$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: PUKj2K06SgxCxFXfAmUEfP5/XsTJ7lZuK5LNTKTo3Yc= Subject key identifier: B5:7A:3A:D5:56:7D:39:CB:6F:F4:52:82:D2:A8:55:18:48:A7:17:76 Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 04BD Signing time: Thu 16 Apr 2026 23:48:21 +0000 Manifest this update: Thu 16 Apr 2026 23:48:21 +0000 Manifest next update: Thu 23 Apr 2026 23:48:21 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: OxiJcRgTCKazpkrMC+R5st57LGdRSs75PhX9g0r8R5Y=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: akFdIS8T4ygGEH19KrreAopTx3AYoRm8050s/UPNIrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Apr 16 23:48:21 2026 GMT Not After : Apr 23 23:48:21 2026 GMT Subject: CN=69e17545-0208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:7d:91:a3:d3:fd:95:bc:a2:65:1b:ba:2a: 34:88:a8:15:8e:b3:60:55:03:d2:29:07:85:70:0f: 34:70:da:8f:2a:e6:9a:e0:3c:a4:ea:bd:a6:c7:9d: fa:1d:4b:a3:66:b5:cb:9d:d7:61:6e:40:31:37:16: b3:97:c9:74:2e:8f:38:e6:44:71:eb:21:df:48:f5: 5d:2f:7a:6c:be:8c:e4:e4:af:ec:82:52:cb:09:d5: 06:e9:4e:64:bd:2f:fc:d2:4b:f0:9c:98:c8:00:62: ca:a0:17:2d:60:26:50:18:cb:13:34:de:03:d5:4f: d9:63:5f:26:6b:ec:6e:51:18:51:27:30:89:32:85: c7:07:2a:a0:8e:35:41:8d:ff:96:45:cf:f6:a2:3f: 5d:82:5e:f2:1a:87:49:ae:1c:24:c1:14:da:be:dc: 59:46:c3:d7:4c:5f:44:c1:f6:6e:05:25:80:1c:d0: bc:0b:0e:19:de:c7:3c:22:0a:a9:35:e5:d7:81:35: e2:b0:e6:20:de:bd:94:fa:a9:5d:53:2c:5c:40:c4: e2:92:d4:6c:82:19:0f:1e:78:74:83:d5:59:12:69: 8b:db:fe:a0:c7:7e:eb:71:6a:1f:3f:c1:02:e8:db: 91:ef:61:4d:50:3c:67:b9:fe:3e:15:67:f0:13:9d: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7A:3A:D5:56:7D:39:CB:6F:F4:52:82:D2:A8:55:18:48:A7:17:76 X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:cc:c3:77:3e:42:df:23:a4:c8:ca:ea:40:00:a7:0b:c9: 64:c6:e3:a9:9f:96:12:5a:33:64:31:2f:32:2f:f0:77:66:73: 7a:57:2e:f6:be:da:d4:1d:28:0e:5b:a4:9c:e4:e7:7b:85:27: d8:41:34:ca:07:24:5b:b8:fd:88:a4:7c:5f:df:d6:ed:d6:dd: 25:fe:37:b4:45:33:5c:c2:ae:c0:aa:af:5c:15:d5:89:cb:7f: 1e:6b:6c:6d:19:78:fa:c8:99:4b:2c:9a:17:73:7e:5f:2f:83: 0f:d1:49:29:34:fd:f4:8c:56:c4:fd:83:00:fc:4b:22:cc:09: 13:4b:36:81:fc:4a:30:b1:0e:82:16:71:ac:3b:b5:d1:0e:fd: cf:bb:ab:d0:20:df:7f:a1:c1:24:95:01:81:65:ea:f8:c3:38: 3d:62:06:b2:0b:cb:6b:36:d6:4b:53:0e:76:f3:2e:ad:19:78: 54:f5:aa:e9:b3:43:60:00:ab:db:81:c2:62:74:8d:3f:51:7d: 8f:3a:a6:91:60:ea:09:c0:7f:d9:cb:ab:ee:2e:a9:eb:1a:d3: 3a:ae:73:e8:20:9b:d6:c6:2a:d7:fc:b7:b9:bc:fc:9d:75:ca: 12:d3:24:8a:b7:84:d8:a2:f5:a6:87:2b:11:5c:d1:8a:2d:11: ad:10:68:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjYwNDE2MjM0ODIxWhcNMjYwNDIzMjM0ODIxWjAYMRYwFAYD VQQDEw02OWUxNzU0NS0wMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSJ9kaPT/ZW8omUbuio0iKgVjrNgVQPSKQeFcA80cNqPKuaa4Dyk6r2mx536 HUujZrXLnddhbkAxNxazl8l0Lo845kRx6yHfSPVdL3psvozk5K/sglLLCdUG6U5k vS/80kvwnJjIAGLKoBctYCZQGMsTNN4D1U/ZY18ma+xuURhRJzCJMoXHByqgjjVB jf+WRc/2oj9dgl7yGodJrhwkwRTavtxZRsPXTF9EwfZuBSWAHNC8Cw4Z3sc8Igqp NeXXgTXisOYg3r2U+qldUyxcQMTiktRsghkPHnh0g9VZEmmL2/6gx37rcWofP8EC 6NuR72FNUDxnuf4+FWfwE53YqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLV6OtVW fTnLb/RSgtKoVRhIpxd2MB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALeLMw3c+Qt8jpMjK6kAApwvJZMbjqZ+WElozZDEvMi/wd2Zzelcu9r7a1B0o DluknOTne4Un2EE0ygckW7j9iKR8X9/W7dbdJf43tEUzXMKuwKqvXBXVict/Hmts bRl4+siZSyyaF3N+Xy+DD9FJKTT99IxWxP2DAPxLIswJE0s2gfxKMLEOghZxrDu1 0Q79z7ur0CDff6HBJJUBgWXq+MM4PWIGsgvLazbWS1MOdvMurRl4VPWq6bNDYACr 24HCYnSNP1F9jzqmkWDqCcB/2cur7i6p6xrTOq5z6CCb1sYq1/y3ubz8nXXKEtMk ireE2KL1pocrEVzRii0RrRBo+w== -----END CERTIFICATE-----Generated at Fri Apr 17 13:04:06 2026 by rpki-client