK1NnRlwC0CE95LFtFQhsxvhpgMFbJxp BxpsuzAQktAUWJWtHyiwd0/B -----END CERTIFICATE-----Generated at Sat Apr 18 03:22:35 2026 by rpki-client