$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: Jh8tk3pIqz/vsAqgCtHir6L0bYrU0pfOIdmTnSumxN4= Subject key identifier: B3:1C:6D:5E:96:A3:22:35:52:49:CA:D4:A6:7B:17:04:8F:FA:BF:C5 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0D91 Signing time: Thu 16 Apr 2026 20:17:04 +0000 Manifest this update: Thu 16 Apr 2026 20:17:03 +0000 Manifest next update: Thu 23 Apr 2026 20:17:03 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: YLzgmeulsFUdFXq4humhrJFb4jAh+6dxg/FMyPjRR9s=) 2: 8E4BBF50F5C511EF89110646C4F9AE02.roa (hash: 1qbYu5KRZI3rxH4kzvhF/miC5oW7IXAqReX/2/VUDaU=) 3: A1B8D10EF5C511EF83B21246C4F9AE02.roa (hash: V07yp4azfzM5YFQd3DFJvRMzAViuDBC6g0jJfgu6wvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2, serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Apr 16 20:17:03 2026 GMT Not After : Apr 23 20:17:03 2026 GMT Subject: CN=69e143c0-8ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b8:31:1d:bb:e4:3c:b7:a5:a5:4f:db:95:41: 50:63:75:9c:c7:74:ac:bd:84:fd:b1:89:a9:41:e4: 2c:81:db:53:79:5c:a8:4d:48:70:9f:36:a8:87:c1: 49:76:ec:e2:5f:45:bb:52:b8:1d:f8:c2:ac:d1:b1: 11:88:0d:56:9b:c6:97:4f:ea:08:b2:2f:b5:63:14: 81:e1:59:c5:76:2c:f4:7d:a8:38:64:82:b6:8b:42: d2:e3:05:32:84:d1:83:40:75:82:73:c0:da:7e:25: 42:25:15:f2:06:b2:da:96:aa:a1:92:2a:d5:87:3d: 64:d9:97:1b:08:3f:00:ab:d2:b1:0b:13:cb:28:8e: c8:37:eb:22:d8:77:68:bf:3a:5a:f5:81:ab:6e:28: 31:5c:78:af:2d:ec:d9:71:a6:ed:1b:16:8d:33:bb: 89:75:b5:1a:33:40:d1:f7:8d:05:bd:48:d0:76:98: 02:f8:e9:18:38:cd:ad:aa:56:40:5c:e2:8d:94:5f: 53:9f:7c:93:f4:7e:bf:27:8b:87:df:b4:4d:05:13: 66:2b:19:10:c0:1c:1b:7c:31:e0:5d:db:83:6c:d3: 5c:27:17:63:b9:c4:85:d6:50:00:1b:d6:e2:24:29: 12:11:8f:bc:62:7e:23:ba:9e:fd:4b:30:6d:87:4b: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:6D:5E:96:A3:22:35:52:49:CA:D4:A6:7B:17:04:8F:FA:BF:C5 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:af:1c:34:db:de:c3:e4:4b:4b:c5:9c:04:52:ee:72:8e:d2: b6:a9:e7:4d:9f:a1:0b:e6:a1:71:dc:da:ac:87:cb:ad:3a:e5: 5b:15:8e:64:61:83:83:b3:2c:e4:3e:06:84:d7:e3:12:01:5b: e8:21:6a:2d:8b:84:7d:21:2d:3c:7f:ce:91:42:ee:be:a7:78: 79:c6:e3:f8:0d:36:a2:2b:21:3e:63:e2:81:f0:00:6d:01:b5: a8:af:20:5f:41:99:bf:60:d6:62:6b:61:ef:aa:4b:00:dd:e7: 53:b3:c1:fa:bf:ca:40:dc:4f:d3:2c:5b:b0:d4:a7:13:fc:46: 51:c5:6d:fa:1b:df:88:7f:cb:96:64:b7:5b:64:c4:83:b6:23: 31:21:84:d0:8d:4c:98:29:c9:4a:3a:8c:2c:35:8c:e5:f3:90: d1:af:44:f3:31:54:ee:ec:cf:8b:77:12:08:1e:17:04:2d:cb: 98:a9:ec:4e:bd:19:09:67:e7:96:25:21:95:7b:72:95:69:5a: 2c:25:33:84:0e:9f:ba:53:73:1f:69:36:7f:87:f9:43:4d:13: 59:d7:b1:6e:83:94:2c:cc:1d:75:6d:71:81:ed:97:63:3c:c8: 59:dc:2f:5f:3b:1c:eb:c4:8c:bf:e3:73:64:ae:5e:97:c4:b6: 55:c7:20:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjYwNDE2MjAxNzAzWhcNMjYwNDIzMjAxNzAzWjAYMRYwFAYD VQQDEw02OWUxNDNjMC04ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77gxHbvkPLelpU/blUFQY3Wcx3SsvYT9sYmpQeQsgdtTeVyoTUhwnzaoh8FJ duziX0W7Urgd+MKs0bERiA1Wm8aXT+oIsi+1YxSB4VnFdiz0fag4ZIK2i0LS4wUy hNGDQHWCc8DafiVCJRXyBrLalqqhkirVhz1k2ZcbCD8Aq9KxCxPLKI7IN+si2Hdo vzpa9YGrbigxXHivLezZcabtGxaNM7uJdbUaM0DR940FvUjQdpgC+OkYOM2tqlZA XOKNlF9Tn3yT9H6/J4uH37RNBRNmKxkQwBwbfDHgXduDbNNcJxdjucSF1lAAG9bi JCkSEY+8Yn4jup79SzBth0tTLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMcbV6W oyI1UknK1KZ7FwSP+r/FMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS68cNNvew+RLS8WcBFLuco7StqnnTZ+hC+ahcdzarIfLrTrlWxWOZGGDg7Ms 5D4GhNfjEgFb6CFqLYuEfSEtPH/OkULuvqd4ecbj+A02oishPmPigfAAbQG1qK8g X0GZv2DWYmth76pLAN3nU7PB+r/KQNxP0yxbsNSnE/xGUcVt+hvfiH/LlmS3W2TE g7YjMSGE0I1MmCnJSjqMLDWM5fOQ0a9E8zFU7uzPi3cSCB4XBC3LmKnsTr0ZCWfn liUhlXtylWlaLCUzhA6fulNzH2k2f4f5Q00TWdexboOULMwddW1xge2XYzzIWdwv Xzsc68SMv+NzZK5el8S2Vccg5A== -----END CERTIFICATE-----Generated at Fri Apr 17 11:09:44 2026 by rpki-client