$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: Kkz6cP0/BEulsuFrS50UknA2VoqEWwpm0DA7HLWuVuc= Subject key identifier: 6D:8F:D6:D5:13:1B:54:BE:5F:FE:87:8B:1C:2E:7D:78:EC:AC:F6:4F Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 1263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 1246 Signing time: Thu 16 Apr 2026 17:03:26 +0000 Manifest this update: Thu 16 Apr 2026 17:03:26 +0000 Manifest next update: Thu 23 Apr 2026 17:03:26 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: JBp3OG+DKOCiJUohvJfTsIpn3ere7p2HfWZ3f/owZt0=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: x14FGM59KBAJVApiuTvfAAn5zOSyd0j7HZF03bpVJMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4707 (0x1263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Apr 16 17:03:26 2026 GMT Not After : Apr 23 17:03:26 2026 GMT Subject: CN=69e1165e-f2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:19:2c:ff:ef:18:8d:d9:cb:89:51:b9:27: 2a:39:98:e9:c4:91:f5:24:5d:09:b0:fe:c3:e5:da: dd:07:e8:aa:70:ea:52:21:b3:29:43:e1:66:62:c3: 3f:46:b7:46:4e:6f:93:83:a4:7c:94:13:04:62:de: b6:65:c7:d7:a5:c5:f3:cf:07:6e:4b:b4:d5:0b:7f: bd:64:e3:95:06:a3:bc:96:89:a4:7d:05:cf:d6:99: 62:d1:dd:b6:a0:70:6a:9d:95:06:0a:8b:51:2a:13: dd:b0:d5:2e:0a:e5:f4:b1:ab:25:a6:bd:0c:6d:79: 0f:31:b3:42:5b:74:93:40:5a:10:68:c1:55:fa:61: 5b:52:43:2e:ad:f0:a2:bf:04:70:de:61:14:42:7b: 9c:1c:ed:a4:0d:7c:d2:c6:e0:0b:ba:d2:5c:0d:71: 7a:06:81:2c:61:35:0a:e7:08:d0:38:86:f4:80:aa: 40:80:18:c1:3e:b2:31:c5:a2:bc:33:01:f1:31:09: 93:9b:ac:a4:7e:3e:7c:30:b9:7f:f6:fb:79:2a:0c: 57:7c:89:f7:c9:f5:d3:ef:1c:d9:57:c2:6a:bd:ac: bf:36:2b:5f:c0:e1:b1:dc:f8:ec:e5:6c:61:09:50: 6d:ec:bd:d5:61:72:2c:35:19:89:48:2d:1f:f7:a4: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8F:D6:D5:13:1B:54:BE:5F:FE:87:8B:1C:2E:7D:78:EC:AC:F6:4F X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6f:92:75:a3:a1:ea:1d:89:aa:41:1e:0b:ef:7f:d3:2e:e5: e9:19:95:d1:89:f4:67:1e:64:dd:07:3f:be:84:39:e6:32:5a: a7:3b:18:b8:71:a3:93:27:95:9c:ec:b3:5f:96:b9:c6:40:38: 76:50:89:e2:80:7b:47:80:96:79:4d:f2:e6:42:0a:fd:1d:c1: 18:df:ac:85:6e:30:0e:23:9a:98:e4:e9:56:42:43:60:e9:0f: a1:ea:45:08:22:4b:54:1d:6c:eb:fa:8e:01:e9:86:c7:ed:d2: 34:35:d4:88:19:81:e2:69:f1:8f:8c:ac:27:4c:c7:60:a7:ca: 2c:93:46:07:20:38:9e:05:e6:86:b7:a8:7f:1b:f1:e3:5f:86: 42:c8:0f:0c:d7:d3:f6:fa:22:16:4c:d7:9d:5f:6e:0a:a0:ab: 88:86:69:47:b4:c1:41:49:d9:db:4a:ce:a3:37:54:a1:b1:eb: 12:f8:5a:31:b3:a7:b4:6c:cb:cd:5d:de:e3:2c:b6:21:e9:7f: 52:18:24:fd:03:4d:fa:d5:69:41:b0:76:f8:1c:b7:74:1f:e0: 1b:96:46:25:49:a1:6a:ca:a4:d0:3f:a7:39:f2:07:0c:dc:bf: 2e:0e:5b:50:24:5b:7a:61:07:6c:c1:9d:41:f6:3f:f1:63:60: f3:eb:58:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjYwNDE2MTcwMzI2WhcNMjYwNDIzMTcwMzI2WjAYMRYwFAYD VQQDEw02OWUxMTY1ZS1mMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OIZLP/vGI3Zy4lRuScqOZjpxJH1JF0JsP7D5drdB+iqcOpSIbMpQ+FmYsM/ RrdGTm+Tg6R8lBMEYt62ZcfXpcXzzwduS7TVC3+9ZOOVBqO8lomkfQXP1pli0d22 oHBqnZUGCotRKhPdsNUuCuX0saslpr0MbXkPMbNCW3STQFoQaMFV+mFbUkMurfCi vwRw3mEUQnucHO2kDXzSxuALutJcDXF6BoEsYTUK5wjQOIb0gKpAgBjBPrIxxaK8 MwHxMQmTm6ykfj58MLl/9vt5KgxXfIn3yfXT7xzZV8Jqvay/NitfwOGx3Pjs5Wxh CVBt7L3VYXIsNRmJSC0f96QcCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2P1tUT G1S+X/6HixwufXjsrPZPMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmW+SdaOh6h2JqkEeC+9/0y7l6RmV0Yn0Zx5k3Qc/voQ55jJapzsYuHGjkyeV nOyzX5a5xkA4dlCJ4oB7R4CWeU3y5kIK/R3BGN+shW4wDiOamOTpVkJDYOkPoepF CCJLVB1s6/qOAemGx+3SNDXUiBmB4mnxj4ysJ0zHYKfKLJNGByA4ngXmhreofxvx 41+GQsgPDNfT9voiFkzXnV9uCqCriIZpR7TBQUnZ20rOozdUobHrEvhaMbOntGzL zV3e4yy2Iel/Uhgk/QNN+tVpQbB2+By3dB/gG5ZGJUmhasqk0D+nOfIHDNy/Lg5b UCRbemEHbMGdQfY/8WNg8+tY6Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:33:09 2026 by rpki-client