$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: lpu6cIoFyxkfyY+NhqnbLeRNEgm7hROjUnpuvgudlSs= Subject key identifier: 3D:AB:7A:A2:79:36:3A:39:4B:EA:2E:EE:EB:0B:DF:CF:90:DA:DE:2D Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 08BB Signing time: Thu 16 Apr 2026 20:54:08 +0000 Manifest this update: Thu 16 Apr 2026 20:54:08 +0000 Manifest next update: Thu 23 Apr 2026 20:54:08 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: IdgKDj7iu/ZSlBibQoi2UINT5MBnVcaX4jHXyrJ4qOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Apr 16 20:54:08 2026 GMT Not After : Apr 23 20:54:08 2026 GMT Subject: CN=69e14c70-6795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:fe:14:a1:e9:e1:ee:a6:44:48:4d:ff:f3: 78:ff:fe:eb:69:aa:ce:b5:9d:b6:0d:d5:bd:d3:e7: 5a:3d:4e:c4:9b:c3:21:24:b9:88:95:96:a8:64:85: a8:63:a8:a1:9b:70:a0:63:0d:5d:55:5a:e3:f3:5b: 42:9b:c0:f2:c2:aa:85:47:55:21:5a:cd:b7:ce:a0: 24:71:ea:77:e1:4f:b2:5e:a7:1b:12:7a:de:fa:72: 37:12:bd:80:d4:72:62:3d:64:c4:9c:6b:0d:5f:7e: 0e:b4:aa:6e:49:14:3b:5f:5f:29:35:1c:50:1b:b0: 22:41:00:b9:82:74:05:df:9e:a5:4c:9d:42:d4:78: 3c:8d:59:bd:ef:ef:b4:e5:51:8d:5e:7b:75:77:03: 30:09:42:c0:5b:a8:70:ff:d0:34:76:0c:d8:29:96: db:d0:93:cd:76:43:df:a6:80:86:8d:7d:b8:69:fa: 0d:ed:0f:17:d4:b7:a8:55:47:1b:bb:1e:a7:5d:aa: b7:14:8a:43:87:a6:b9:86:2b:f9:8c:1f:ac:b1:e1: 25:f2:64:23:a3:ad:96:2b:70:f1:43:af:85:40:13: 30:0d:66:1b:a1:9f:2d:4f:96:ce:41:02:07:de:df: 09:77:cc:78:4a:ee:6b:8f:c5:33:b2:9b:b5:8e:53: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:7A:A2:79:36:3A:39:4B:EA:2E:EE:EB:0B:DF:CF:90:DA:DE:2D X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:56:50:55:fe:6a:a8:e1:76:c9:36:3c:0a:3b:39:6b:37:4f: 0e:ba:aa:8e:42:6d:84:21:44:ae:58:f5:12:98:4f:33:0f:4e: 2c:a7:cc:27:07:4d:c3:7a:af:1a:0f:62:3a:44:c1:f6:15:51: 11:16:f8:1d:fe:a7:fe:c2:8c:e0:f3:ff:93:f2:82:a7:bf:f6: e2:1a:79:56:c9:ae:38:01:bf:d2:85:eb:ce:9e:02:44:0d:fe: d8:ed:24:b3:93:29:54:62:d9:7f:f2:52:28:36:f6:d8:4d:3f: 2b:50:a8:14:3a:57:b7:2e:3e:06:c5:26:fd:50:ff:f4:09:e3: aa:85:c9:4a:92:85:c1:f2:07:c0:cb:4d:40:7c:e1:5d:33:53: 2f:3f:cf:2e:c4:67:4b:e0:0a:8c:6e:1b:4f:dd:8d:fe:e0:c1: 2d:a0:ce:b5:99:f3:95:42:aa:0a:bf:10:0f:94:65:39:80:cb: df:84:19:f2:cb:d8:8b:f9:0c:3a:7d:3e:3f:b0:31:c5:6e:39: 3b:78:9b:8d:5b:ff:b6:d8:5d:2a:39:f0:14:b0:5b:f2:c3:dc: 7c:88:33:41:13:cc:38:56:7b:ab:fb:cb:98:d6:bc:43:b5:d1: a5:2b:b2:6d:28:44:16:75:b8:fd:cf:27:90:a8:59:40:77:82: 7d:89:54:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjYwNDE2MjA1NDA4WhcNMjYwNDIzMjA1NDA4WjAYMRYwFAYD VQQDEw02OWUxNGM3MC02Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfn+FKHp4e6mREhN//N4//7raarOtZ22DdW90+daPU7Em8MhJLmIlZaoZIWo Y6ihm3CgYw1dVVrj81tCm8DywqqFR1UhWs23zqAkcep34U+yXqcbEnre+nI3Er2A 1HJiPWTEnGsNX34OtKpuSRQ7X18pNRxQG7AiQQC5gnQF356lTJ1C1Hg8jVm97++0 5VGNXnt1dwMwCULAW6hw/9A0dgzYKZbb0JPNdkPfpoCGjX24afoN7Q8X1LeoVUcb ux6nXaq3FIpDh6a5hiv5jB+sseEl8mQjo62WK3DxQ6+FQBMwDWYboZ8tT5bOQQIH 3t8Jd8x4Su5rj8Uzspu1jlNcrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2reqJ5 Njo5S+ou7usL38+Q2t4tMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKlZQVf5qqOF2yTY8Cjs5azdPDrqqjkJthCFErlj1EphPMw9OLKfMJwdNw3qv Gg9iOkTB9hVRERb4Hf6n/sKM4PP/k/KCp7/24hp5VsmuOAG/0oXrzp4CRA3+2O0k s5MpVGLZf/JSKDb22E0/K1CoFDpXty4+BsUm/VD/9AnjqoXJSpKFwfIHwMtNQHzh XTNTLz/PLsRnS+AKjG4bT92N/uDBLaDOtZnzlUKqCr8QD5RlOYDL34QZ8svYi/kM On0+P7AxxW45O3ibjVv/tthdKjnwFLBb8sPcfIgzQRPMOFZ7q/vLmNa8Q7XRpSuy bShEFnW4/c8nkKhZQHeCfYlUBA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:15:32 2026 by rpki-client