$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: LK+s4HJxb+Wbe+nTiHbYJLzu2JqB+0K8MDe7HkBLszw= Subject key identifier: 3A:EA:FF:9C:44:0F:83:CA:B0:9C:56:B1:D8:07:F4:26:AF:F7:A1:A9 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 03D7 Signing time: Fri 17 Apr 2026 00:28:40 +0000 Manifest this update: Fri 17 Apr 2026 00:28:40 +0000 Manifest next update: Fri 24 Apr 2026 00:28:40 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: 9qxu2nM1A+Ar6IbAIg1EhixBvpY2+/5G3RqNpz5nRiE=) 2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: aYot4qw3P8YllWeiZniDWXUCdYeGzmeGo07W9mBLGtQ=) 3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: 0a9pPFK9l1fog9k4rdhxyffTfCfNNylKzOV1up6yd0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Validity Not Before: Apr 17 00:28:40 2026 GMT Not After : Apr 24 00:28:40 2026 GMT Subject: CN=69e17eb8-7b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:01:d2:53:9c:0b:aa:ec:14:17:53:f5:63: 73:a9:ae:0a:31:71:00:43:18:21:d3:9a:19:c3:5c: eb:0c:98:0b:2b:05:bc:3d:e4:f0:7e:b1:24:36:6d: 65:f5:ab:cb:28:d0:6e:e3:2c:1e:a3:a5:8a:8a:7e: 78:9e:3d:b6:cd:fc:03:6f:ec:7e:b4:a2:24:d7:81: 42:34:d5:40:76:81:f6:f6:32:87:31:d2:f6:68:28: 23:ef:16:bc:52:00:20:6a:43:28:1b:4d:27:d5:7b: b7:11:7d:0a:2a:ba:3d:91:ec:dc:f1:ac:2f:06:cb: ef:f2:5c:23:82:51:f9:13:11:91:1b:88:4b:9f:90: b1:89:1f:91:d2:0b:b6:95:c2:6a:d2:bd:7e:b6:6c: f2:e1:d0:f7:73:17:16:fb:0f:d6:f4:5e:1c:ae:3f: 1b:e1:a3:74:bf:19:e2:e8:92:c8:33:b4:ed:6f:14: b7:6d:e0:ca:15:be:16:0d:f9:81:ff:ea:d5:19:02: 11:fe:dc:ab:be:32:b3:82:50:df:92:aa:4f:c4:28: 8c:a6:ad:44:23:48:3c:58:9e:ea:3f:f1:73:af:f6: ad:f3:e5:45:29:61:43:b5:ce:fc:9e:96:0b:8e:cc: 54:2b:98:6e:38:6b:33:c4:92:04:68:6c:ff:ac:e8: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:FF:9C:44:0F:83:CA:B0:9C:56:B1:D8:07:F4:26:AF:F7:A1:A9 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ae:8c:59:14:02:96:02:b5:3d:20:af:6b:b1:d7:aa:e6:a5: 48:a9:8b:5d:fa:5a:1a:b3:4f:87:90:50:86:34:c1:8c:c9:0d: b5:fb:94:7a:37:07:ef:33:ae:b2:e4:34:98:15:f1:d3:8e:b6: 25:da:51:34:73:d0:cc:8c:0c:dd:4c:e4:8a:5d:23:f4:b6:2b: ba:c0:96:7b:e6:55:6b:ec:6d:78:5b:f8:91:d5:dc:7a:a7:7f: b4:d2:49:ab:19:54:f3:1c:58:dc:c2:2d:5d:ac:d6:7f:c3:24: f9:c6:29:e5:83:1a:ba:94:18:b0:83:7e:5a:f0:ab:63:15:0e: 95:31:58:0a:9e:a1:b3:6a:91:33:30:c9:4e:9e:9f:aa:98:3c: 23:15:5e:38:0d:56:ff:eb:72:99:37:b4:4a:67:b3:73:0c:13: ba:03:c2:10:4d:62:b8:cf:88:56:3b:69:36:4e:10:95:62:c7: 13:a3:f3:b4:d4:a1:19:ef:c9:3a:54:6c:ae:87:4c:63:f2:ef: a9:98:24:45:b2:8f:95:f7:99:f9:4e:f2:1c:71:b5:82:e7:50: 44:a6:4c:3e:dd:9f:37:0a:9b:28:aa:cb:2a:0e:bb:6d:fb:6d: cd:0a:93:a3:0c:54:49:60:a6:9b:2c:ed:df:dc:ff:10:26:9e: c7:32:d3:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjYwNDE3MDAyODQwWhcNMjYwNDI0MDAyODQwWjAYMRYwFAYD VQQDEw02OWUxN2ViOC03YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu90B0lOcC6rsFBdT9WNzqa4KMXEAQxgh05oZw1zrDJgLKwW8PeTwfrEkNm1l 9avLKNBu4yweo6WKin54nj22zfwDb+x+tKIk14FCNNVAdoH29jKHMdL2aCgj7xa8 UgAgakMoG00n1Xu3EX0KKro9kezc8awvBsvv8lwjglH5ExGRG4hLn5CxiR+R0gu2 lcJq0r1+tmzy4dD3cxcW+w/W9F4crj8b4aN0vxni6JLIM7TtbxS3beDKFb4WDfmB /+rVGQIR/tyrvjKzglDfkqpPxCiMpq1EI0g8WJ7qP/Fzr/at8+VFKWFDtc78npYL jsxUK5huOGszxJIEaGz/rOjHVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrq/5xE D4PKsJxWsdgH9Cav96GpMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq66MWRQClgK1PSCva7HXqualSKmLXfpaGrNPh5BQhjTBjMkNtfuUejcH7zOu suQ0mBXx0462JdpRNHPQzIwM3Uzkil0j9LYrusCWe+ZVa+xteFv4kdXceqd/tNJJ qxlU8xxY3MItXazWf8Mk+cYp5YMaupQYsIN+WvCrYxUOlTFYCp6hs2qRMzDJTp6f qpg8IxVeOA1W/+tymTe0SmezcwwTugPCEE1iuM+IVjtpNk4QlWLHE6PztNShGe/J OlRsrodMY/LvqZgkRbKPlfeZ+U7yHHG1gudQRKZMPt2fNwqbKKrLKg67bfttzQqT owxUSWCmmyzt39z/ECaexzLTVA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:13 2026 by rpki-client