$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft File: 74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json) Hash identifier: 0NC0NT6uHp/wMr8uVrz+44iHeb3ty6H1lTRwer7RRQg= Subject key identifier: DF:15:44:3F:B3:D9:62:BF:2B:EF:F7:BB:75:8C:BF:0F:D8:D7:75:0E Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 Certificate issuer: /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft Manifest number: 48 Signing time: Sun 19 Apr 2026 07:57:01 +0000 Manifest this update: Sun 19 Apr 2026 07:57:01 +0000 Manifest next update: Sun 26 Apr 2026 07:57:01 +0000 Files and hashes: 1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: Z68PoBR90oaYWC6hT7pyI96+iRSv0igrTfKr7j+5oBc=) 2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6 Validity Not Before: Apr 19 07:57:01 2026 GMT Not After : Apr 26 07:57:01 2026 GMT Subject: CN=69e48acd-240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e5:4a:32:8c:d8:ea:75:1c:9c:e0:f7:c2:89: ac:a0:01:78:1e:2d:a0:6a:d0:34:ad:44:33:89:e0: 53:cf:6f:0b:3c:4a:a8:e7:88:2b:b3:a0:62:d1:51: c0:01:08:4d:8a:37:48:a5:28:45:38:e6:c6:92:93: ae:95:55:00:37:28:7a:3c:f3:38:0b:09:ac:f0:39: 4f:aa:87:c7:ff:a0:17:70:79:71:53:07:93:ed:7f: 93:32:eb:50:bb:20:ae:d0:15:31:52:22:43:0a:33: c1:f4:b4:a3:f4:ab:a4:82:90:30:dc:1b:16:86:db: ba:d9:e9:0a:2c:0c:80:0e:7a:e4:67:a0:fc:e5:3d: ea:d5:e2:7d:ff:25:ef:57:bd:50:c0:16:9b:77:4b: 19:1a:fe:0f:3a:61:e6:f2:b7:25:e0:bf:8b:b9:4b: bc:52:de:6e:57:6e:82:6d:d3:c6:2e:0a:be:70:7b: 44:aa:8d:a6:93:62:a1:d6:14:62:bb:ee:c9:df:72: 1d:c4:d0:42:33:c8:20:ed:9c:fb:d0:ea:c7:20:b0: 3e:a3:c1:16:4d:cc:58:dd:5d:4a:34:8e:3c:b3:cf: 74:6c:64:bf:67:db:eb:c1:34:2f:81:b6:d0:57:99: a0:1b:54:b8:36:db:c1:9e:6d:08:bd:62:c3:ae:e3: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:44:3F:B3:D9:62:BF:2B:EF:F7:BB:75:8C:BF:0F:D8:D7:75:0E X509v3 Authority Key Identifier: keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:43:30:30:7c:75:6b:89:ad:ef:a7:22:0e:a3:8a:e4:76:bc: a5:30:22:25:5c:7b:1a:d3:f3:50:92:ab:92:4a:7f:58:cb:9a: 4e:c7:27:39:41:11:f0:87:51:ab:f1:c5:f0:3a:d5:46:29:8e: 45:01:1b:c1:44:75:eb:3d:f8:a5:af:ab:95:09:db:02:0a:6f: 8f:10:5a:20:70:9a:45:67:c9:f1:66:6f:49:09:f6:00:3c:06: 4c:d2:bf:1e:e1:a1:32:e0:38:a1:05:a8:09:ff:05:c7:53:60: dc:fb:13:f4:2f:fc:f9:aa:00:55:8d:bd:52:89:95:84:dd:6b: 1f:1c:d1:c0:cc:9e:9d:df:11:28:bb:94:2b:1f:09:c2:89:17: ed:cd:68:b6:1c:7d:46:3a:99:30:c9:ab:fb:09:5f:32:4c:a3: a1:50:9e:d2:15:1b:56:de:df:83:06:65:9b:c4:33:58:99:2b: 3b:bb:25:a4:e3:d4:72:db:68:a1:7d:ab:7d:cd:d7:dc:be:36: 26:20:c7:d4:b8:10:e9:4c:1c:1f:1d:43:96:97:ef:f7:54:72: 13:42:92:fc:ed:62:dc:ed:c4:31:5d:37:ed:ac:1e:e4:c6:58: 77:42:ae:12:77:d8:13:79:05:4a:8e:da:eb:5f:85:87:a9:f3: ec:c7:ae:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUJBQTExMC8GA1UEBRMoRUY4Qzc3QzgxN0VEREQzRkRDQzY2QjYzNTJENkVBNzhE NzJDNUFDNjAeFw0yNjA0MTkwNzU3MDFaFw0yNjA0MjYwNzU3MDFaMBgxFjAUBgNV BAMTDTY5ZTQ4YWNkLTI0MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe5UoyjNjqdRyc4PfCiaygAXgeLaBq0DStRDOJ4FPPbws8SqjniCuzoGLRUcAB CE2KN0ilKEU45saSk66VVQA3KHo88zgLCazwOU+qh8f/oBdweXFTB5Ptf5My61C7 IK7QFTFSIkMKM8H0tKP0q6SCkDDcGxaG27rZ6QosDIAOeuRnoPzlPerV4n3/Je9X vVDAFpt3Sxka/g86YebytyXgv4u5S7xS3m5XboJt08YuCr5we0SqjaaTYqHWFGK7 7snfch3E0EIzyCDtnPvQ6scgsD6jwRZNzFjdXUo0jjyzz3RsZL9n2+vBNC+BttBX maAbVLg228GebQi9YsOu4/OXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3xVEP7PZ Yr8r7/e7dYy/D9jXdQ4wHwYDVR0jBBgwFoAU74x3yBft3T/cxmtjUtbqeNcsWsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQkFBLzQyMEMwRjZFRDE5 RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0M1RfY3htdGpVdGJxZU5jc1dz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNzR4M3lCZnQzVF9jeG10alV0YnFlTmNzV3NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QkFBLzQyMEMwRjZFRDE5RDExRjA4MzgxNDE3MEM0RjlBRTAyLzc0eDN5QmZ0M1Rf Y3htdGpVdGJxZU5jc1dzWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwQzAwfHVria3vpyIOo4rkdrylMCIlXHsa0/NQkquSSn9Yy5pOxyc5QRHwh1Gr 8cXwOtVGKY5FARvBRHXrPfilr6uVCdsCCm+PEFogcJpFZ8nxZm9JCfYAPAZM0r8e 4aEy4DihBagJ/wXHU2Dc+xP0L/z5qgBVjb1SiZWE3WsfHNHAzJ6d3xEou5QrHwnC iRftzWi2HH1GOpkwyav7CV8yTKOhUJ7SFRtW3t+DBmWbxDNYmSs7uyWk49Ry22ih fat9zdfcvjYmIMfUuBDpTBwfHUOWl+/3VHITQpL87WLc7cQxXTftrB7kxlh3Qq4S d9gTeQVKjtrrX4WHqfPsx65m -----END CERTIFICATE-----Generated at Sun Apr 19 12:51:32 2026 by rpki-client