$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: K9Uwtthhanf9KPoaiAyj5x4DURbOo1hO36McDexIVz0= Subject key identifier: 78:DF:98:59:0E:B9:4E:FA:7A:A6:4E:3F:13:28:6F:65:60:EC:EC:5B Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 08D1 Signing time: Thu 16 Apr 2026 20:18:41 +0000 Manifest this update: Thu 16 Apr 2026 20:18:40 +0000 Manifest next update: Thu 23 Apr 2026 20:18:40 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: ORFtVsV+8TkTFU3k6m16Nwng1+87cYrupuFdvgQ2SaA=) 2: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: 2893HNR31GoP/uh0ScggOWfiNSgjFGwQgJxlawN3n4I=) 3: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: WjGg/ZejwvG9Siea7F263gfGtLWehGPgmKPNRYmD4sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Apr 16 20:18:40 2026 GMT Not After : Apr 23 20:18:40 2026 GMT Subject: CN=69e14421-a757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:36:17:38:e4:79:d1:75:5d:83:bd:71:79: 37:9a:20:7d:de:1a:94:c4:5a:76:58:d0:a0:db:c5: de:83:db:72:ac:5f:99:d0:54:4e:0c:6d:43:01:3a: 1e:8d:db:5e:a1:61:e7:47:a6:74:ca:26:a3:77:f0: 67:2d:ea:4e:ed:9c:32:7b:a4:0f:fb:b0:d7:a5:e6: bf:0e:10:af:08:04:86:ec:fa:a4:4c:53:fc:66:36: 1b:63:e3:e7:a7:99:67:b1:51:4b:dd:6a:b3:e4:bb: b1:73:de:e3:f3:fa:d6:6e:7a:01:c5:ff:b7:4c:85: 6f:49:ca:41:66:be:74:12:2b:f0:b8:88:2a:f5:7e: dd:d8:44:e1:f9:bb:5f:88:6a:24:c3:a5:90:17:d7: 91:19:02:1d:0c:4c:41:ee:77:17:d0:d5:68:ae:15: b5:05:90:86:ce:e9:13:fe:e9:c7:13:01:33:05:4c: 70:bd:8b:ed:32:85:46:3b:dd:d9:8d:74:24:b6:2d: 6f:d7:50:4f:e0:9a:1c:2e:e8:94:fa:bb:c9:57:56: 6f:6c:2a:67:cc:37:7f:04:60:a6:fe:d9:6b:9b:84: 2c:f8:c4:ae:64:11:35:cf:98:56:11:91:87:62:0f: c0:fa:93:22:f0:9f:07:4b:75:68:28:22:06:50:d2: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DF:98:59:0E:B9:4E:FA:7A:A6:4E:3F:13:28:6F:65:60:EC:EC:5B X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:99:cd:6a:50:d2:4f:0a:69:6f:b0:30:11:a1:37:4a:cd:16: 98:64:db:ae:29:a7:4d:3e:6e:7c:d2:16:70:38:41:b4:01:b4: 99:d9:34:32:58:0a:3f:79:b3:ea:cd:05:76:e7:0c:3d:14:2e: ec:27:cb:07:fe:87:92:b7:9c:f5:bb:64:6f:1b:2d:e4:14:05: af:31:92:df:a5:d3:ff:a1:68:cc:8d:68:c3:9a:a0:fe:bf:cd: 56:c4:00:44:11:76:0c:98:b6:38:32:a9:bb:44:c6:ef:ae:61: 98:41:dd:12:93:ae:9e:24:1f:13:b4:ec:e7:b8:7a:4b:70:45: 93:57:87:90:97:3b:36:d1:7c:e9:11:72:09:f3:b5:8e:3f:65: d3:ab:74:e7:73:f0:88:a9:6f:b9:e3:05:df:f6:43:53:96:d5: ae:4d:e7:bc:01:37:56:e6:35:71:d9:2d:59:2d:e7:05:de:39: 3a:53:9b:fd:77:c5:48:ad:11:90:3e:ab:f2:2c:01:6e:ff:4a: 03:fa:6a:6e:95:73:7f:cb:45:f4:84:9b:9a:3d:87:52:1d:2d: 38:1c:d6:7d:b2:bf:c4:eb:57:7f:be:a7:c9:bc:90:c3:e2:ad: 9d:70:00:71:f4:21:70:2b:f6:ad:ba:e1:c5:d3:67:ba:33:1d: 06:35:e5:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjYwNDE2MjAxODQwWhcNMjYwNDIzMjAxODQwWjAYMRYwFAYD VQQDEw02OWUxNDQyMS1hNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iU2FzjkedF1XYO9cXk3miB93hqUxFp2WNCg28Xeg9tyrF+Z0FRODG1DAToe jdteoWHnR6Z0yiajd/BnLepO7Zwye6QP+7DXpea/DhCvCASG7PqkTFP8ZjYbY+Pn p5lnsVFL3Wqz5Luxc97j8/rWbnoBxf+3TIVvScpBZr50EivwuIgq9X7d2ETh+btf iGokw6WQF9eRGQIdDExB7ncX0NVorhW1BZCGzukT/unHEwEzBUxwvYvtMoVGO93Z jXQkti1v11BP4JocLuiU+rvJV1ZvbCpnzDd/BGCm/tlrm4Qs+MSuZBE1z5hWEZGH Yg/A+pMi8J8HS3VoKCIGUNJBuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjfmFkO uU76eqZOPxMob2Vg7OxbMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJZnNalDSTwppb7AwEaE3Ss0WmGTbrimnTT5ufNIWcDhBtAG0mdk0MlgKP3mz 6s0FducMPRQu7CfLB/6Hkrec9btkbxst5BQFrzGS36XT/6FozI1ow5qg/r/NVsQA RBF2DJi2ODKpu0TG765hmEHdEpOuniQfE7Ts57h6S3BFk1eHkJc7NtF86RFyCfO1 jj9l06t053PwiKlvueMF3/ZDU5bVrk3nvAE3VuY1cdktWS3nBd45OlOb/XfFSK0R kD6r8iwBbv9KA/pqbpVzf8tF9ISbmj2HUh0tOBzWfbK/xOtXf76nybyQw+KtnXAA cfQhcCv2rbrhxdNnujMdBjXlpg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:27 2026 by rpki-client