$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: f6seqtRA1bY3HjF08EZbQAeGPyI7ZZAJyhGV5sJInRM= Subject key identifier: E5:AD:A8:29:CE:B4:2D:06:B6:7D:77:64:5B:4A:8D:90:A7:04:5F:49 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 0129 Signing time: Fri 17 Apr 2026 05:25:04 +0000 Manifest this update: Fri 17 Apr 2026 05:25:04 +0000 Manifest next update: Fri 24 Apr 2026 05:25:04 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: 4jcxyePP+igSxPG3H6mmuLmDW+LfoBOM5KTcvLn68gA=) 2: B6FC11FCDBC511F0ACB3398151641951.roa (hash: 0ueEp7gkNyo/eRbYSZCsOjM7D/HOAUYNpRhkEzgVUdo=) 3: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: gxZFWSG/EQsmYDfM8pL8cu4/7hBAQnAKWm8Ca27ncb0=) 4: B6783AB2DBC511F0ACB3398151641951.roa (hash: 8nSDYPqmj9///M7ihOu/Qy1ziSupwMIbXuYBnGolzzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Apr 17 05:25:04 2026 GMT Not After : Apr 24 05:25:04 2026 GMT Subject: CN=69e1c430-d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:cd:ee:04:dd:e7:2e:40:a1:bb:f9:1e:57: 46:6c:18:08:37:d2:20:3d:6e:a7:18:a7:8d:78:1c: 32:61:fb:4b:4b:aa:e5:c5:1d:87:41:b8:2e:61:84: 1b:3e:70:55:f9:b4:d6:85:e2:54:c6:66:27:a7:a0: 7d:68:49:3b:4e:24:15:c3:f4:71:38:07:76:ae:d7: f6:24:2b:e3:5a:2d:c4:a6:b3:4f:bd:43:ee:74:24: 25:b9:63:df:a3:62:04:9d:bf:70:cc:86:77:a7:00: 9b:89:e5:3b:bb:75:c9:ad:67:07:29:69:47:c9:9b: e2:07:33:b6:69:f7:7a:e0:b3:0d:72:47:0e:12:16: 79:1f:b4:0e:e5:f9:c4:d7:4d:29:92:74:da:a2:d2: 93:8e:7b:ac:77:0d:13:0d:92:78:9b:04:3f:5b:24: 27:d4:ff:77:70:07:26:e4:fe:c4:65:95:0e:a4:2d: 61:f3:ce:15:c0:45:e5:e1:98:da:bc:c7:d7:b4:83: 13:df:c7:28:54:47:8c:4c:9f:3c:6f:34:ff:ab:03: da:8b:6b:4e:d8:62:09:26:46:54:86:3d:b8:54:f0: 46:da:ba:9f:9f:bb:09:45:21:a0:3a:56:91:c6:5b: 8a:ec:97:75:8f:69:a8:f2:84:22:19:32:9c:70:59: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:A8:29:CE:B4:2D:06:B6:7D:77:64:5B:4A:8D:90:A7:04:5F:49 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6a:09:f3:fa:c1:2e:cf:88:f0:dc:83:f7:33:b0:6a:d4:66: 16:ab:78:c3:a3:b0:11:24:a4:fb:f6:06:8c:55:9e:b6:64:53: 1c:af:d3:49:d7:17:15:ef:2e:ec:ab:b9:f3:ad:fe:50:c4:e2: ee:13:d1:44:58:3b:a9:0c:a8:84:f6:ca:99:61:2b:c6:47:3e: d5:c1:07:df:19:b1:f3:d2:fc:d6:84:49:9e:49:3d:2b:7e:f4: 94:23:d4:6e:e5:81:60:5f:83:70:e4:59:76:09:12:85:97:78: c3:f2:f8:33:b3:30:2c:61:0e:b3:7c:f1:9a:5a:f2:b1:a1:2a: 63:9f:4e:71:5d:d8:dd:c3:27:0e:98:55:57:49:fd:10:42:bf: 5d:51:e7:9f:cc:0b:2d:16:e0:b6:00:d5:1c:a9:63:52:44:84: be:ef:59:75:fe:d1:14:9f:45:99:d0:d0:ca:0e:3c:b9:85:fb: 93:b3:5a:85:ca:a7:7c:cf:de:3b:bf:5a:9c:b2:c2:2a:20:2f: 83:32:59:28:c6:a9:1c:99:12:1a:e5:36:9f:54:48:bd:97:d7: 34:65:6e:c6:99:9f:ad:f4:0e:76:fb:d5:6e:c4:92:2e:0a:8a: 13:86:6f:00:32:bf:37:1e:ad:54:25:9b:28:f3:3d:73:56:72: 15:7d:2a:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjYwNDE3MDUyNTA0WhcNMjYwNDI0MDUyNTA0WjAYMRYwFAYD VQQDEw02OWUxYzQzMC1kOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF3N7gTd5y5Aobv5HldGbBgIN9IgPW6nGKeNeBwyYftLS6rlxR2HQbguYYQb PnBV+bTWheJUxmYnp6B9aEk7TiQVw/RxOAd2rtf2JCvjWi3EprNPvUPudCQluWPf o2IEnb9wzIZ3pwCbieU7u3XJrWcHKWlHyZviBzO2afd64LMNckcOEhZ5H7QO5fnE 100pknTaotKTjnusdw0TDZJ4mwQ/WyQn1P93cAcm5P7EZZUOpC1h884VwEXl4Zja vMfXtIMT38coVEeMTJ88bzT/qwPai2tO2GIJJkZUhj24VPBG2rqfn7sJRSGgOlaR xluK7Jd1j2mo8oQiGTKccFnuzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWtqCnO tC0Gtn13ZFtKjZCnBF9JMB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjmoJ8/rBLs+I8NyD9zOwatRmFqt4w6OwESSk+/YGjFWetmRTHK/TSdcXFe8u 7Ku5863+UMTi7hPRRFg7qQyohPbKmWErxkc+1cEH3xmx89L81oRJnkk9K370lCPU buWBYF+DcORZdgkShZd4w/L4M7MwLGEOs3zxmlrysaEqY59OcV3Y3cMnDphVV0n9 EEK/XVHnn8wLLRbgtgDVHKljUkSEvu9Zdf7RFJ9FmdDQyg48uYX7k7NahcqnfM/e O79anLLCKiAvgzJZKMapHJkSGuU2n1RIvZfXNGVuxpmfrfQOdvvVbsSSLgqKE4Zv ADK/Nx6tVCWbKPM9c1ZyFX0qkQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:18:06 2026 by rpki-client