$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: xgm6uQtz29BZnkHmZ1H6Ns+mIBYg+Y7CXATtPur5H3Y= Subject key identifier: A6:77:41:3E:1B:B8:B0:11:E2:67:15:43:6D:C4:A6:CB:75:31:D0:FF Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0FB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0FA4 Signing time: Thu 16 Apr 2026 17:28:06 +0000 Manifest this update: Thu 16 Apr 2026 17:28:06 +0000 Manifest next update: Thu 23 Apr 2026 17:28:06 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: Q5lBS9CckfFZfbcAYIA9lmPFUitnukxj0sikpSmtMUU=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: zCyf9OjZvyQznidGrRLY9YgyvLWdtz4Gp+P2ldxQodg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4025 (0xfb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Apr 16 17:28:06 2026 GMT Not After : Apr 23 17:28:06 2026 GMT Subject: CN=69e11c26-8c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:3e:26:bc:2f:a7:8d:0c:16:ab:c2:d7:e0: 26:99:e8:a8:f5:88:11:93:1e:19:50:55:ac:9f:81: 65:fe:48:fc:59:4d:a7:72:c5:f5:53:65:ed:05:2d: 56:ed:2a:1b:ee:73:23:c5:36:ca:9a:19:6b:bc:72: e7:6f:85:96:e6:49:ef:f4:93:59:9e:66:7a:80:a3: eb:25:f6:55:ea:85:50:3d:87:c5:46:7f:c0:ca:44: 2a:10:ed:07:56:a4:8d:f1:ad:cf:73:bf:3a:3d:e7: 04:fd:54:dd:33:da:88:6c:7d:b0:51:e4:9e:c5:72: ef:52:48:1f:a1:e1:3a:36:84:1c:1c:a5:75:3c:ea: ab:76:d4:45:33:4b:ca:e7:f0:d0:48:07:f4:d4:f0: ac:b1:40:a4:62:2b:e0:84:3a:5d:56:ad:42:01:51: 29:b9:d3:60:57:45:1f:77:c9:91:95:e6:50:2d:20: 6b:eb:2b:6f:3c:f2:2e:7c:72:e4:2e:58:68:30:ad: cb:b6:1d:86:81:4a:ea:d1:cf:c5:cb:af:dd:73:88: 51:04:ca:ef:6e:dc:9a:4b:6a:26:11:77:ac:1e:11: ec:ce:cf:f4:7c:d5:c7:cd:27:01:59:17:ad:f3:4d: 4e:4c:05:eb:df:ae:9b:f7:a7:6e:d5:12:10:46:77: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:77:41:3E:1B:B8:B0:11:E2:67:15:43:6D:C4:A6:CB:75:31:D0:FF X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:d5:f3:85:d2:09:5f:79:69:7a:6f:93:21:ac:ed:07:b0: 05:02:53:84:4d:72:63:9f:8f:cd:d2:34:ca:22:4e:1f:8a:eb: 46:76:5e:e2:3c:6e:5d:fd:0f:38:03:8a:aa:a4:67:fc:4e:bf: b2:43:df:18:47:12:20:c7:8f:7f:9b:4d:e9:2d:9b:ad:f3:d3: fb:80:ec:f0:3d:41:a5:65:49:1e:eb:3f:2d:fd:48:6f:74:e7: ea:fc:d3:df:7d:f8:37:fc:2c:fc:d3:61:5a:7b:38:13:10:5c: 53:74:bd:d5:1a:7d:fb:0b:84:b2:a1:3c:20:ce:10:b2:8b:00: c8:28:30:b3:2d:c0:08:bb:2b:25:f8:9f:5e:49:ed:a7:75:33: 2b:3d:c7:4e:2d:08:c6:92:79:78:a2:cf:fb:5d:cc:c8:33:87: dc:15:04:55:c2:f8:c1:35:ca:48:24:03:d3:04:86:07:ed:21: e9:c6:5f:14:36:c3:19:73:4f:65:d9:fe:a5:0c:09:45:40:d5: 4c:37:15:66:19:ff:ea:c8:3f:65:13:da:5c:21:ac:b2:ba:c0: 09:8e:ef:02:a9:df:48:66:de:89:ed:b5:47:d2:4a:7a:0d:47: 1a:74:39:c9:e3:11:1d:a3:9b:28:e1:aa:a7:b8:bb:57:32:c3: 5e:21:e3:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjYwNDE2MTcyODA2WhcNMjYwNDIzMTcyODA2WjAYMRYwFAYD VQQDEw02OWUxMWMyNi04YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4Y+Jrwvp40MFqvC1+Ammeio9YgRkx4ZUFWsn4Fl/kj8WU2ncsX1U2XtBS1W 7Sob7nMjxTbKmhlrvHLnb4WW5knv9JNZnmZ6gKPrJfZV6oVQPYfFRn/AykQqEO0H VqSN8a3Pc786PecE/VTdM9qIbH2wUeSexXLvUkgfoeE6NoQcHKV1POqrdtRFM0vK 5/DQSAf01PCssUCkYivghDpdVq1CAVEpudNgV0Ufd8mRleZQLSBr6ytvPPIufHLk LlhoMK3Lth2GgUrq0c/Fy6/dc4hRBMrvbtyaS2omEXesHhHszs/0fNXHzScBWRet 801OTAXr366b96du1RIQRndpaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZ3QT4b uLAR4mcVQ23Epst1MdD/MB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYcfV84XSCV95aXpvkyGs7QewBQJThE1yY5+PzdI0yiJOH4rrRnZe4jxuXf0P OAOKqqRn/E6/skPfGEcSIMePf5tN6S2brfPT+4Ds8D1BpWVJHus/Lf1Ib3Tn6vzT 3334N/ws/NNhWns4ExBcU3S91Rp9+wuEsqE8IM4QsosAyCgwsy3ACLsrJfifXknt p3UzKz3HTi0IxpJ5eKLP+13MyDOH3BUEVcL4wTXKSCQD0wSGB+0h6cZfFDbDGXNP Zdn+pQwJRUDVTDcVZhn/6sg/ZRPaXCGssrrACY7vAqnfSGbeie21R9JKeg1HGnQ5 yeMRHaObKOGqp7i7VzLDXiHjMA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:37:38 2026 by rpki-client