$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json) Hash identifier: 15bLWc+rXsC2mXTHiXuClaqH843SrkY/1fVD87yJLDU= Subject key identifier: A5:BF:30:D9:F1:8E:9D:6A:BB:73:9D:9C:41:B6:29:36:BB:D1:F0:8A Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft Manifest number: 0284 Signing time: Fri 17 Apr 2026 01:35:47 +0000 Manifest this update: Fri 17 Apr 2026 01:35:46 +0000 Manifest next update: Fri 24 Apr 2026 01:35:46 +0000 Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: Xq6Qofx9r3Zbmw4NNvjC8Daao9D0S292WwTv6/w2b28=) 2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: FxqrozQ9bkCu/MslnOTZBZb3Iaskzn1o9qCly1GjApI=) 3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: kCW/zIL2wkLpmG5huYuN17ehvqsC22ne+nIXeNNOpgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Validity Not Before: Apr 17 01:35:46 2026 GMT Not After : Apr 24 01:35:46 2026 GMT Subject: CN=69e18e73-5107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:ab:0d:e3:20:15:14:0b:b6:fe:29:29:9c: 6e:4a:34:a0:b6:a1:26:de:a0:dc:cd:7a:17:28:c9: eb:e5:00:01:20:7d:60:57:be:6b:a1:82:a1:42:55: a4:48:fb:69:3f:6c:a6:b2:9d:a5:fb:d3:b6:ef:21: fd:e4:84:8b:0e:f8:ce:3b:13:d7:2c:ee:2b:83:ae: 2d:c6:da:68:93:da:f9:c1:a1:64:42:5f:eb:ea:09: 39:88:52:79:a8:33:cf:c8:25:ef:e5:18:86:ec:54: 14:39:09:ec:75:8a:df:a8:1d:7e:4b:4d:b1:49:a8: cf:30:f5:55:a0:0f:5f:53:03:cf:19:6b:47:33:78: 19:27:2c:9d:9a:61:b0:9d:f8:72:a1:ef:76:ae:f2: 67:83:1f:d8:ba:af:a6:fa:29:30:94:be:3d:b9:60: cf:eb:18:28:73:87:13:82:cd:26:2d:97:82:00:73: 2e:9b:f1:83:d2:67:ec:bd:7c:7d:33:1c:f2:21:c3: c3:ad:a0:3f:a4:c8:65:4c:ea:c6:de:43:45:2d:f0: d9:37:33:82:ce:25:89:da:4d:e5:9d:35:b5:c9:18: fa:19:e4:71:cf:1f:f9:82:26:da:da:88:a7:14:01: 00:d3:37:f2:fe:72:f5:d4:7e:bf:20:fb:aa:d2:b7: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BF:30:D9:F1:8E:9D:6A:BB:73:9D:9C:41:B6:29:36:BB:D1:F0:8A X509v3 Authority Key Identifier: keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:9b:36:61:20:a7:45:0e:39:c5:a8:9b:ed:07:95:ef:50: 0c:e9:18:53:50:55:40:44:e7:bd:ab:38:fb:f6:02:0c:30:83: d9:d6:02:00:6f:27:de:0f:66:7a:cf:43:e3:df:9c:1c:e2:4d: 2f:bf:38:57:4f:70:ce:12:1f:47:c3:64:7a:60:31:f9:3c:a2: 08:9d:ca:f0:72:e2:e2:2a:bb:ac:18:2d:ba:83:67:51:b9:44: 69:2a:82:f4:fb:bc:c2:59:4f:6e:57:e7:a8:91:57:50:90:c2: e8:02:e0:2a:64:3e:98:db:d2:f6:8d:2a:75:56:67:63:d2:e5: 69:eb:d6:d5:60:2a:de:04:ef:e6:76:35:e7:b9:b1:71:19:27: 8b:e9:60:83:c1:10:65:e7:35:5c:af:52:a6:37:ba:fa:01:53: c3:be:be:b3:62:b4:6f:14:7a:c7:9c:b3:7b:6d:b1:10:a7:09: c6:84:b1:bb:57:73:d3:f6:b8:d3:ff:6a:d6:5c:26:7b:d7:3c: ee:a4:c8:b1:b1:98:a7:fa:56:cd:44:e4:ff:11:39:a9:da:94: 96:78:52:74:45:dc:0a:0c:d7:4e:6f:5f:ad:05:81:a4:a2:ed: 10:06:33:3f:d6:86:2f:d4:fa:c8:be:1e:8f:be:f7:5c:6a:dd: 81:d8:33:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQwNzMxMTAvBgNVBAUTKDA4QUVEM0UxRENCNkVENzc0MjMwM0NFRkY0N0RFMDJE OTJCM0VERTUwHhcNMjYwNDE3MDEzNTQ2WhcNMjYwNDI0MDEzNTQ2WjAYMRYwFAYD VQQDEw02OWUxOGU3My01MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgSrDeMgFRQLtv4pKZxuSjSgtqEm3qDczXoXKMnr5QABIH1gV75roYKhQlWk SPtpP2ymsp2l+9O27yH95ISLDvjOOxPXLO4rg64txtpok9r5waFkQl/r6gk5iFJ5 qDPPyCXv5RiG7FQUOQnsdYrfqB1+S02xSajPMPVVoA9fUwPPGWtHM3gZJyydmmGw nfhyoe92rvJngx/Yuq+m+ikwlL49uWDP6xgoc4cTgs0mLZeCAHMum/GD0mfsvXx9 MxzyIcPDraA/pMhlTOrG3kNFLfDZNzOCziWJ2k3lnTW1yRj6GeRxzx/5giba2oin FAEA0zfy/nL11H6/IPuq0rdjXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKW/MNnx jp1qu3OdnEG2KTa70fCKMB8GA1UdIwQYMBaAFAiu0+Hctu13QjA87/R94C2Ss+3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDA3My9GNEI0Q0E1MjY0 QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdYZENNRHp2OUgzZ0xaS3o3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NLN1Q0ZHkyN1hkQ01EenY5SDNnTFpLejdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDA3My9GNEI0Q0E1MjY0QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdY ZENNRHp2OUgzZ0xaS3o3ZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFV+bNmEgp0UOOcWom+0Hle9QDOkYU1BVQETnvas4+/YCDDCD2dYCAG8n3g9m es9D49+cHOJNL784V09wzhIfR8NkemAx+TyiCJ3K8HLi4iq7rBgtuoNnUblEaSqC 9Pu8wllPblfnqJFXUJDC6ALgKmQ+mNvS9o0qdVZnY9LlaevW1WAq3gTv5nY157mx cRkni+lgg8EQZec1XK9Spje6+gFTw76+s2K0bxR6x5yze22xEKcJxoSxu1dz0/a4 0/9q1lwme9c87qTIsbGYp/pWzUTk/xE5qdqUlnhSdEXcCgzXTm9frQWBpKLtEAYz P9aGL9T6yL4ej773XGrdgdgzZw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:18 2026 by rpki-client