$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: rywOSOhXiy99G30OAlHEkplMa8VyJwXxdsi1QFreTtE= Subject key identifier: 5F:F7:32:9E:EF:73:76:03:0F:82:DD:55:1E:1A:24:48:7B:9F:B1:38 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 046E Signing time: Fri 17 Apr 2026 00:01:40 +0000 Manifest this update: Fri 17 Apr 2026 00:01:40 +0000 Manifest next update: Fri 24 Apr 2026 00:01:40 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: th849eOvga1TqWD+yaxMwj7xMggIyOEDEtUvH0eFpuY=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Apr 17 00:01:40 2026 GMT Not After : Apr 24 00:01:40 2026 GMT Subject: CN=69e17864-3248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d4:0f:54:cf:3b:56:6d:30:af:fd:27:72:0a: a4:51:17:f2:a8:28:0b:32:87:06:46:57:fb:fc:cb: 43:4c:78:f0:85:95:d0:15:9e:29:52:f2:32:0e:e9: 68:72:f4:51:eb:73:ca:35:b0:44:99:a5:5b:e4:8e: 51:99:a6:57:26:46:ff:dd:98:e7:0a:34:29:ff:95: 81:1d:5e:ff:d9:b6:5c:a8:02:a2:0c:9b:52:77:fd: 9d:fc:0e:b6:26:46:f5:25:2a:e2:e0:81:8d:41:7a: 70:49:4f:5b:78:73:5a:45:8b:3d:56:94:c7:e0:05: e5:d1:49:02:0d:68:49:a9:90:f2:30:24:3d:be:9b: 31:cf:7f:bc:d7:73:50:fa:75:06:ce:1c:96:28:c8: 12:27:25:33:76:df:7f:4b:2d:79:99:65:cb:43:a4: 1c:66:1a:f4:0a:2c:32:69:12:90:6c:3a:51:19:3c: 22:e4:dc:61:27:e1:3b:64:57:52:c2:fd:3c:46:70: da:89:7f:32:ed:56:c8:ce:85:1a:c8:92:24:ab:99: 3e:a3:0e:7c:59:94:32:2f:e6:40:4c:8e:ad:80:b1: c8:cc:e9:60:d2:63:b3:e9:b5:70:ec:04:e7:33:ba: e1:b7:cd:9e:06:0e:a9:0c:c4:d0:0e:83:08:c6:4c: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:32:9E:EF:73:76:03:0F:82:DD:55:1E:1A:24:48:7B:9F:B1:38 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ee:68:a9:4a:cd:6a:e5:fa:ae:bd:2b:00:2e:b4:f8:2c:ee: 6b:9c:2e:a1:98:f7:48:aa:d0:2d:02:13:3a:07:66:b0:b9:3f: 1e:24:71:49:e1:ec:26:06:bb:be:a3:21:41:d5:65:a8:c0:7d: ce:b2:d5:e7:83:31:c0:5e:05:4d:99:d3:8a:01:91:55:0e:86: 72:dd:f5:39:04:5f:2c:a0:f8:4d:1e:7a:ee:a8:20:0d:43:73: 13:1b:60:83:40:51:8e:24:75:f6:e7:22:aa:e0:22:f0:67:7f: 1c:9f:15:03:46:d1:44:b1:85:27:8a:7c:f4:e5:09:55:ec:e1: 31:46:3e:93:5c:9f:e2:f6:c7:98:18:14:a9:56:32:87:2e:3c: 05:db:c9:5d:55:46:c1:73:fa:19:6f:b9:85:10:bc:ad:62:fc: e6:ae:b8:17:b2:79:9c:3a:e5:4a:4f:c4:e5:72:e8:9d:21:ca: bd:e1:b1:8f:8a:e4:f7:c2:a0:92:a5:ff:21:f4:ca:f5:7c:b5: 81:9b:24:b7:5d:9f:ce:f2:7e:ad:39:ca:c3:7e:94:93:e7:20: 5b:1c:ca:4e:80:2d:95:88:85:c0:cb:ef:5d:a4:79:40:e0:bd: dd:25:8a:4f:4c:fd:61:23:2c:c3:3a:2c:ee:8f:10:a7:2b:65: 21:2b:d9:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwNDE3MDAwMTQwWhcNMjYwNDI0MDAwMTQwWjAYMRYwFAYD VQQDEw02OWUxNzg2NC0zMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+NQPVM87Vm0wr/0ncgqkURfyqCgLMocGRlf7/MtDTHjwhZXQFZ4pUvIyDulo cvRR63PKNbBEmaVb5I5RmaZXJkb/3ZjnCjQp/5WBHV7/2bZcqAKiDJtSd/2d/A62 Jkb1JSri4IGNQXpwSU9beHNaRYs9VpTH4AXl0UkCDWhJqZDyMCQ9vpsxz3+813NQ +nUGzhyWKMgSJyUzdt9/Sy15mWXLQ6QcZhr0CiwyaRKQbDpRGTwi5NxhJ+E7ZFdS wv08RnDaiX8y7VbIzoUayJIkq5k+ow58WZQyL+ZATI6tgLHIzOlg0mOz6bVw7ATn M7rht82eBg6pDMTQDoMIxkzkVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/3Mp7v c3YDD4LdVR4aJEh7n7E4MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP+5oqUrNauX6rr0rAC60+Czua5wuoZj3SKrQLQITOgdmsLk/HiRxSeHsJga7 vqMhQdVlqMB9zrLV54MxwF4FTZnTigGRVQ6Gct31OQRfLKD4TR567qggDUNzExtg g0BRjiR19uciquAi8Gd/HJ8VA0bRRLGFJ4p89OUJVezhMUY+k1yf4vbHmBgUqVYy hy48BdvJXVVGwXP6GW+5hRC8rWL85q64F7J5nDrlSk/E5XLonSHKveGxj4rk98Kg kqX/IfTK9Xy1gZskt12fzvJ+rTnKw36Uk+cgWxzKToAtlYiFwMvvXaR5QOC93SWK T0z9YSMswzos7o8QpytlISvZQA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:43:20 2026 by rpki-client