$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: GUVtGZigTUVgVUu5WCEoi8S5yiU/MMW+GoDwfK6iMv0= Subject key identifier: 2F:59:02:D3:FC:9E:65:EE:1F:ED:9F:59:AF:90:75:2F:66:75:36:B5 Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 04A5 Signing time: Thu 16 Apr 2026 23:50:14 +0000 Manifest this update: Thu 16 Apr 2026 23:50:14 +0000 Manifest next update: Thu 23 Apr 2026 23:50:14 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: /duGFDVpAlVwejaWMnee1BQ5nFgxPPS3I8dsa2Zb3E8=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2RXStLDjyOeuSTsmkifmHRekLcbCRcqX4watjvDv81g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Apr 16 23:50:14 2026 GMT Not After : Apr 23 23:50:14 2026 GMT Subject: CN=69e175b6-3f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:8b:3b:09:41:fd:c5:3c:ad:20:94:8f:16: 32:50:09:2c:98:c2:78:4c:22:4c:0d:04:4c:2f:6c: 32:15:6b:26:c9:20:30:ae:9a:07:f9:a9:05:d8:0a: 9c:a3:e8:8f:0b:52:12:d5:15:47:92:d8:b3:86:5b: 49:78:54:a6:ac:d9:41:1e:7b:26:c4:58:68:8d:85: 3b:49:01:c1:f9:13:50:7a:30:d1:fb:e4:0e:ab:e5: af:26:ab:40:d0:55:fb:dd:15:53:73:27:19:a9:64: 84:15:83:3f:11:1c:c7:9a:32:08:3a:9e:29:d7:b6: 3f:a2:dc:0c:34:37:4e:7e:f1:15:0e:17:c7:24:96: 62:0b:08:e9:9b:5a:72:b9:77:8e:03:17:c7:5c:08: c7:43:c3:e9:76:96:17:35:ba:73:6c:09:1b:21:cd: 8e:fc:49:b7:3e:74:35:25:a0:c5:0b:a2:6c:ed:79: c1:7c:40:e2:2f:80:84:90:6a:72:f7:3d:55:e1:b4: ff:71:ff:21:e3:f9:9c:60:fd:fd:70:11:e1:36:94: c3:30:0c:c3:fa:91:d8:9b:58:a6:7c:66:60:29:a1: 93:90:39:29:cd:8e:ab:8c:7b:47:2d:b2:1d:82:a9: c4:6e:25:d9:5e:6e:3f:dd:fc:ac:12:88:4a:71:f0: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:59:02:D3:FC:9E:65:EE:1F:ED:9F:59:AF:90:75:2F:66:75:36:B5 X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:74:60:3a:89:53:b4:04:08:1b:a7:7b:85:9c:b1:78:d6:21: 28:9d:b5:5c:ce:89:ef:c4:15:c9:60:9f:ef:75:3c:39:fc:ee: 39:77:a0:b6:10:90:72:0c:f3:cc:72:d1:13:f3:8f:4d:35:ae: 60:bb:91:f2:d8:b3:a7:54:70:ca:2d:03:19:18:d0:1b:e7:9f: 42:aa:53:3d:6b:57:53:89:51:9c:31:4c:f5:e6:49:c3:73:9b: 12:7b:4a:76:95:50:ef:c4:ed:52:8a:00:76:25:6d:dc:c1:2f: c3:2c:ad:80:fe:f9:b3:6f:b2:a1:e0:20:e1:27:ec:24:1c:a7: ce:84:64:c0:a0:63:7e:57:e0:18:76:40:b3:9a:48:7b:ec:bf: 4c:2f:50:29:5e:0c:e4:16:9e:5d:ab:13:86:e2:c4:c2:c1:2d: 7d:b5:77:89:3a:35:a7:fd:d3:5f:b5:b3:c2:9f:ac:e4:87:2a: 76:c8:8b:2c:02:35:95:ea:bb:e7:75:19:95:ba:36:95:6e:8d: cb:44:80:6e:60:33:bc:81:35:ca:d2:13:75:15:ee:4c:8c:60: 95:53:9f:05:96:83:67:fb:a8:3f:c4:c9:40:25:9b:c6:ce:f5: 08:6b:4b:9e:28:c8:2a:e6:b7:0e:a7:30:f0:93:1d:24:67:f0: b4:ec:03:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjYwNDE2MjM1MDE0WhcNMjYwNDIzMjM1MDE0WjAYMRYwFAYD VQQDEw02OWUxNzViNi0zZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuKLOwlB/cU8rSCUjxYyUAksmMJ4TCJMDQRML2wyFWsmySAwrpoH+akF2Aqc o+iPC1IS1RVHktizhltJeFSmrNlBHnsmxFhojYU7SQHB+RNQejDR++QOq+WvJqtA 0FX73RVTcycZqWSEFYM/ERzHmjIIOp4p17Y/otwMNDdOfvEVDhfHJJZiCwjpm1py uXeOAxfHXAjHQ8PpdpYXNbpzbAkbIc2O/Em3PnQ1JaDFC6Js7XnBfEDiL4CEkGpy 9z1V4bT/cf8h4/mcYP39cBHhNpTDMAzD+pHYm1imfGZgKaGTkDkpzY6rjHtHLbId gqnEbiXZXm4/3fysEohKcfCaCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9ZAtP8 nmXuH+2fWa+QdS9mdTa1MB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVHRgOolTtAQIG6d7hZyxeNYhKJ21XM6J78QVyWCf73U8OfzuOXegthCQcgzz zHLRE/OPTTWuYLuR8tizp1Rwyi0DGRjQG+efQqpTPWtXU4lRnDFM9eZJw3ObEntK dpVQ78TtUooAdiVt3MEvwyytgP75s2+yoeAg4SfsJBynzoRkwKBjflfgGHZAs5pI e+y/TC9QKV4M5BaeXasThuLEwsEtfbV3iTo1p/3TX7Wzwp+s5IcqdsiLLAI1leq7 53UZlbo2lW6Ny0SAbmAzvIE1ytITdRXuTIxglVOfBZaDZ/uoP8TJQCWbxs71CGtL nijIKua3Dqcw8JMdJGfwtOwD5A== -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:08 2026 by rpki-client