$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: iTzcxMmze+Aou8x8VFjbsdBzWMnni8psSWXbu2NQ3lQ= Subject key identifier: FC:5A:8E:D4:6E:D2:76:3D:C8:4E:8B:05:37:EF:97:F2:7C:D9:2A:2B Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 044C Signing time: Fri 17 Apr 2026 00:07:34 +0000 Manifest this update: Fri 17 Apr 2026 00:07:33 +0000 Manifest next update: Fri 24 Apr 2026 00:07:33 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: 1H51zsD7Q7LV6L6U31odu33fNyHC6O2FXUKIhrgtZMc=) 2: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=) 3: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: BOEExBy+QaPnsKDJ+gbhFQuFa7d7NxoUneMKG9j7QtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Validity Not Before: Apr 17 00:07:33 2026 GMT Not After : Apr 24 00:07:33 2026 GMT Subject: CN=69e179c5-ab61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:47:cc:81:a4:c2:46:93:e0:21:a4:a7:66: b3:ec:88:e6:4c:b2:b1:64:bc:6e:d0:a3:1d:f2:35: 2a:de:8b:b8:42:54:56:e3:1b:be:35:73:af:9b:c5: 54:e9:c2:43:b0:c3:6f:af:c7:4b:d4:70:cc:9d:79: f7:d7:e9:62:17:05:0a:c8:af:54:78:b6:90:45:ca: 29:af:8c:8d:d1:9b:19:e6:9f:ce:ee:e1:88:36:9f: b1:e5:e8:67:15:91:6f:5d:40:2e:d6:40:86:cc:7c: 64:2e:d9:3f:00:75:ed:ae:d0:12:cf:8d:60:66:49: ab:a6:c9:40:e5:de:cf:df:17:e5:da:23:68:9d:1b: ec:f2:10:8c:ec:3e:0e:dd:32:b5:11:f4:36:dc:1f: 39:15:be:3f:dc:74:e7:b3:da:2b:5a:7f:de:c2:d2: 83:96:8c:06:03:cf:20:ed:e0:30:42:28:2e:54:ef: 0d:f6:81:4a:74:ae:63:be:d5:e9:dc:42:2a:ec:32: 02:b2:3d:b8:01:94:fa:e3:af:40:1e:06:38:82:98: 78:80:ae:c5:2f:14:99:e3:c9:85:4c:10:d4:2f:10: eb:68:44:75:4a:e7:39:ca:bb:99:52:9e:60:0e:b7: 75:f7:53:0a:e1:f4:5a:62:a1:7c:67:ba:53:b5:38: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:8E:D4:6E:D2:76:3D:C8:4E:8B:05:37:EF:97:F2:7C:D9:2A:2B X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f3:2c:a7:cf:84:bd:58:27:f4:41:47:cc:00:d7:d0:4f:52: 67:c1:b4:d1:72:c5:bb:ea:46:df:3e:a3:94:9f:68:83:14:e4: 19:97:6d:7d:14:e7:21:47:e6:5e:73:13:b6:03:31:18:4d:8b: 7f:96:55:5b:f1:dc:72:fa:28:14:97:4f:1b:08:81:25:71:ac: e2:e9:ea:07:ac:42:a7:26:47:34:d5:77:34:42:a8:14:ca:07: 48:54:e4:37:29:ae:71:68:18:d3:08:25:33:ef:f2:eb:c3:6e: 3f:f3:3a:42:92:e7:89:dc:65:ff:f3:77:d6:ad:f1:34:2b:6e: 76:6a:dd:fb:3a:60:f9:eb:f8:ae:d2:91:1b:d3:48:90:01:67: 3e:35:bd:9e:07:bf:4a:55:3c:93:29:19:1b:f2:4c:2c:a6:c2: 37:dd:67:62:5e:36:8d:5c:dc:99:13:e0:1e:61:db:55:4a:20: 77:ee:c7:77:7c:0a:cb:99:cc:45:64:1b:02:78:3d:50:50:d1: c1:60:8b:39:d7:5a:f2:a2:f2:df:d3:db:55:66:e5:69:6e:3c: 3b:57:b1:00:41:bb:7e:ab:64:6e:f0:97:de:36:8d:eb:59:04: 20:a5:94:ab:f0:21:e6:0c:fc:a9:87:a0:be:f0:ca:a3:70:25: f2:ae:be:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjYwNDE3MDAwNzMzWhcNMjYwNDI0MDAwNzMzWjAYMRYwFAYD VQQDEw02OWUxNzljNS1hYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhpHzIGkwkaT4CGkp2az7IjmTLKxZLxu0KMd8jUq3ou4QlRW4xu+NXOvm8VU 6cJDsMNvr8dL1HDMnXn31+liFwUKyK9UeLaQRcopr4yN0ZsZ5p/O7uGINp+x5ehn FZFvXUAu1kCGzHxkLtk/AHXtrtASz41gZkmrpslA5d7P3xfl2iNonRvs8hCM7D4O 3TK1EfQ23B85Fb4/3HTns9orWn/ewtKDlowGA88g7eAwQiguVO8N9oFKdK5jvtXp 3EIq7DICsj24AZT6469AHgY4gph4gK7FLxSZ48mFTBDULxDraER1Suc5yruZUp5g Drd191MK4fRaYqF8Z7pTtTgezQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxajtRu 0nY9yE6LBTfvl/J82SorMB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfMsp8+EvVgn9EFHzADX0E9SZ8G00XLFu+pG3z6jlJ9ogxTkGZdtfRTnIUfm XnMTtgMxGE2Lf5ZVW/HccvooFJdPGwiBJXGs4unqB6xCpyZHNNV3NEKoFMoHSFTk NymucWgY0wglM+/y68NuP/M6QpLnidxl//N31q3xNCtudmrd+zpg+ev4rtKRG9NI kAFnPjW9nge/SlU8kykZG/JMLKbCN91nYl42jVzcmRPgHmHbVUogd+7Hd3wKy5nM RWQbAng9UFDRwWCLOdda8qLy39PbVWblaW48O1exAEG7fqtkbvCX3jaN61kEIKWU q/Ah5gz8qYegvvDKo3Al8q6+jQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:04:38 2026 by rpki-client