$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: q8sTNGN17uJTwgX+K7osdXC3UrWtKdHY3n5Np8cd79Q= Subject key identifier: EA:2F:61:47:72:BF:AB:DC:C2:7A:9F:00:0A:A3:92:6F:F5:3F:BD:21 Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0B5F Signing time: Thu 16 Apr 2026 19:06:36 +0000 Manifest this update: Thu 16 Apr 2026 19:06:35 +0000 Manifest next update: Thu 23 Apr 2026 19:06:35 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: QJ63bzX42b/OIGipLziUlNJ+LNjxm0fDnpUnGJdAs6c=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: RExF8CfPyMc1mjC/DYZwNJORmf6sh9d0s+P6jynoX8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Apr 16 19:06:35 2026 GMT Not After : Apr 23 19:06:35 2026 GMT Subject: CN=69e1333c-c66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:01:99:da:fd:3e:0e:e3:04:74:a3:fa:fe:4a: 58:f7:69:1d:8b:08:a7:11:b2:14:58:93:0a:25:28: 11:2a:2c:b9:ae:e2:32:f7:2f:ff:db:df:8b:2b:b2: 26:85:bc:93:9d:fd:43:93:2e:6e:6d:92:f9:b8:d1: 53:93:ba:77:8f:07:24:91:d4:7f:9f:74:fd:d1:f7: d6:20:31:22:23:35:4d:f0:f9:47:cc:01:c1:f4:d0: aa:85:36:c5:01:ff:6b:34:a7:0d:79:8c:b7:8c:ab: 88:a8:7c:05:7f:a6:e4:56:c4:ff:0e:1b:1a:85:0d: 0c:2e:7b:bc:3f:0d:1b:1e:20:61:32:9d:a8:2d:cb: 54:04:6b:de:d2:3c:10:dc:44:e4:4a:8a:76:05:6a: d9:81:83:60:43:14:00:9e:04:3b:7e:14:99:10:1c: a3:f6:3b:c2:38:e5:74:f9:9f:d9:35:9c:ac:34:dd: e0:6e:7f:2e:11:68:03:90:7a:fc:ae:fd:23:73:01: 61:fe:a0:38:8e:34:06:5f:0c:48:33:8a:18:b8:41: 9a:9c:23:dc:ed:ab:db:d7:20:5b:dc:ca:1b:18:b3: c9:f1:0e:07:92:4f:9a:e4:dc:05:d6:b7:b4:3b:00: 43:d5:17:04:40:df:0c:d1:81:d4:50:7c:21:61:ee: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2F:61:47:72:BF:AB:DC:C2:7A:9F:00:0A:A3:92:6F:F5:3F:BD:21 X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d5:79:04:35:87:25:79:35:eb:b7:7c:d3:51:05:1b:a0:74: 0d:f6:0c:7c:b7:c5:b0:fd:df:8c:8b:00:28:46:6f:ae:1b:88: 42:6e:2d:83:03:ff:f4:0a:d5:14:ee:c7:8a:e3:d5:79:ab:b0: f2:28:6d:4f:a5:cc:fd:75:e3:99:b3:04:9d:10:d9:3e:84:fc: 82:8d:73:0c:d7:0f:6c:39:5e:59:25:31:57:3b:5a:09:85:77: 2d:97:41:28:06:df:c9:ae:dc:79:08:ff:7c:5d:60:9b:6b:59: c3:61:3a:8e:c5:51:88:fb:d6:39:e9:86:e6:70:97:85:11:f1: 77:12:8c:81:8e:0c:e5:25:ff:d6:49:1b:1f:7f:b5:5c:9b:89: 51:cc:80:e6:05:99:43:68:2e:26:69:f8:af:79:7f:cd:0e:d1: 85:b6:1d:f4:44:9d:71:7a:87:8c:a1:fd:e9:df:11:a5:91:49: dc:c6:fc:93:59:37:d4:dd:84:a9:8e:f5:6b:91:6d:c8:8d:7f: bf:5d:a1:16:af:9c:75:ff:f4:ec:f2:e0:df:b0:bc:35:0d:b7: cf:81:35:cc:f4:29:e7:bd:e0:c0:d9:d5:ba:e3:9e:08:f3:46: f1:15:6e:77:ac:3c:7b:92:92:6f:f4:64:df:f0:5b:55:8c:c9: 33:c9:32:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjYwNDE2MTkwNjM1WhcNMjYwNDIzMTkwNjM1WjAYMRYwFAYD VQQDEw02OWUxMzMzYy1jNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AGZ2v0+DuMEdKP6/kpY92kdiwinEbIUWJMKJSgRKiy5ruIy9y//29+LK7Im hbyTnf1Dky5ubZL5uNFTk7p3jwckkdR/n3T90ffWIDEiIzVN8PlHzAHB9NCqhTbF Af9rNKcNeYy3jKuIqHwFf6bkVsT/DhsahQ0MLnu8Pw0bHiBhMp2oLctUBGve0jwQ 3ETkSop2BWrZgYNgQxQAngQ7fhSZEByj9jvCOOV0+Z/ZNZysNN3gbn8uEWgDkHr8 rv0jcwFh/qA4jjQGXwxIM4oYuEGanCPc7avb1yBb3MobGLPJ8Q4Hkk+a5NwF1re0 OwBD1RcEQN8M0YHUUHwhYe6FMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOovYUdy v6vcwnqfAAqjkm/1P70hMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW9V5BDWHJXk167d801EFG6B0DfYMfLfFsP3fjIsAKEZvrhuIQm4tgwP/9ArV FO7HiuPVeauw8ihtT6XM/XXjmbMEnRDZPoT8go1zDNcPbDleWSUxVztaCYV3LZdB KAbfya7ceQj/fF1gm2tZw2E6jsVRiPvWOemG5nCXhRHxdxKMgY4M5SX/1kkbH3+1 XJuJUcyA5gWZQ2guJmn4r3l/zQ7RhbYd9ESdcXqHjKH96d8RpZFJ3Mb8k1k31N2E qY71a5FtyI1/v12hFq+cdf/07PLg37C8NQ23z4E1zPQp573gwNnVuuOeCPNG8RVu d6w8e5KSb/Rk3/BbVYzJM8kyYA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:49:19 2026 by rpki-client