$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json) Hash identifier: 2X5CfdramG46wlIm1S2w3tszd40IuoUdMFcgmUN2rqQ= Subject key identifier: 22:1F:55:A8:84:13:6D:2A:EE:25:B9:A3:FD:4B:FA:03:90:BD:CD:6D Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft Manifest number: 0135 Signing time: Fri 17 Apr 2026 05:10:12 +0000 Manifest this update: Fri 17 Apr 2026 05:10:11 +0000 Manifest next update: Fri 24 Apr 2026 05:10:11 +0000 Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: lThNBQLPhS4efMIyfuC6kghMuTVfAtLv6KG9yy4ptq8=) 2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: Cz53IM9XrwFo5eiOhKbMpefJ/4LPJaT0jFu6dU8OhL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1 Validity Not Before: Apr 17 05:10:11 2026 GMT Not After : Apr 24 05:10:11 2026 GMT Subject: CN=69e1c0b4-7aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:ec:87:b0:13:f1:96:3a:e9:a8:ea:04:77: 14:ce:c9:eb:02:d5:32:13:4a:43:fb:aa:7b:e2:19: a5:27:d0:80:a7:b8:50:0c:8c:01:85:a5:ac:66:b9: 1a:62:26:b4:d4:ee:33:02:a0:1f:5e:e6:2d:d2:65: 22:33:96:b3:2a:b2:63:51:8a:1c:05:dc:b4:8b:f3: 43:f0:1a:e9:ad:b6:4a:02:8e:c5:d6:74:83:16:56: 89:c2:b6:d1:c8:01:fc:0b:46:9c:38:f3:af:d9:a1: 4e:95:04:bb:73:00:54:ae:f0:b8:23:f6:85:b9:cb: 6e:f2:49:7c:69:50:a3:ea:74:58:de:fb:3a:1c:9e: 0a:fa:00:2f:be:de:14:a0:a9:3e:8c:9c:04:08:09: 50:f7:bb:e0:33:55:f5:33:05:81:c9:4b:dd:2f:5a: 35:87:84:06:d5:4d:a3:0c:1d:e0:34:64:8c:57:51: a4:e1:39:39:9b:0a:f3:0e:32:cf:88:b1:ac:b2:f8: 77:c9:41:e8:82:36:39:90:e2:8f:46:be:01:12:c6: 7a:4c:de:27:50:c3:64:18:96:16:3b:22:24:5a:55: 39:a0:a0:60:d2:25:cd:70:0d:0f:51:31:d2:80:2c: d4:4f:a3:f9:8f:38:0e:b7:90:03:37:8f:f1:b3:ff: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1F:55:A8:84:13:6D:2A:EE:25:B9:A3:FD:4B:FA:03:90:BD:CD:6D X509v3 Authority Key Identifier: keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7e:23:1b:df:79:72:86:13:dc:5b:52:56:fb:ce:40:db:7c: f3:6e:7a:b6:fa:15:4f:ff:64:a2:08:9f:a0:c4:61:a0:9b:9a: b4:4f:8e:d7:a8:e5:cc:8d:12:9e:3e:29:d3:fa:e4:97:f6:ab: 53:2a:01:4a:50:63:ef:b9:b9:82:e6:7e:a2:a4:4a:ca:e7:00: e5:b3:13:57:17:82:5c:70:c3:8f:94:2c:85:25:9a:d8:a1:3a: e1:74:80:2f:fd:c5:a1:78:4a:c2:f6:2d:3f:fb:ef:97:f0:89: 10:02:43:f9:12:d0:3a:e2:c1:ca:eb:e1:3b:5c:24:16:a1:d0: 7e:41:83:16:be:56:59:f0:30:cf:89:ed:ed:b7:6a:b1:77:74: 40:f6:3a:80:81:4a:dc:30:62:f4:ae:00:0c:92:dd:d6:1b:1b: 69:d8:b0:b0:50:61:34:f0:65:fe:6a:de:e7:78:af:8e:d5:74: f0:2f:ac:2b:2e:57:85:20:3c:ae:14:02:00:f5:7f:f6:b4:3e: 4d:12:4d:c1:ef:90:17:84:53:fc:43:6d:2a:ef:18:c5:cf:cb: 9a:6a:23:dc:2b:af:dd:c2:5a:c7:51:0d:85:1c:79:fb:05:e1: ff:e7:7c:69:f1:8e:f2:00:ae:7f:1a:2d:ee:b8:68:73:41:d8: de:f0:eb:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDA4OUNCNUEyQjMzQjc4NkQ3NTRBMDdENjgwQTlDNDk0 MTQyNjE5RTEwHhcNMjYwNDE3MDUxMDExWhcNMjYwNDI0MDUxMDExWjAYMRYwFAYD VQQDEw02OWUxYzBiNC03YWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnL3sh7AT8ZY66ajqBHcUzsnrAtUyE0pD+6p74hmlJ9CAp7hQDIwBhaWsZrka Yia01O4zAqAfXuYt0mUiM5azKrJjUYocBdy0i/ND8BrprbZKAo7F1nSDFlaJwrbR yAH8C0acOPOv2aFOlQS7cwBUrvC4I/aFuctu8kl8aVCj6nRY3vs6HJ4K+gAvvt4U oKk+jJwECAlQ97vgM1X1MwWByUvdL1o1h4QG1U2jDB3gNGSMV1Gk4Tk5mwrzDjLP iLGssvh3yUHogjY5kOKPRr4BEsZ6TN4nUMNkGJYWOyIkWlU5oKBg0iXNcA0PUTHS gCzUT6P5jzgOt5ADN4/xs//o4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIfVaiE E20q7iW5o/1L+gOQvc1tMB8GA1UdIwQYMBaAFAictaKzO3htdUoH1oCpxJQUJhnh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC82ODNCQTA5NjY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VHMTFTZ2ZXZ0tuRWxCUW1H ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NKeTFvck03ZUcxMVNnZldnS25FbEJRbUdlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC82ODNCQTA5NjY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9DSnkxb3JNN2VH MTFTZ2ZXZ0tuRWxCUW1HZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIX4jG995coYT3FtSVvvOQNt88256tvoVT/9kogifoMRhoJuatE+O16jlzI0S nj4p0/rkl/arUyoBSlBj77m5guZ+oqRKyucA5bMTVxeCXHDDj5QshSWa2KE64XSA L/3FoXhKwvYtP/vvl/CJEAJD+RLQOuLByuvhO1wkFqHQfkGDFr5WWfAwz4nt7bdq sXd0QPY6gIFK3DBi9K4ADJLd1hsbadiwsFBhNPBl/mre53ivjtV08C+sKy5XhSA8 rhQCAPV/9rQ+TRJNwe+QF4RT/ENtKu8Yxc/Lmmoj3Cuv3cJax1ENhRx5+wXh/+d8 afGO8gCufxot7rhoc0HY3vDrZQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:34:59 2026 by rpki-client