$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: ldOmqf6P0lkw7B1pM6TLTJm24vhLm+eM3XhY5Yi9YJc= Subject key identifier: 4E:DE:6B:0B:D9:D3:C3:EE:4D:26:B8:7D:E4:B1:B8:90:B4:9D:3D:06 Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 09C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 09B4 Signing time: Thu 16 Apr 2026 19:50:53 +0000 Manifest this update: Thu 16 Apr 2026 19:50:53 +0000 Manifest next update: Thu 23 Apr 2026 19:50:53 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: OecMWQx9FgyYV2K3gXCZu8ZYh5Kqvd/+cr3wNJ4g8OI=) 2: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=) 3: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2499 (0x9c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Apr 16 19:50:53 2026 GMT Not After : Apr 23 19:50:53 2026 GMT Subject: CN=69e13d9d-2222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:35:b5:0e:9f:e2:60:89:da:25:47:7c:7e:eb: bb:93:93:06:f6:2d:6f:7c:60:1d:2c:cb:8f:c6:8c: c0:21:c7:7a:ec:cb:f6:b3:f1:ae:7e:80:63:d8:4e: 4a:ce:51:0b:57:18:10:74:44:4b:4e:82:57:b3:27: 08:8d:e9:24:59:1f:ff:ef:7b:4c:9e:4a:24:44:d5: 44:2c:7c:e7:74:fa:f0:ba:ca:f9:b4:64:27:52:d7: ec:7a:d4:39:ff:a3:52:4c:67:c9:e8:5b:29:04:8c: 5c:99:e1:a2:ea:9f:42:d5:71:e1:de:97:07:49:fb: 22:19:c0:0e:d6:39:90:dd:64:9f:f5:b7:de:61:a8: 19:7b:89:9f:0d:9c:01:42:13:46:33:f2:af:d6:ba: 3a:56:4d:a0:7a:f5:ac:2a:3a:03:62:f2:de:f0:66: a5:45:95:91:f7:5a:d3:86:e7:c3:d5:be:75:a8:dd: 45:c0:fe:d1:33:e5:eb:7b:d7:a7:bd:1f:7a:50:d9: a4:2c:c3:fd:93:3f:88:8a:99:90:47:e2:f4:3f:22: 1f:d8:b6:12:2a:42:cb:75:82:95:62:68:a0:97:a7: 08:d6:52:46:4a:e7:89:71:a2:38:e4:ce:f8:54:33: 0f:e1:6b:e9:11:0e:b8:08:35:54:18:d2:f6:c2:bb: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DE:6B:0B:D9:D3:C3:EE:4D:26:B8:7D:E4:B1:B8:90:B4:9D:3D:06 X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4f:a7:2e:07:ec:a0:8a:80:2f:c9:6a:cf:59:3f:36:a7:8e: 70:20:6f:04:30:55:ff:38:0b:0e:dd:bd:ea:a4:9d:9f:31:1d: 86:4b:a5:76:10:73:99:b1:0f:da:24:f2:97:71:3f:06:5e:30: c8:21:5b:38:e7:9c:95:00:e6:69:e8:04:6e:b2:d6:fe:a6:eb: e0:f4:b7:70:92:cc:37:17:75:9f:20:f3:c6:66:f3:cd:5e:cd: 69:4d:98:96:be:d0:12:89:73:bc:f3:29:84:fb:b4:4b:62:98: d3:dd:7f:97:61:13:20:67:3e:b5:26:18:e3:7c:00:d4:61:97: 4e:dd:4a:1c:d8:5c:bd:f3:da:b5:97:bd:1a:c9:a9:19:b8:a9: 6f:e1:1b:5b:a7:64:d4:b3:47:29:58:34:bf:e2:7e:af:7e:92: dc:60:53:8f:74:82:32:9b:c4:ab:1a:4c:03:0a:d4:6b:93:4b: dd:49:7b:ef:ea:6f:f9:2f:60:b1:29:69:47:62:2d:6a:42:55: 7f:12:8e:c1:8b:c1:fc:aa:84:fc:a1:50:55:a0:bf:f1:c2:7b: 75:40:5c:51:ee:6c:23:8b:3d:e4:d0:d4:52:e7:83:89:06:15: d4:0d:93:06:d1:62:62:0f:64:35:2c:73:2c:5b:ee:80:7e:81: 48:96:50:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjYwNDE2MTk1MDUzWhcNMjYwNDIzMTk1MDUzWjAYMRYwFAYD VQQDEw02OWUxM2Q5ZC0yMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zW1Dp/iYInaJUd8fuu7k5MG9i1vfGAdLMuPxozAIcd67Mv2s/GufoBj2E5K zlELVxgQdERLToJXsycIjekkWR//73tMnkokRNVELHzndPrwusr5tGQnUtfsetQ5 /6NSTGfJ6FspBIxcmeGi6p9C1XHh3pcHSfsiGcAO1jmQ3WSf9bfeYagZe4mfDZwB QhNGM/Kv1ro6Vk2gevWsKjoDYvLe8GalRZWR91rThufD1b51qN1FwP7RM+Xre9en vR96UNmkLMP9kz+IipmQR+L0PyIf2LYSKkLLdYKVYmigl6cI1lJGSueJcaI45M74 VDMP4WvpEQ64CDVUGNL2wrtf7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7eawvZ 08PuTSa4feSxuJC0nT0GMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmE+nLgfsoIqAL8lqz1k/NqeOcCBvBDBV/zgLDt296qSdnzEdhkuldhBzmbEP 2iTyl3E/Bl4wyCFbOOeclQDmaegEbrLW/qbr4PS3cJLMNxd1nyDzxmbzzV7NaU2Y lr7QEolzvPMphPu0S2KY091/l2ETIGc+tSYY43wA1GGXTt1KHNhcvfPatZe9Gsmp Gbipb+EbW6dk1LNHKVg0v+J+r36S3GBTj3SCMpvEqxpMAwrUa5NL3Ul77+pv+S9g sSlpR2ItakJVfxKOwYvB/KqE/KFQVaC/8cJ7dUBcUe5sI4s95NDUUueDiQYV1A2T BtFiYg9kNSxzLFvugH6BSJZQiA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:38 2026 by rpki-client