$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: FFc5wVVz6O8Zo01YTvIDa5FsmtHiit9NJCW41dD9f1Y= Subject key identifier: 57:6C:05:13:86:96:98:52:6A:24:71:63:EA:8A:B6:89:4B:01:71:43 Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0C42 Signing time: Thu 16 Apr 2026 18:40:01 +0000 Manifest this update: Thu 16 Apr 2026 18:40:01 +0000 Manifest next update: Thu 23 Apr 2026 18:40:01 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: KQ9pUX+ywGDAXLLy335TCj7rQ+Ca30AhLhA05w5iDFU=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: 05Ptx/86GPO/lhad6zk3MbGdkqRjiz5wYtBGze/jKII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Apr 16 18:40:01 2026 GMT Not After : Apr 23 18:40:01 2026 GMT Subject: CN=69e12d01-d323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:68:a7:1e:88:1d:58:f4:82:1d:ae:7b:4d: e3:ed:51:e0:16:80:55:c8:14:b3:6a:ea:7a:5b:50: 94:69:d4:e8:66:82:0a:dc:58:10:62:3b:57:a5:cb: 8c:aa:cb:3d:3e:be:06:b9:95:53:3c:2a:8d:5d:14: 46:78:29:4d:65:9a:6a:71:8e:f0:95:68:e4:ae:e9: 52:cf:b3:19:c5:b7:d4:7e:7e:8f:df:dd:97:69:d7: ce:87:22:35:72:21:e1:a2:a4:c8:a9:f6:cb:4b:c8: c9:65:a4:78:3d:0f:ca:a6:80:99:3a:93:87:f9:6b: 0a:33:73:c1:2c:98:12:5e:c1:ae:ce:13:02:b4:c2: bf:a3:46:2e:63:16:d2:47:3b:0e:36:1f:b3:40:3e: 2f:4e:a4:f4:84:10:92:d1:9d:4a:fd:d6:6d:5e:a0: 5b:8f:01:2f:94:56:19:9f:c5:5b:96:0f:54:f6:26: b9:77:ac:d4:bb:32:ae:8f:62:2f:b2:cd:b6:70:eb: c9:a2:50:8b:03:90:d6:4a:39:dc:6d:c6:04:30:79: c1:44:6f:26:4d:57:ce:be:29:91:29:b2:50:4f:82: b1:f5:c0:d7:e8:68:a5:66:52:17:67:b1:12:d2:b4: 11:0d:3b:f9:4e:dc:31:75:f2:e0:cc:61:da:40:d9: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6C:05:13:86:96:98:52:6A:24:71:63:EA:8A:B6:89:4B:01:71:43 X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:bb:6e:f3:d9:bb:e2:44:98:d7:52:e2:70:ef:76:82:e9:bf: ab:10:66:62:8e:80:d4:86:88:f1:cf:7e:94:53:40:8c:5b:8e: 6a:aa:dd:6d:16:f6:90:5c:6b:15:b0:63:a1:d6:21:f8:8d:e7: e0:7b:f7:b2:46:f7:dd:f1:e1:04:f4:f9:77:a3:8f:3d:62:be: 01:94:e7:b2:32:7e:91:b2:1d:73:2c:67:09:8d:7c:38:5f:02: 04:62:f7:b9:44:14:20:d4:02:b1:90:a7:bb:2b:6d:8b:17:f9: b6:c1:cd:d0:0f:cc:36:ad:39:09:8a:f1:33:75:aa:7b:44:b4: 98:0b:f3:1a:80:a2:e5:18:33:a7:da:03:d7:2e:2d:01:64:2c: f7:46:1d:59:fb:76:58:a5:ed:fa:01:2d:4f:e0:e7:60:04:14: 46:64:22:2c:a3:87:2e:6d:d3:71:d1:e6:04:4d:95:a5:81:89: 69:fb:c4:00:0e:33:65:e2:f6:47:42:74:70:c3:91:79:09:df: a3:bf:c6:41:aa:fb:92:3a:79:56:b6:20:27:21:6b:ba:9a:00: 8a:cc:7e:6e:2e:76:f3:46:58:2b:1b:36:56:35:90:41:be:9c: 45:a1:16:1c:a2:b1:d7:76:ff:ba:76:e5:24:91:11:f6:d6:9e: 5e:31:7e:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjYwNDE2MTg0MDAxWhcNMjYwNDIzMTg0MDAxWjAYMRYwFAYD VQQDEw02OWUxMmQwMS1kMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g9opx6IHVj0gh2ue03j7VHgFoBVyBSzaup6W1CUadToZoIK3FgQYjtXpcuM qss9Pr4GuZVTPCqNXRRGeClNZZpqcY7wlWjkrulSz7MZxbfUfn6P392XadfOhyI1 ciHhoqTIqfbLS8jJZaR4PQ/KpoCZOpOH+WsKM3PBLJgSXsGuzhMCtMK/o0YuYxbS RzsONh+zQD4vTqT0hBCS0Z1K/dZtXqBbjwEvlFYZn8Vblg9U9ia5d6zUuzKuj2Iv ss22cOvJolCLA5DWSjncbcYEMHnBRG8mTVfOvimRKbJQT4Kx9cDX6GilZlIXZ7ES 0rQRDTv5TtwxdfLgzGHaQNknOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdsBROG lphSaiRxY+qKtolLAXFDMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB7tu89m74kSY11LicO92gum/qxBmYo6A1IaI8c9+lFNAjFuOaqrdbRb2kFxr FbBjodYh+I3n4Hv3skb33fHhBPT5d6OPPWK+AZTnsjJ+kbIdcyxnCY18OF8CBGL3 uUQUINQCsZCnuyttixf5tsHN0A/MNq05CYrxM3Wqe0S0mAvzGoCi5Rgzp9oD1y4t AWQs90YdWft2WKXt+gEtT+DnYAQURmQiLKOHLm3TcdHmBE2VpYGJafvEAA4zZeL2 R0J0cMOReQnfo7/GQar7kjp5VrYgJyFrupoAisx+bi5280ZYKxs2VjWQQb6cRaEW HKKx13b/unblJJER9taeXjF+/w== -----END CERTIFICATE-----Generated at Fri Apr 17 18:44:59 2026 by rpki-client