$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: /DSHa1TLsBe1ZnJL6wSi+oQ/nTQsPvXr0drnqelCzac= Subject key identifier: 21:BD:CA:0D:63:F1:97:CE:20:57:54:B0:67:EE:9B:CA:0C:66:B2:34 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 0439 Signing time: Sun 19 Apr 2026 00:12:15 +0000 Manifest this update: Sun 19 Apr 2026 00:12:15 +0000 Manifest next update: Sun 26 Apr 2026 00:12:15 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: XePPvzPFKSV3PH15mBxtgv20//8NkG8WzZ7suZFkIZA=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: xpRfyiF/Cwbm/S2d07PVYILgag6XLAeF1LTYw+95K4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Apr 19 00:12:15 2026 GMT Not After : Apr 26 00:12:15 2026 GMT Subject: CN=69e41ddf-6486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:c7:30:4d:cf:db:6f:50:f9:83:59:1a:15: c6:be:f2:c6:9c:37:b8:e7:a8:fc:5a:e7:80:3a:04: 0d:42:2e:d6:4b:a4:60:03:16:34:d6:e3:9a:ed:cb: 79:c4:fc:69:b7:bc:0c:53:f9:23:10:d1:db:de:be: 46:fd:26:0a:18:6b:1a:70:54:fb:7e:45:eb:1d:0c: 72:0a:e7:94:97:44:c3:06:69:ee:66:60:bb:16:28: 24:6c:e9:ee:63:42:7f:c5:07:3e:23:b3:d6:49:1a: 69:4d:c2:0d:78:9e:f4:06:78:4a:6c:dd:12:66:79: b2:29:82:ef:86:84:a4:84:93:41:28:69:bf:c4:dd: b8:4e:87:70:0e:60:27:21:e9:e0:9a:7f:ac:54:41: a5:e8:07:47:ab:f1:b4:ca:e8:d6:86:85:2e:f2:5c: a9:0f:78:aa:8c:c0:8e:31:dc:77:b5:a0:2b:85:7f: 82:ba:fd:8e:15:8c:a5:d1:0d:a2:49:a8:a6:5a:ca: 03:8c:2a:69:ca:21:0f:61:3e:01:9a:eb:69:c2:9e: bf:70:f3:ac:e7:92:52:57:22:3a:6e:27:bb:36:e5: 01:ed:fc:ae:f4:1e:f0:ce:c5:ea:77:4f:58:7f:60: d4:8a:0a:49:d3:25:f6:8f:75:e9:5a:8b:53:d4:e1: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:CA:0D:63:F1:97:CE:20:57:54:B0:67:EE:9B:CA:0C:66:B2:34 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:39:96:5e:48:d1:d0:8b:5b:a7:a6:d1:9f:09:77:04:5a:eb: 0b:e3:3b:ae:49:94:67:ed:d3:37:9e:e8:0e:f5:2b:01:52:ed: 0b:db:db:7b:13:39:d6:12:5a:96:3e:a1:ac:5d:01:dd:8c:6f: aa:21:5a:dd:ed:89:36:86:42:08:63:4a:8d:8f:e8:a1:29:5e: 66:6b:c6:08:1a:f3:57:ff:4e:a0:dd:3a:ed:f7:66:ec:bd:6f: 44:d2:26:eb:31:b2:42:71:63:f3:7c:0e:58:c8:ea:16:2e:6a: 17:69:c6:51:a8:e4:7c:30:a0:42:b2:01:3a:ce:b6:81:86:71: 22:9f:5c:6a:c4:a1:e5:dc:7a:80:94:61:31:e3:e5:37:fc:05: 59:bd:cf:ec:07:e6:74:11:76:24:b8:fc:c4:75:c2:24:43:db: 0f:36:90:d3:08:67:e8:1b:0d:dd:93:7f:0a:76:3e:89:7d:95: 5a:f9:25:8f:0b:ee:4b:71:77:7d:8e:a9:55:3c:6e:0e:da:27: 06:43:cc:f7:6f:3a:a0:e9:f6:00:d4:2a:29:a6:dc:81:68:19: 53:3c:4c:98:24:c5:e2:11:d1:73:ae:b7:7a:c6:e2:0c:7b:8e: a8:1c:05:d4:c5:6c:42:76:ae:51:36:07:7d:15:bf:2c:40:4f: 03:bb:ab:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjYwNDE5MDAxMjE1WhcNMjYwNDI2MDAxMjE1WjAYMRYwFAYD VQQDEw02OWU0MWRkZi02NDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJvHME3P229Q+YNZGhXGvvLGnDe456j8WueAOgQNQi7WS6RgAxY01uOa7ct5 xPxpt7wMU/kjENHb3r5G/SYKGGsacFT7fkXrHQxyCueUl0TDBmnuZmC7FigkbOnu Y0J/xQc+I7PWSRppTcINeJ70BnhKbN0SZnmyKYLvhoSkhJNBKGm/xN24TodwDmAn Iengmn+sVEGl6AdHq/G0yujWhoUu8lypD3iqjMCOMdx3taArhX+Cuv2OFYyl0Q2i SaimWsoDjCppyiEPYT4Bmutpwp6/cPOs55JSVyI6bie7NuUB7fyu9B7wzsXqd09Y f2DUigpJ0yX2j3XpWotT1OG4jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCG9yg1j 8ZfOIFdUsGfum8oMZrI0MB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcjmWXkjR0Itbp6bRnwl3BFrrC+M7rkmUZ+3TN57oDvUrAVLtC9vbexM51hJa lj6hrF0B3YxvqiFa3e2JNoZCCGNKjY/ooSleZmvGCBrzV/9OoN067fdm7L1vRNIm 6zGyQnFj83wOWMjqFi5qF2nGUajkfDCgQrIBOs62gYZxIp9casSh5dx6gJRhMePl N/wFWb3P7AfmdBF2JLj8xHXCJEPbDzaQ0whn6BsN3ZN/CnY+iX2VWvkljwvuS3F3 fY6pVTxuDtonBkPM9286oOn2ANQqKabcgWgZUzxMmCTF4hHRc663esbiDHuOqBwF 1MVsQnauUTYHfRW/LEBPA7urTQ== -----END CERTIFICATE-----Generated at Sun Apr 19 11:30:38 2026 by rpki-client