$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: YTEQcfj27znPDEkry46upkkHxkOTc4Wai0Iw5KRf7b8= Subject key identifier: 14:4F:FD:FF:C4:62:78:67:AA:DC:8C:02:D1:E0:B2:A9:1A:FC:DD:FB Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 01E9 Signing time: Fri 17 Apr 2026 03:05:23 +0000 Manifest this update: Fri 17 Apr 2026 03:05:23 +0000 Manifest next update: Fri 24 Apr 2026 03:05:23 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: wJwqOMBaFRxcGPxptmjNdl0LLWfMXikyhy0OWzsRw+o=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Apr 17 03:05:23 2026 GMT Not After : Apr 24 03:05:23 2026 GMT Subject: CN=69e1a373-e9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:f2:e9:61:2a:25:3f:b6:51:01:f6:fc:21: 74:b8:15:bc:ae:cf:de:9a:32:47:8b:d3:be:65:6d: 26:80:ce:bd:02:e3:01:71:ea:ec:42:19:03:6f:11: ef:15:20:78:46:6b:83:c1:a7:0b:12:11:dc:72:43: 23:b6:1d:29:a3:40:e8:5e:5b:5d:ba:17:d6:13:92: 34:21:7e:c6:f9:d2:19:88:ee:b5:f0:6d:59:17:be: 93:61:17:82:6c:5f:5c:df:ce:b6:ac:e9:87:e5:36: ef:aa:4d:4a:21:cc:82:ac:79:78:34:f3:0b:6f:13: b3:9e:ea:46:ef:fa:d9:1c:03:bc:f3:ed:46:6a:ee: fe:cf:22:be:b2:4c:2a:58:6e:dd:73:13:de:24:96: f1:b0:f8:db:df:15:e4:5b:35:67:32:90:ee:b9:d8: 5e:8e:f0:e3:20:ad:5b:1e:05:ca:3a:8c:aa:d5:55: 8b:9d:0d:28:27:7f:b9:7e:8f:55:4d:0c:6f:16:6c: 9f:13:f8:83:47:ee:84:6b:1c:d4:fe:77:6b:58:31: f6:e5:6c:c6:2f:90:9b:79:8f:c5:7b:18:a6:8f:87: f3:39:be:6f:b2:11:92:34:ac:76:8b:d1:b7:51:a8: 67:9f:1f:e6:5b:02:16:9f:09:73:78:4b:bd:29:52: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:FD:FF:C4:62:78:67:AA:DC:8C:02:D1:E0:B2:A9:1A:FC:DD:FB X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:f3:8f:b0:07:b5:fd:f4:e9:b5:4a:f9:2f:9f:f5:22:ae:e0: 37:15:f6:06:ba:8f:0e:6d:8b:06:6a:74:30:a8:ca:6f:9b:40: 8f:b3:75:6e:06:87:4a:f0:f4:6d:d4:43:60:69:8a:20:14:d4: 97:02:09:f4:10:2c:e8:cf:6a:2e:68:10:20:01:14:a2:21:e6: a4:3c:c8:00:17:4b:9b:07:68:c2:d1:36:1e:7b:28:3b:ff:13: d4:8f:e6:6c:e3:75:d1:b5:32:ac:40:cc:e0:24:51:bf:dc:30: a2:df:c1:8a:ee:74:e5:ff:22:d9:8f:e7:99:e7:00:f9:68:09: b0:c2:21:ab:e5:0b:6c:4b:6d:19:42:ce:aa:dd:90:66:0f:d1: b8:dd:fb:bc:91:42:58:a1:c0:b1:3d:60:37:25:e9:54:0e:a4: 23:37:11:db:61:6b:29:9f:4c:52:83:67:e9:d1:66:e3:30:d7: 77:66:88:4a:04:ee:a8:06:a6:73:08:9c:84:ac:c5:89:08:75: ea:87:ee:5e:c5:4c:90:bc:9d:a1:a1:70:31:74:69:aa:3b:a3: 1c:05:7a:41:cc:aa:69:5b:fb:c1:49:f9:4b:f9:0e:ab:2e:e2: 58:4a:6f:a0:63:e2:84:c6:c2:ac:71:07:90:7f:3b:fd:49:ab: 31:59:c0:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwNDE3MDMwNTIzWhcNMjYwNDI0MDMwNTIzWjAYMRYwFAYD VQQDEw02OWUxYTM3My1lOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj9fy6WEqJT+2UQH2/CF0uBW8rs/emjJHi9O+ZW0mgM69AuMBcersQhkDbxHv FSB4RmuDwacLEhHcckMjth0po0DoXltduhfWE5I0IX7G+dIZiO618G1ZF76TYReC bF9c3862rOmH5Tbvqk1KIcyCrHl4NPMLbxOznupG7/rZHAO88+1Gau7+zyK+skwq WG7dcxPeJJbxsPjb3xXkWzVnMpDuudhejvDjIK1bHgXKOoyq1VWLnQ0oJ3+5fo9V TQxvFmyfE/iDR+6EaxzU/ndrWDH25WzGL5CbeY/Feximj4fzOb5vshGSNKx2i9G3 Uahnnx/mWwIWnwlzeEu9KVIaTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRP/f/E YnhnqtyMAtHgsqka/N37MB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwfOPsAe1/fTptUr5L5/1Iq7gNxX2BrqPDm2LBmp0MKjKb5tAj7N1bgaHSvD0 bdRDYGmKIBTUlwIJ9BAs6M9qLmgQIAEUoiHmpDzIABdLmwdowtE2HnsoO/8T1I/m bON10bUyrEDM4CRRv9wwot/Biu505f8i2Y/nmecA+WgJsMIhq+ULbEttGULOqt2Q Zg/RuN37vJFCWKHAsT1gNyXpVA6kIzcR22FrKZ9MUoNn6dFm4zDXd2aISgTuqAam cwichKzFiQh16ofuXsVMkLydoaFwMXRpqjujHAV6QcyqaVv7wUn5S/kOqy7iWEpv oGPihMbCrHEHkH87/UmrMVnAWw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:10:36 2026 by rpki-client