$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: OVRcvODeeoupEEdj8BNcgJzo1ouEhYFbRFxK6dn+cWk= Subject key identifier: D7:9B:EB:07:07:CE:7B:86:9D:02:A9:EB:DA:93:2A:1B:87:5E:1B:CB Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 129B Signing time: Thu 16 Apr 2026 17:01:09 +0000 Manifest this update: Thu 16 Apr 2026 17:01:08 +0000 Manifest next update: Thu 23 Apr 2026 17:01:08 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: Ripy14thdUwQnc5x3r+GVVu/h2sh1ewO2sjPJ+fXWEA=) 2: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=) 4: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4804 (0x12c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Apr 16 17:01:08 2026 GMT Not After : Apr 23 17:01:08 2026 GMT Subject: CN=69e115d4-9ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:c9:e1:d8:4d:7a:c3:55:e1:e6:0c:1f:ba: 47:19:1f:e4:0f:1c:8f:51:e1:7e:ee:87:73:34:39: 02:e7:cd:47:25:a4:05:83:21:4b:33:6b:d7:06:63: 99:f0:f4:c6:a3:fc:58:3d:c6:08:ee:13:ae:fd:f4: d1:6f:24:dc:8b:5b:c1:d2:88:e1:fc:84:3c:18:0d: 2c:dc:c1:3f:3e:f4:8f:6e:32:19:a4:53:8d:84:83: 36:bd:78:de:99:b7:67:7f:c3:6f:c5:0d:1f:19:7f: 13:e0:3c:e7:15:07:9b:13:ed:e0:3a:61:7c:b9:3e: 88:2d:26:33:d8:eb:49:8e:a8:79:ac:c4:e2:5b:9a: 3a:80:13:77:c5:db:58:9b:75:bd:a3:1c:82:75:3c: 0d:eb:77:e7:89:f5:d2:48:76:f6:3c:91:10:c1:42: cf:d1:32:eb:56:a6:50:59:cf:b0:46:c6:bf:70:6d: 11:57:cc:2e:1a:ad:86:63:2b:4e:ac:13:17:60:69: be:3d:88:c5:24:d6:da:2c:98:b0:42:7d:d9:50:dc: a7:f2:87:1f:fe:c6:cc:6f:9d:ae:6b:4f:19:bb:2b: 6d:8c:50:fe:fc:96:73:1a:59:99:d8:e0:70:81:2d: 59:7d:db:cc:be:bf:de:f5:b6:c3:2d:54:ee:ff:c0: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:EB:07:07:CE:7B:86:9D:02:A9:EB:DA:93:2A:1B:87:5E:1B:CB X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e7:29:df:4b:58:0e:4c:9e:32:9a:d0:1d:45:ae:52:d7:1d: 06:5a:11:27:6b:7e:8a:d0:d0:b6:34:b7:87:00:b7:62:8e:f3: c0:a4:d9:5a:38:39:b3:ab:22:5c:4f:03:22:f5:47:d2:f1:b5: 7e:f2:82:1b:90:8c:9d:98:bc:65:d7:43:63:c7:7e:d7:fd:83: 8d:cd:08:71:56:38:4e:4c:da:f0:57:f3:22:05:7e:06:44:7d: 73:1d:b9:25:8b:e6:5d:dd:a5:c1:0a:16:06:45:dc:55:85:65: b4:ef:20:c6:3e:41:dc:9d:e2:0e:1e:3d:e8:a1:2d:6a:74:4e: c4:30:65:ab:4e:2f:28:08:82:25:7d:40:0f:53:83:3f:5e:80: 80:3f:3b:30:95:4f:f6:bb:19:4e:b5:99:f5:1c:e4:38:c0:b2: 32:86:a2:65:ee:03:f2:44:0e:82:9e:fe:29:3e:8b:2b:a3:58: 0c:d1:0e:bc:98:c6:ec:19:d1:e0:e9:3f:21:9c:95:ac:f7:f1: 68:49:4a:85:aa:69:e4:c2:2d:84:05:07:a3:7b:a2:9a:68:f0: 0e:d7:e7:67:45:6b:27:f9:df:f8:6c:71:36:b6:64:2a:79:c9: 55:34:7f:56:3c:39:28:a7:c3:de:67:dd:8e:aa:69:f9:f2:b9: 3b:65:2e:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwNDE2MTcwMTA4WhcNMjYwNDIzMTcwMTA4WjAYMRYwFAYD VQQDEw02OWUxMTVkNC05Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8XJ4dhNesNV4eYMH7pHGR/kDxyPUeF+7odzNDkC581HJaQFgyFLM2vXBmOZ 8PTGo/xYPcYI7hOu/fTRbyTci1vB0ojh/IQ8GA0s3ME/PvSPbjIZpFONhIM2vXje mbdnf8NvxQ0fGX8T4DznFQebE+3gOmF8uT6ILSYz2OtJjqh5rMTiW5o6gBN3xdtY m3W9oxyCdTwN63fnifXSSHb2PJEQwULP0TLrVqZQWc+wRsa/cG0RV8wuGq2GYytO rBMXYGm+PYjFJNbaLJiwQn3ZUNyn8ocf/sbMb52ua08ZuyttjFD+/JZzGlmZ2OBw gS1ZfdvMvr/e9bbDLVTu/8DhawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeb6wcH znuGnQKp69qTKhuHXhvLMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQucp30tYDkyeMprQHUWuUtcdBloRJ2t+itDQtjS3hwC3Yo7zwKTZWjg5s6si XE8DIvVH0vG1fvKCG5CMnZi8ZddDY8d+1/2Djc0IcVY4Tkza8FfzIgV+BkR9cx25 JYvmXd2lwQoWBkXcVYVltO8gxj5B3J3iDh496KEtanROxDBlq04vKAiCJX1AD1OD P16AgD87MJVP9rsZTrWZ9RzkOMCyMoaiZe4D8kQOgp7+KT6LK6NYDNEOvJjG7BnR 4Ok/IZyVrPfxaElKhapp5MIthAUHo3uimmjwDtfnZ0VrJ/nf+GxxNrZkKnnJVTR/ Vjw5KKfD3mfdjqpp+fK5O2UuFQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:36:23 2026 by rpki-client