$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: 4djK30TJeWFO8PMWBmkXh0dnlyuB6MLj2q58/BmMILw= Subject key identifier: 3D:B1:E6:19:CA:6D:0B:F7:D4:12:69:60:84:7C:E0:0E:BB:89:63:AF Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 026A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 0250 Signing time: Fri 17 Apr 2026 02:18:20 +0000 Manifest this update: Fri 17 Apr 2026 02:18:19 +0000 Manifest next update: Fri 24 Apr 2026 02:18:19 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: 3KFK31sJ+D3gh0uAG1f/W6HK+ArFhI4y/S3NXpwcocA=) 2: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: rqdiCtjrx/nRHSFBDJET2Hy4bfU3/bkdX125W59d+co=) 3: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: xl+ZGGMMsQzXdRoVvAevwVbibKiAjAP36zHm8LVE2Zw=) 4: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: eUh3+0eNlTLz/GijzP1F9VFF/VuE/2wjuZ3Eqz98/Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Apr 17 02:18:19 2026 GMT Not After : Apr 24 02:18:19 2026 GMT Subject: CN=69e1986b-076d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:91:f5:e4:e0:6c:57:9f:2f:08:95:81:1b: 3a:21:d0:f3:fb:14:5d:d5:f6:d9:f6:06:10:fc:f4: e7:fc:d3:24:02:02:ca:2c:e5:71:de:1b:57:7e:e6: 6d:22:ed:f7:90:67:92:65:5f:87:92:11:fa:81:4d: 79:a9:53:77:fc:3d:b5:59:e1:cc:92:ff:4b:67:b7: 41:ea:f5:b9:81:9f:f0:cc:7a:7b:de:83:73:b9:14: ce:fb:5a:df:ad:c0:ce:0b:00:f0:05:21:c3:67:ee: 47:9a:cd:6f:9b:ee:e2:5f:e2:e9:ad:d1:76:b4:58: c3:5b:2d:d2:4b:1d:3d:4d:63:5c:46:66:92:30:b7: eb:b7:0e:85:c9:67:75:69:6b:9a:7c:dd:26:3e:d3: 8e:9c:24:12:cb:80:79:40:9d:2d:fb:9e:13:48:48: 34:43:0c:3a:ed:3b:ff:e9:6d:5d:a8:ca:5d:2b:30: 1b:0f:eb:cd:33:b3:42:02:5f:bf:67:52:8d:4c:0b: 6b:90:92:aa:46:c7:74:63:83:39:b2:ff:fa:98:a6: 41:6c:de:18:ce:21:62:d0:24:ed:0a:c4:fd:75:61: de:94:ac:ab:79:4a:9c:00:d4:d1:d7:1d:e7:45:99: 4a:68:0d:3b:83:15:4c:1c:f1:9d:6d:0f:97:7a:89: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B1:E6:19:CA:6D:0B:F7:D4:12:69:60:84:7C:E0:0E:BB:89:63:AF X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:18:be:7a:b1:c9:78:36:5b:23:cf:83:f4:c3:51:5c:c5: 3f:48:a3:d0:47:1f:f7:5b:26:b8:fe:58:2b:18:b3:94:41:08: 5b:1a:33:06:e6:6e:97:2c:8a:9e:b1:b6:d7:85:33:33:dd:ec: 3f:84:15:be:e2:ea:23:74:75:03:d5:f3:24:35:c2:1a:0a:61: 73:79:2a:0d:6f:b3:b3:c9:e6:18:5a:06:1c:87:bd:d5:7c:0b: 23:d5:6a:dc:a8:c9:ce:c4:98:87:6d:b2:1a:59:e1:fe:4c:fa: e3:0c:0c:92:f5:9d:e1:3f:12:b5:2a:9a:d8:83:68:f5:3f:80: eb:2d:b8:18:cb:23:31:83:ae:3d:09:b4:a1:61:2b:d7:9e:96: 73:ec:4c:ca:00:69:fc:e1:1f:a8:c8:59:49:50:7f:59:0f:bc: b8:9d:10:38:52:5b:35:7e:17:b8:7c:9b:c8:bb:1f:21:33:a8: 40:a3:cb:63:48:5d:fd:a1:94:79:11:0f:e5:cc:12:c2:47:c7: 72:08:e8:a5:59:52:9f:0c:6f:f9:24:84:61:32:0b:43:68:e5: 5e:5e:32:94:bf:94:88:af:5e:5a:42:64:c5:82:4e:17:6b:42: b6:6a:24:71:32:27:7a:c1:5f:ea:b2:d3:14:53:54:5c:14:f4: 61:5f:40:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYwNDE3MDIxODE5WhcNMjYwNDI0MDIxODE5WjAYMRYwFAYD VQQDEw02OWUxOTg2Yi0wNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfmR9eTgbFefLwiVgRs6IdDz+xRd1fbZ9gYQ/PTn/NMkAgLKLOVx3htXfuZt Iu33kGeSZV+HkhH6gU15qVN3/D21WeHMkv9LZ7dB6vW5gZ/wzHp73oNzuRTO+1rf rcDOCwDwBSHDZ+5Hms1vm+7iX+LprdF2tFjDWy3SSx09TWNcRmaSMLfrtw6FyWd1 aWuafN0mPtOOnCQSy4B5QJ0t+54TSEg0Qww67Tv/6W1dqMpdKzAbD+vNM7NCAl+/ Z1KNTAtrkJKqRsd0Y4M5sv/6mKZBbN4YziFi0CTtCsT9dWHelKyreUqcANTR1x3n RZlKaA07gxVMHPGdbQ+XeokKGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2x5hnK bQv31BJpYIR84A67iWOvMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMYYvnqxyXg2WyPPg/TDUVzFP0ij0Ecf91smuP5YKxizlEEIWxozBuZulyyK nrG214UzM93sP4QVvuLqI3R1A9XzJDXCGgphc3kqDW+zs8nmGFoGHIe91XwLI9Vq 3KjJzsSYh22yGlnh/kz64wwMkvWd4T8StSqa2INo9T+A6y24GMsjMYOuPQm0oWEr 156Wc+xMygBp/OEfqMhZSVB/WQ+8uJ0QOFJbNX4XuHybyLsfITOoQKPLY0hd/aGU eREP5cwSwkfHcgjopVlSnwxv+SSEYTILQ2jlXl4ylL+UiK9eWkJkxYJOF2tCtmok cTInesFf6rLTFFNUXBT0YV9ASQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:21 2026 by rpki-client