$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: RFM4/3VuvVvXbSlUI0Z22HBjb/UDiPnY+ajTRVRvf7U= Subject key identifier: 8B:C0:45:9A:D9:33:56:07:5F:4E:2E:8A:E4:14:99:C7:2E:32:AA:E6 Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: 0132 Signing time: Fri 17 Apr 2026 05:17:38 +0000 Manifest this update: Fri 17 Apr 2026 05:17:37 +0000 Manifest next update: Fri 24 Apr 2026 05:17:37 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: NlOQdsbjdk2eC2TfTF0cvoFSstEO68h9M3I5uuf8dQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Apr 17 05:17:37 2026 GMT Not After : Apr 24 05:17:37 2026 GMT Subject: CN=69e1c272-51d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:57:7b:4e:9b:8f:09:63:b2:35:57:24:92: a2:02:ec:ce:0c:1a:31:36:be:5b:1f:1b:f2:d8:5d: 67:d8:5f:39:da:b6:20:cb:60:e5:92:d7:fe:f4:b5: 58:4a:cf:fd:3c:67:3a:ee:11:de:07:0d:31:b8:67: 12:53:d7:b1:24:3d:7f:f7:ed:e5:5f:c6:a7:e3:0c: 93:48:15:2e:c5:5b:16:d8:71:b8:77:bd:55:0c:6c: 6f:1b:e4:96:b5:39:12:52:53:21:53:a7:a7:60:c2: 51:6f:21:51:ca:cb:8a:ef:86:79:67:47:d0:0f:85: 87:21:c1:4d:57:ca:ee:d5:90:0c:e5:18:3c:56:96: 4a:e4:4b:01:fd:2f:b6:40:96:53:ba:de:9b:ed:33: 29:3b:88:a4:35:ac:9f:6b:33:26:2f:af:fe:21:4e: ab:37:8d:e4:51:04:23:e6:45:e4:37:0a:30:1d:da: e5:05:94:e1:a3:ae:d5:d4:d9:a3:98:18:b1:89:5a: 54:88:42:69:d1:45:6d:8b:55:16:e8:4e:c3:ae:7f: 01:cd:9e:f9:b2:f3:f9:7b:8d:da:df:16:01:08:e5: 13:f1:94:a1:5d:ad:ab:98:8d:56:ee:97:92:e6:06: 4b:ac:59:60:ca:e7:32:6b:c1:38:c6:7a:a3:69:a6: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:45:9A:D9:33:56:07:5F:4E:2E:8A:E4:14:99:C7:2E:32:AA:E6 X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:1a:8d:c6:0d:63:c5:3a:56:4b:ff:b0:c3:5b:61:58:da: 90:a9:87:0f:d6:0a:dd:97:99:be:1d:f3:b1:59:83:02:c7:80: af:e6:f4:84:05:83:18:c6:39:68:cf:71:b8:18:e9:c5:de:3a: 1f:27:12:21:5f:66:8d:96:0a:23:ef:ce:5a:77:46:3c:5a:e6: d5:81:d7:4d:ba:7b:ea:08:88:1c:a9:27:05:10:63:94:c9:11: 17:c8:13:c9:af:17:5f:45:cd:b5:9b:77:3e:1e:19:67:00:6d: 9d:7e:57:0c:3b:e6:dc:46:ee:49:77:83:0c:d8:30:23:71:44: 0c:cc:ee:ed:bd:cb:8e:cd:ef:2c:7f:48:ff:3f:2a:4f:96:4d: 7f:5a:f3:5c:b6:7c:7e:84:00:c5:28:b2:12:07:39:73:e6:7f: 73:41:c4:92:5e:c3:ac:3c:e8:82:5e:35:20:33:67:9f:73:6e: 29:80:ef:fd:db:f8:0e:02:ae:0c:5e:50:81:b8:f1:79:0b:c0: 51:fc:9a:c5:c8:49:3b:00:02:7e:91:09:76:8d:13:aa:ac:59: 5f:3d:5a:fc:5b:84:e3:f6:49:f4:4b:61:89:d6:e8:67:1b:f5: 30:e8:90:9d:57:25:cc:8a:7b:72:15:3c:0f:64:04:99:e1:39: d8:bd:a8:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKEUxRDc4MzdFQkNDN0E5QTREMTc1MTY1Nzg2MDQ3NjNB MkJEMDQyNzIwHhcNMjYwNDE3MDUxNzM3WhcNMjYwNDI0MDUxNzM3WjAYMRYwFAYD VQQDEw02OWUxYzI3Mi01MWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dFXe06bjwljsjVXJJKiAuzODBoxNr5bHxvy2F1n2F852rYgy2Dlktf+9LVY Ss/9PGc67hHeBw0xuGcSU9exJD1/9+3lX8an4wyTSBUuxVsW2HG4d71VDGxvG+SW tTkSUlMhU6enYMJRbyFRysuK74Z5Z0fQD4WHIcFNV8ru1ZAM5Rg8VpZK5EsB/S+2 QJZTut6b7TMpO4ikNayfazMmL6/+IU6rN43kUQQj5kXkNwowHdrlBZTho67V1Nmj mBixiVpUiEJp0UVti1UW6E7Drn8BzZ75svP5e43a3xYBCOUT8ZShXa2rmI1W7peS 5gZLrFlgyucya8E4xnqjaabHwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvARZrZ M1YHX04uiuQUmccuMqrmMB8GA1UdIwQYMBaAFOHXg368x6mk0XUWV4YEdjor0EJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xQjI5MEI1RTc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFhVFJkUlpYaGdSMk9pdlFR bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xQjI5MEI1RTc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi80ZGVEZnJ6SHFh VFJkUlpYaGdSMk9pdlFRbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP4cajcYNY8U6Vkv/sMNbYVjakKmHD9YK3ZeZvh3zsVmDAseAr+b0hAWDGMY5 aM9xuBjpxd46HycSIV9mjZYKI+/OWndGPFrm1YHXTbp76giIHKknBRBjlMkRF8gT ya8XX0XNtZt3Ph4ZZwBtnX5XDDvm3EbuSXeDDNgwI3FEDMzu7b3Ljs3vLH9I/z8q T5ZNf1rzXLZ8foQAxSiyEgc5c+Z/c0HEkl7DrDzogl41IDNnn3NuKYDv/dv4DgKu DF5QgbjxeQvAUfyaxchJOwACfpEJdo0TqqxZXz1a/FuE4/ZJ9EthidboZxv1MOiQ nVclzIp7chU8D2QEmeE52L2osQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:09 2026 by rpki-client