$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: ePwmO1Cv6QSzrrZvCE1bCTyNqzrdUiK7RoMn5O1qOCA= Subject key identifier: 0C:74:D1:D0:14:45:E9:20:67:21:74:FD:FD:3D:25:B8:07:66:6F:70 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 0281 Signing time: Fri 17 Apr 2026 01:36:46 +0000 Manifest this update: Fri 17 Apr 2026 01:36:46 +0000 Manifest next update: Fri 24 Apr 2026 01:36:46 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: kGeEXZbtHNx1IjHZPq4p74iTOcZazpW7CqKUHBL5dIM=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Apr 17 01:36:46 2026 GMT Not After : Apr 24 01:36:46 2026 GMT Subject: CN=69e18eae-19d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:cf:8c:ff:9e:16:e2:a7:53:7d:b7:55:b8: be:a7:4e:cf:cc:65:1f:27:b2:10:3d:8f:bd:e7:38: 93:56:2f:f6:81:a4:27:c9:ea:42:eb:5e:98:85:7b: 01:12:3a:7c:5f:c1:26:33:89:fc:04:73:f5:45:1a: a6:ab:0b:80:cc:73:24:8c:96:b7:dd:06:80:ae:7d: 52:ee:16:84:b7:ac:6f:b7:df:a3:ea:c1:b1:76:2a: a9:9a:47:9a:04:c2:66:7c:32:ef:a6:a2:5b:7f:9d: ac:57:3f:f3:43:70:6c:af:d2:8e:bb:e1:21:cb:51: 00:4c:5d:8a:08:d9:71:00:cb:b7:98:ed:0a:68:52: bf:62:18:7c:36:00:59:3f:17:eb:de:a2:10:ec:2d: 31:24:9b:77:f9:49:14:38:01:5a:12:48:64:2e:8b: ed:38:b0:de:87:52:a4:65:ef:69:de:11:c5:c1:5b: 14:5d:34:1f:d5:c4:4d:ab:a7:e0:7f:40:7d:51:99: fe:4a:43:c2:9b:28:3c:df:41:cc:b5:91:c7:f8:de: 27:c5:22:fc:08:aa:69:ea:3d:82:9f:c9:b6:89:e1: 7a:97:f4:67:6e:bd:91:e3:73:19:26:3f:18:a6:42: f6:eb:65:97:23:5b:4d:6d:30:90:06:a7:7e:d0:92: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:74:D1:D0:14:45:E9:20:67:21:74:FD:FD:3D:25:B8:07:66:6F:70 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:9c:e2:39:94:51:09:0e:21:70:64:37:f1:95:34:05:b8:e9: df:ea:5a:6a:80:d7:dd:10:1e:2a:3c:1a:1f:79:9c:df:9c:96: 08:e6:14:fb:77:3f:33:dd:d9:f6:25:01:90:cb:9c:69:81:63: 2d:18:36:a4:23:33:39:35:c3:a7:8c:16:25:3c:92:1b:5a:23: de:ed:c2:5c:57:3f:b0:b4:1d:39:bc:51:22:7c:91:80:8c:93: b3:7b:4b:05:72:cd:e6:57:aa:83:d6:e9:0c:1a:25:56:50:ea: 89:00:b8:2d:f3:00:9a:be:ba:46:5c:05:9c:6a:40:4d:22:71: 64:3e:2a:65:43:91:63:7f:54:d4:15:ad:da:83:73:dd:0e:fb: 2b:46:43:1d:e8:28:ee:9c:f5:96:de:54:ed:95:1e:38:a6:3b: 6a:ae:be:0b:72:48:e4:ce:c4:3a:d9:0e:65:4a:4a:13:21:f5: 41:51:46:d4:a0:7b:a1:67:6c:25:05:01:1c:d1:7d:2e:8d:a2: 63:25:c5:5d:f5:b7:c4:a5:3c:c0:1a:fb:de:6a:be:a1:62:3e: 5f:b6:b4:fe:bd:e6:94:db:47:fe:d5:1c:a9:f4:0f:ac:a0:be: 73:33:63:fd:5e:87:6d:96:36:3f:46:25:78:8f:94:2e:27:76: 66:b2:9f:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjYwNDE3MDEzNjQ2WhcNMjYwNDI0MDEzNjQ2WjAYMRYwFAYD VQQDEw02OWUxOGVhZS0xOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVLPjP+eFuKnU323Vbi+p07PzGUfJ7IQPY+95ziTVi/2gaQnyepC616YhXsB Ejp8X8EmM4n8BHP1RRqmqwuAzHMkjJa33QaArn1S7haEt6xvt9+j6sGxdiqpmkea BMJmfDLvpqJbf52sVz/zQ3Bsr9KOu+Ehy1EATF2KCNlxAMu3mO0KaFK/Yhh8NgBZ Pxfr3qIQ7C0xJJt3+UkUOAFaEkhkLovtOLDeh1KkZe9p3hHFwVsUXTQf1cRNq6fg f0B9UZn+SkPCmyg830HMtZHH+N4nxSL8CKpp6j2Cn8m2ieF6l/Rnbr2R43MZJj8Y pkL262WXI1tNbTCQBqd+0JK7IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAx00dAU RekgZyF0/f09JbgHZm9wMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs5ziOZRRCQ4hcGQ38ZU0Bbjp3+paaoDX3RAeKjwaH3mc35yWCOYU+3c/M93Z 9iUBkMucaYFjLRg2pCMzOTXDp4wWJTySG1oj3u3CXFc/sLQdObxRInyRgIyTs3tL BXLN5leqg9bpDBolVlDqiQC4LfMAmr66RlwFnGpATSJxZD4qZUORY39U1BWt2oNz 3Q77K0ZDHego7pz1lt5U7ZUeOKY7aq6+C3JI5M7EOtkOZUpKEyH1QVFG1KB7oWds JQUBHNF9Lo2iYyXFXfW3xKU8wBr73mq+oWI+X7a0/r3mlNtH/tUcqfQPrKC+czNj /V6HbZY2P0YleI+ULid2ZrKfDQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:50:15 2026 by rpki-client