$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft File: RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json) Hash identifier: Kg2ZJgh3a40j5ePggRp1GJkVUIVnR/7bAT8HagVxOPo= Subject key identifier: A4:6E:ED:56:7D:1C:77:CF:88:7D:0D:7A:96:C4:3B:C3:43:6C:89:AC Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E Certificate issuer: /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft Manifest number: 01AC Signing time: Sat 18 Apr 2026 14:51:16 +0000 Manifest this update: Sat 18 Apr 2026 14:51:15 +0000 Manifest next update: Sat 25 Apr 2026 14:51:15 +0000 Files and hashes: 1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: cKXye2BoiqmicdCsUWBidZXbPpTviYv14Lm9BxBGQ0s=) 2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: kFv7yndhwJadcacui8r5QOrU0uIwRhKTiJr7YW1IOaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E Validity Not Before: Apr 18 14:51:15 2026 GMT Not After : Apr 25 14:51:15 2026 GMT Subject: CN=69e39a64-f3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:33:42:f0:40:a7:18:fa:76:03:de:5c:c4: 6d:37:af:89:58:6e:25:8b:7e:d6:09:64:84:3f:ba: b0:57:97:49:1e:ac:1e:6d:37:15:a1:04:90:fe:b6: 30:23:43:89:f1:52:02:d1:27:d1:26:1f:50:50:cf: 35:35:47:44:90:f3:37:0b:06:70:7c:50:3e:ce:c7: 18:ba:72:c2:54:e1:17:26:0e:2f:0e:6e:9d:52:cc: 7b:28:eb:a2:2d:ae:c7:97:e0:8b:1f:7a:4c:3d:61: ff:0e:58:ee:a0:28:85:62:06:2b:17:92:dc:90:b8: e9:29:f0:1e:c0:ec:e0:2f:20:db:17:1a:0f:71:3d: 2d:81:d4:06:04:39:29:49:58:24:41:af:14:f5:2d: 73:5f:2c:b7:bd:ea:ca:52:bc:f9:ec:58:3d:c0:57: d4:a1:74:dd:e6:90:5e:0f:53:82:d0:15:21:19:0e: 5f:24:d3:4d:91:e3:6c:1f:b4:05:48:c9:ea:6d:4e: e3:7e:16:1c:ec:3c:f7:9d:0e:59:a9:b9:d7:f5:61: b6:4f:da:55:f6:74:91:77:bb:3d:e6:20:c5:15:79: 8f:49:05:f3:9e:d3:64:e6:e1:af:a7:f9:7c:d8:00: f3:0c:fc:49:a4:74:73:cb:89:2a:69:58:42:be:fa: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6E:ED:56:7D:1C:77:CF:88:7D:0D:7A:96:C4:3B:C3:43:6C:89:AC X509v3 Authority Key Identifier: keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:52:7a:f5:7e:4c:89:89:89:97:95:20:20:39:1f:01:68: d5:9d:bc:16:f8:19:4c:9d:82:98:95:fd:88:cc:e3:46:f7:a8: 4c:86:b2:62:7d:56:3f:8d:73:f3:39:cd:86:b7:28:71:45:1d: d0:2c:ee:8b:9e:bc:6b:bb:f0:0f:42:63:56:28:c0:f4:6a:b7: a6:4f:65:51:e2:56:a7:33:73:99:57:ed:aa:2f:a3:f9:fa:18: f7:2b:98:82:69:7d:2c:50:8e:fb:f7:e5:81:8f:e7:f5:f6:f5: dd:63:f2:19:a6:fe:e1:3e:8d:34:a2:36:53:9b:f5:6a:28:11: c2:7b:42:ae:a6:9b:5e:04:26:e9:c4:e2:d3:6d:66:3a:35:73: e9:92:b6:13:3a:d7:28:9a:fa:ff:d0:54:79:61:ae:58:da:f0: d7:0a:2f:16:2c:d2:e5:84:3f:03:60:42:f6:bd:59:c6:4d:fa: 0a:e6:00:2b:93:c3:4a:be:27:ca:8a:e6:3a:dc:b7:1e:53:be: f4:a7:db:bd:2d:7d:69:84:59:d4:ed:34:60:bf:69:c6:f4:bc: 5d:4d:82:c2:29:83:43:2e:42:eb:bf:82:eb:fb:f8:b4:28:53: 56:ad:d8:ea:d4:85:6a:b8:f9:f9:9c:8d:c1:58:06:cf:84:01: cb:ac:6a:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDQ1OTRGMkVDMTdERjU2QzNEMDY1NDBGMzY2RDJBRjEx OEIzMTdGMUUwHhcNMjYwNDE4MTQ1MTE1WhcNMjYwNDI1MTQ1MTE1WjAYMRYwFAYD VQQDEw02OWUzOWE2NC1mM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR0zQvBApxj6dgPeXMRtN6+JWG4li37WCWSEP7qwV5dJHqwebTcVoQSQ/rYw I0OJ8VIC0SfRJh9QUM81NUdEkPM3CwZwfFA+zscYunLCVOEXJg4vDm6dUsx7KOui La7Hl+CLH3pMPWH/DljuoCiFYgYrF5LckLjpKfAewOzgLyDbFxoPcT0tgdQGBDkp SVgkQa8U9S1zXyy3verKUrz57Fg9wFfUoXTd5pBeD1OC0BUhGQ5fJNNNkeNsH7QF SMnqbU7jfhYc7Dz3nQ5ZqbnX9WG2T9pV9nSRd7s95iDFFXmPSQXzntNk5uGvp/l8 2ADzDPxJpHRzy4kqaVhCvvq5LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRu7VZ9 HHfPiH0NepbEO8NDbImsMB8GA1UdIwQYMBaAFEWU8uwX31bD0GVA82bSrxGLMX8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC81REI1NTVBQUI4 REExMUVFQkM0QkVDMkRDNEY5QUUwMi9SWlR5N0JmZlZzUFFaVUR6WnRLdkVZc3hm eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JaVHk3QmZmVnNQUVpVRHpadEt2RVlzeGZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC81REI1NTVBQUI4REExMUVFQkM0QkVDMkRDNEY5QUUwMi9SWlR5N0JmZlZz UFFaVUR6WnRLdkVZc3hmeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADohSevV+TImJiZeVICA5HwFo1Z28FvgZTJ2CmJX9iMzjRveoTIayYn1WP41z 8znNhrcocUUd0Czui568a7vwD0JjVijA9Gq3pk9lUeJWpzNzmVftqi+j+foY9yuY gml9LFCO+/flgY/n9fb13WPyGab+4T6NNKI2U5v1aigRwntCrqabXgQm6cTi021m OjVz6ZK2EzrXKJr6/9BUeWGuWNrw1wovFizS5YQ/A2BC9r1Zxk36CuYAK5PDSr4n yormOty3HlO+9KfbvS19aYRZ1O00YL9pxvS8XU2CwimDQy5C67+C6/v4tChTVq3Y 6tSFarj5+ZyNwVgGz4QBy6xqSg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:27:48 2026 by rpki-client