$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: mEJk127UKHbV+vAwH2IiKkGt3ABTdA6SuOvBgYhFAhA= Subject key identifier: AD:F4:7F:4C:19:88:D9:1B:A8:40:72:EC:9C:6E:A9:4B:C5:0A:43:13 Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0F89 Signing time: Thu 16 Apr 2026 17:39:49 +0000 Manifest this update: Thu 16 Apr 2026 17:39:49 +0000 Manifest next update: Thu 23 Apr 2026 17:39:49 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: opNpX7d65jdG1xIRhGUxyw8p7bEwtj2+MxV+kfybbxg=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Apr 16 17:39:49 2026 GMT Not After : Apr 23 17:39:49 2026 GMT Subject: CN=69e11ee5-07cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:3b:3b:7c:34:57:b7:0e:2e:d6:79:c3:10: 97:19:c4:5d:a9:57:d2:6a:24:8f:0b:45:b0:8a:a5: b6:9e:4b:66:35:93:05:f0:57:47:e9:70:f0:eb:54: c8:0d:2c:4f:56:d3:83:f7:b2:82:72:a5:bf:63:73: 8e:6d:c0:29:18:07:26:a5:9a:65:00:67:04:40:93: 0d:5b:61:9c:13:bd:6a:68:3a:14:62:1a:d8:c7:04: 1f:c2:bd:cd:82:16:fc:2f:b2:1d:71:96:4f:da:b1: 10:a5:60:31:fe:d9:a5:9a:5e:79:fc:63:b2:e6:e8: 93:f9:78:bc:d5:65:5e:eb:15:bc:e9:d2:8a:2c:b3: 86:be:22:c6:b0:06:5a:67:f2:94:e9:6e:ce:0a:33: 9a:f3:e0:d4:69:d7:ee:92:b6:26:fe:2e:0a:2f:87: 55:77:87:b4:32:26:5d:aa:1d:8d:71:b2:9a:9a:c4: 42:1a:a1:65:27:f2:02:29:41:95:da:13:50:59:5e: d0:58:9d:b6:6c:6f:1e:71:67:f0:d4:b1:e7:aa:5e: 18:2d:ba:4c:b3:f0:9e:a2:1d:27:78:89:b6:eb:4a: a4:ac:4d:6e:2f:07:a0:7a:e8:cf:62:13:5a:8b:e7: 49:ba:16:67:dd:da:d3:88:d0:c3:65:11:0d:a3:aa: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:7F:4C:19:88:D9:1B:A8:40:72:EC:9C:6E:A9:4B:C5:0A:43:13 X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:82:68:e6:67:fb:ba:81:4f:0c:62:c9:5b:6b:48:ec:6f:00: ea:49:11:7b:e3:3b:4a:21:73:da:a6:a9:2e:45:35:e7:26:08: b6:78:ff:16:aa:73:b3:03:74:7d:5c:68:24:cc:cc:c1:c2:51: 3c:31:18:c1:bf:75:0c:bd:f2:a3:80:97:20:a2:59:9a:a3:c2: 4e:71:e1:af:3b:f9:c7:20:8f:b0:3e:6c:94:91:30:37:89:dd: c2:46:1a:15:b0:17:cb:7a:76:10:fe:44:5d:45:10:08:b7:bc: d0:62:e7:37:88:43:fe:8d:e0:00:60:3f:3d:76:cd:0d:76:40: 81:07:7f:fb:a9:2e:63:aa:1d:b0:cf:c7:2b:1e:ec:ea:5c:4d: f9:d1:f4:16:d3:ce:06:4b:6a:0b:c2:9a:8b:d9:57:7b:01:3d: bd:c6:ee:c8:5a:96:c0:1a:33:4a:9c:71:f0:5d:6d:1b:18:69: 3f:f7:2d:33:0c:f0:2d:42:28:fb:08:4d:a1:f7:97:a8:91:c0: 21:f0:16:d1:20:9e:c3:b0:59:30:74:cf:e2:77:b3:27:d5:6e: 21:22:ed:9d:58:5c:19:2c:95:9d:01:a5:e3:b0:f5:51:02:52: c2:67:fd:02:73:83:6f:f2:88:ef:4f:6c:dd:ec:41:05:24:fa: 9a:d1:a9:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF OTYwNkJGOEYwHhcNMjYwNDE2MTczOTQ5WhcNMjYwNDIzMTczOTQ5WjAYMRYwFAYD VQQDEw02OWUxMWVlNS0wN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ds7O3w0V7cOLtZ5wxCXGcRdqVfSaiSPC0WwiqW2nktmNZMF8FdH6XDw61TI DSxPVtOD97KCcqW/Y3OObcApGAcmpZplAGcEQJMNW2GcE71qaDoUYhrYxwQfwr3N ghb8L7IdcZZP2rEQpWAx/tmlml55/GOy5uiT+Xi81WVe6xW86dKKLLOGviLGsAZa Z/KU6W7OCjOa8+DUadfukrYm/i4KL4dVd4e0MiZdqh2NcbKamsRCGqFlJ/ICKUGV 2hNQWV7QWJ22bG8ecWfw1LHnql4YLbpMs/Ceoh0neIm260qkrE1uLwegeujPYhNa i+dJuhZn3drTiNDDZRENo6qjHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK30f0wZ iNkbqEBy7JxuqUvFCkMTMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2 NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu MHdidU85SHF4MGpwWUd2NDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVoJo5mf7uoFPDGLJW2tI7G8A6kkRe+M7SiFz2qapLkU15yYItnj/FqpzswN0 fVxoJMzMwcJRPDEYwb91DL3yo4CXIKJZmqPCTnHhrzv5xyCPsD5slJEwN4ndwkYa FbAXy3p2EP5EXUUQCLe80GLnN4hD/o3gAGA/PXbNDXZAgQd/+6kuY6odsM/HKx7s 6lxN+dH0FtPOBktqC8Kai9lXewE9vcbuyFqWwBozSpxx8F1tGxhpP/ctMwzwLUIo +whNofeXqJHAIfAW0SCew7BZMHTP4nezJ9VuISLtnVhcGSyVnQGl47D1UQJSwmf9 AnODb/KI709s3exBBST6mtGpzA== -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:09 2026 by rpki-client