$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json) Hash identifier: Ij04Kz7YkOGKXJ1JeST8v6VHk4+TFzfPqwb4tSwqB0I= Subject key identifier: B3:29:A1:A4:80:F3:54:56:1C:C1:96:C4:F2:A3:21:49:4E:6A:87:FE Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB Certificate issuer: /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft Manifest number: 20 Signing time: Fri 17 Apr 2026 08:36:36 +0000 Manifest this update: Fri 17 Apr 2026 08:36:36 +0000 Manifest next update: Fri 24 Apr 2026 08:36:36 +0000 Files and hashes: 1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: HYJffxjunvzWjNST9NERQ3apsA6n63Jk5slkLvaUzNw=) 2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB Validity Not Before: Apr 17 08:36:36 2026 GMT Not After : Apr 24 08:36:36 2026 GMT Subject: CN=69e1f114-f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:11:05:7b:5f:b0:48:11:3a:7b:6a:cc:cb: 0d:7f:b3:51:2b:d9:30:c4:7c:49:14:fe:3a:b7:b6: 46:27:a0:a4:34:f5:75:38:2b:03:91:1d:79:f3:dd: 00:d3:97:0a:0e:dd:16:86:11:5c:0d:7e:69:f2:40: 6d:fa:14:93:db:3c:b8:1b:bd:71:e2:b0:7c:0a:61: 1f:1c:8f:ec:89:60:ca:0c:35:34:bd:43:00:40:11: 18:ea:65:61:1f:f9:67:34:26:89:8b:5b:52:fc:9d: 58:25:25:93:92:87:c4:85:46:0e:33:5d:8b:62:de: 78:91:ec:0c:8b:a3:d6:ad:70:01:ae:ed:3b:69:69: a3:51:11:91:1d:3d:df:0e:3e:89:b6:ef:a6:a8:82: 93:22:ff:8e:e8:8c:a4:b0:92:75:18:76:1f:1c:a4: 4d:65:39:5f:61:92:a7:00:07:ed:67:49:57:61:c5: 66:df:f4:0e:51:3e:c8:1c:47:f7:82:c8:74:88:76: b5:e0:ae:d8:97:e3:75:fe:92:f3:9b:4a:c8:ec:9c: 99:d4:15:62:7c:8e:5a:65:1e:a9:67:9a:d9:e9:26: bd:b3:f4:17:77:0d:df:c4:1d:56:4d:cd:13:a9:61: f1:a6:1a:83:ba:0a:f0:a2:ce:16:58:0b:0c:a4:b7: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:29:A1:A4:80:F3:54:56:1C:C1:96:C4:F2:A3:21:49:4E:6A:87:FE X509v3 Authority Key Identifier: keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a6:12:72:4a:f9:09:d1:f6:c4:c4:f7:f0:29:db:91:92:3a: 43:97:8e:0c:e2:0b:6a:94:3a:3d:98:b7:17:82:bf:c1:fd:ec: 88:b4:96:36:6a:44:23:2c:93:41:9d:09:80:05:3a:d7:67:c6: e0:01:11:37:14:53:6e:5f:39:f8:64:bc:72:5d:39:db:2e:d3: 19:a6:5a:e7:d4:61:74:a1:1a:95:a0:6b:ee:03:79:15:9e:86: f5:a1:b7:0f:d0:27:72:d9:a8:af:fb:07:b8:92:43:b3:9e:01: 41:5e:64:63:ec:c2:c0:96:ec:71:bf:0e:8c:45:0a:0c:ef:e3: ae:cc:92:c7:da:a2:23:ec:cd:ac:d0:3a:ae:3a:c2:08:09:c2: 6d:e5:f0:be:28:1c:c8:c5:c7:62:2c:42:fc:75:8f:09:9d:b2: 65:7f:14:82:c0:8a:d5:53:22:7c:d2:30:b3:63:f5:a3:bc:cc: c0:03:1a:26:2b:7b:6f:fb:be:8a:ba:bd:b5:8c:1d:47:91:79: 17:61:ec:f6:eb:0a:40:a2:03:7e:42:1a:4d:a9:f5:c1:c5:dd: ee:17:d3:23:bd:01:c5:1f:0d:49:39:f1:47:ec:b5:02:39:e3: f7:0e:a3:28:8d:f5:d2:c2:39:87:e6:8b:a4:76:88:7d:d9:d5: bf:c2:dc:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE1NzExMC8GA1UEBRMoRUY4MDQyQjQyMUExMDE3ODc1M0FCOTUzOERBMzQzQjg5 ODc4OURCQjAeFw0yNjA0MTcwODM2MzZaFw0yNjA0MjQwODM2MzZaMBgxFjAUBgNV BAMTDTY5ZTFmMTE0LWY0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNRREFe1+wSBE6e2rMyw1/s1Er2TDEfEkU/jq3tkYnoKQ09XU4KwORHXnz3QDT lwoO3RaGEVwNfmnyQG36FJPbPLgbvXHisHwKYR8cj+yJYMoMNTS9QwBAERjqZWEf +Wc0JomLW1L8nVglJZOSh8SFRg4zXYti3niR7AyLo9atcAGu7TtpaaNREZEdPd8O Pom276aogpMi/47ojKSwknUYdh8cpE1lOV9hkqcAB+1nSVdhxWbf9A5RPsgcR/eC yHSIdrXgrtiX43X+kvObSsjsnJnUFWJ8jlplHqlnmtnpJr2z9Bd3Dd/EHVZNzROp YfGmGoO6CvCizhZYCwykt3+TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsymhpIDz VFYcwZbE8qMhSU5qh/4wHwYDVR0jBBgwFoAU74BCtCGhAXh1OrlTjaNDuJh4nbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzBBNzkwQkU0MTE0 MjExRjE5RDM3NjI4RjIxM0Q4QzY3Lzc0QkN0Q0doQVhoMU9ybFRqYU5EdUpoNG5i cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzRCQ3RDR2hBWGgxT3JsVGphTkR1Smg0bmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTU3LzBBNzkwQkU0MTE0MjExRjE5RDM3NjI4RjIxM0Q4QzY3Lzc0QkN0Q0doQVho MU9ybFRqYU5EdUpoNG5icy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCKphJySvkJ0fbExPfwKduRkjpDl44M4gtqlDo9mLcXgr/B/eyItJY2akQjLJNB nQmABTrXZ8bgARE3FFNuXzn4ZLxyXTnbLtMZplrn1GF0oRqVoGvuA3kVnob1obcP 0Cdy2aiv+we4kkOzngFBXmRj7MLAluxxvw6MRQoM7+OuzJLH2qIj7M2s0DquOsII CcJt5fC+KBzIxcdiLEL8dY8JnbJlfxSCwIrVUyJ80jCzY/WjvMzAAxomK3tv+76K ur21jB1HkXkXYez26wpAogN+QhpNqfXBxd3uF9MjvQHFHw1JOfFH7LUCOeP3DqMo jfXSwjmH5oukdoh92dW/wtzz -----END CERTIFICATE-----Generated at Sat Apr 18 03:06:53 2026 by rpki-client