$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: KJCpohmmT5g5UtZkl34kBrbaHA6uFcqvcHtb2GVwfPU= Subject key identifier: 47:05:4B:5E:E6:D9:A8:7B:70:6C:E4:9A:17:19:5F:F0:D8:E5:80:37 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 0909 Signing time: Thu 16 Apr 2026 17:52:32 +0000 Manifest this update: Thu 16 Apr 2026 17:52:31 +0000 Manifest next update: Thu 23 Apr 2026 17:52:31 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: 1a4EHi9XJYwhPnf+jEDuKY6codxXAhVBLm+bDHSoyiY=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) 4: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Apr 16 17:52:31 2026 GMT Not After : Apr 23 17:52:31 2026 GMT Subject: CN=69e121e0-7cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:74:45:0f:71:64:aa:95:d2:53:76:69:92: 23:fa:31:dc:f7:a1:18:7c:bc:c7:3b:fb:c1:da:12: 06:22:28:cd:c5:34:40:cc:12:cf:a4:72:14:02:ae: f7:97:a6:27:17:0d:bd:ad:f6:e0:ed:f2:ec:c5:01: 72:b9:01:7f:46:47:1d:be:aa:59:e8:66:3f:75:e7: 90:21:f3:c4:2b:3d:a2:4f:93:31:62:59:64:9c:8c: 4c:c4:be:ae:86:ef:cd:bd:8c:52:36:4c:ef:87:be: 0d:94:13:15:a1:6a:b3:68:fd:03:42:f5:bd:60:f0: 50:c6:a0:49:b3:a5:3b:39:3e:fb:26:20:71:a3:aa: e1:10:a0:b3:e9:41:96:61:87:b1:42:2c:f5:ea:33: 52:d7:52:66:bc:56:ce:fa:0e:88:c8:46:32:9d:ce: 80:ba:46:e6:05:dc:25:e7:48:9a:c5:09:e5:c0:5e: c3:fc:af:96:0c:a1:d4:69:5b:9b:4f:b3:c7:eb:05: e1:2a:ff:db:08:1e:2b:cf:e5:95:4c:a0:77:38:0c: d3:1e:5d:4e:a4:12:35:89:47:fc:da:24:d4:e3:0c: bb:c5:4b:48:7c:a4:46:2a:05:82:2b:31:5a:b9:75: 53:7b:8a:aa:07:ab:74:a8:cc:47:2d:e1:d5:12:f2: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:4B:5E:E6:D9:A8:7B:70:6C:E4:9A:17:19:5F:F0:D8:E5:80:37 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:57:81:d7:3f:2e:c9:a5:6f:20:8d:87:b3:8b:b4:7c:75:19: 6c:4f:ee:70:ea:2a:dd:33:eb:f0:d7:85:d9:00:f9:d7:39:a3: e6:73:af:a0:21:07:60:bd:0e:20:00:96:6a:2e:97:fd:3c:92: 89:a1:2a:df:6a:5e:07:13:18:d1:99:fb:b7:3c:2c:f5:98:7c: cb:71:34:b7:a4:d9:b6:a2:c9:52:23:e6:9e:5a:36:e7:70:85: ad:7e:9f:b5:51:15:16:0a:21:16:eb:c4:6a:83:e2:93:e7:f2: ac:1d:fe:30:97:b8:e5:39:0d:e7:1d:84:cf:b2:d8:1e:42:6c: c2:e7:9d:db:85:df:a9:2a:81:16:44:0e:f0:e6:ae:d7:88:08: 70:92:aa:eb:97:41:b8:42:63:b3:d0:ad:5a:b2:3b:19:af:e1: 05:14:e1:0e:73:50:7d:df:15:ee:4b:d7:6b:59:03:e4:cb:3a: 76:12:8d:81:f6:c5:7d:76:97:a0:ae:2d:9a:fa:07:80:0e:39: 54:4b:50:10:5f:55:7c:f2:d4:cd:7e:53:3b:1b:65:15:d5:c4: fc:b1:cd:2f:d3:f6:1e:03:50:bb:9c:62:cb:22:c4:ee:57:28: a5:40:3b:be:23:95:06:cc:30:7e:ac:7b:3d:ec:c7:95:70:8e: be:9d:07:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwNDE2MTc1MjMxWhcNMjYwNDIzMTc1MjMxWjAYMRYwFAYD VQQDEw02OWUxMjFlMC03Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytZ0RQ9xZKqV0lN2aZIj+jHc96EYfLzHO/vB2hIGIijNxTRAzBLPpHIUAq73 l6YnFw29rfbg7fLsxQFyuQF/RkcdvqpZ6GY/deeQIfPEKz2iT5MxYllknIxMxL6u hu/NvYxSNkzvh74NlBMVoWqzaP0DQvW9YPBQxqBJs6U7OT77JiBxo6rhEKCz6UGW YYexQiz16jNS11JmvFbO+g6IyEYync6AukbmBdwl50iaxQnlwF7D/K+WDKHUaVub T7PH6wXhKv/bCB4rz+WVTKB3OAzTHl1OpBI1iUf82iTU4wy7xUtIfKRGKgWCKzFa uXVTe4qqB6t0qMxHLeHVEvIWBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcFS17m 2ah7cGzkmhcZX/DY5YA3MB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgVeB1z8uyaVvII2Hs4u0fHUZbE/ucOoq3TPr8NeF2QD51zmj5nOvoCEHYL0O IACWai6X/TySiaEq32peBxMY0Zn7tzws9Zh8y3E0t6TZtqLJUiPmnlo253CFrX6f tVEVFgohFuvEaoPik+fyrB3+MJe45TkN5x2Ez7LYHkJswued24XfqSqBFkQO8Oau 14gIcJKq65dBuEJjs9CtWrI7Ga/hBRThDnNQfd8V7kvXa1kD5Ms6dhKNgfbFfXaX oK4tmvoHgA45VEtQEF9VfPLUzX5TOxtlFdXE/LHNL9P2HgNQu5xiyyLE7lcopUA7 viOVBswwfqx7PezHlXCOvp0HJg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:36:01 2026 by rpki-client