$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: CvqrTCrN79Bm+QvWrQ3JzobY7lFaG0o/dIBMu965g5U= Subject key identifier: E7:91:00:CE:16:D9:FC:52:FD:B9:A6:BE:42:45:80:E0:EC:B6:F7:86 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 0113 Signing time: Fri 17 Apr 2026 05:43:41 +0000 Manifest this update: Fri 17 Apr 2026 05:43:41 +0000 Manifest next update: Fri 24 Apr 2026 05:43:41 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: 0U3cAaVoLPEeqw8MKU99HyYrb9ZbS/ZINnMi2UeUlkI=) 2: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=) 3: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Apr 17 05:43:41 2026 GMT Not After : Apr 24 05:43:41 2026 GMT Subject: CN=69e1c88d-26f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:25:87:ae:44:a6:42:95:ac:c6:05:fe:1a: 17:9f:3a:4f:9f:c0:82:5b:6d:b8:fc:9f:cd:8f:90: fd:c5:de:da:70:58:03:a0:58:4f:84:07:6b:2d:91: 61:2a:8f:37:0a:7e:2c:b0:db:c9:ae:60:6e:a6:24: 14:7b:d4:c8:c6:9e:ac:cc:fc:13:3b:5a:20:4c:4e: 54:80:ba:17:4d:15:e8:e9:18:23:1a:39:ef:e3:79: 13:fa:c9:06:df:fa:d3:2e:e1:f2:bf:35:5e:1c:a1: 66:f2:e5:7f:04:32:ec:19:56:49:b9:bd:af:a4:fa: d5:f0:23:85:54:ee:df:ed:3e:e6:65:37:3c:bc:d6: ff:14:36:69:70:cb:26:f5:00:3c:a5:8f:f8:f1:03: ce:a0:0b:fe:15:61:76:08:36:f7:d2:eb:8e:5f:58: 88:bc:33:0a:39:39:b4:95:28:dc:a8:67:ec:d3:fb: c0:fe:4b:68:b7:93:d8:15:f9:85:e0:6d:80:92:ec: 9b:3b:1c:e7:b2:a1:97:35:93:57:f3:19:be:d3:8c: 9e:2a:4e:c3:87:ef:31:a3:e7:f6:e9:22:69:33:44: 46:d4:42:e6:47:8f:98:fd:84:1a:a4:ff:bc:af:90: b0:5a:1f:91:92:17:2a:11:7a:59:ee:fc:10:be:cc: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:00:CE:16:D9:FC:52:FD:B9:A6:BE:42:45:80:E0:EC:B6:F7:86 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:06:f1:16:54:86:e7:e6:73:89:12:98:f0:c4:ef:4e:67:0f: 56:d5:9a:7e:00:77:24:2e:5c:ce:ad:b9:43:bb:cd:23:8b:dd: 83:41:5f:8c:ce:92:dd:7d:7a:99:56:31:95:46:71:2d:af:17: d5:bc:2c:f7:c9:b4:1d:79:b5:0e:ee:4c:fb:39:cd:7a:93:57: fc:84:70:7f:ef:1c:e3:d6:07:18:21:54:db:77:71:33:8b:86: 0a:5b:ab:66:0c:db:23:b0:7e:f2:e8:5b:34:89:dd:3c:b9:b6: 9d:25:3a:48:a9:40:b5:d8:2d:ed:dd:71:d6:68:80:73:79:17: 79:58:4b:09:bd:4d:d1:4c:50:57:55:a9:6e:c6:64:b6:58:9c: ab:2a:3b:0b:4f:ff:f7:34:88:ed:c3:8a:49:d7:9c:8e:ee:02: d9:e1:84:43:cb:d9:2c:69:f2:4f:0a:ca:2b:93:1f:70:b8:b8: d0:b8:da:46:8d:83:54:51:af:9b:61:c7:38:89:ee:ea:86:21: 99:62:5e:b1:05:3f:6b:d1:b1:78:2e:8d:a9:9f:60:2a:5b:90: 32:73:b0:89:3c:42:59:14:51:98:9c:86:e3:31:e8:15:38:7a: 32:c5:fa:9d:82:37:ca:e1:bc:78:9d:88:74:a7:98:f5:52:00: 50:f7:9f:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjYwNDE3MDU0MzQxWhcNMjYwNDI0MDU0MzQxWjAYMRYwFAYD VQQDEw02OWUxYzg4ZC0yNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIYlh65EpkKVrMYF/hoXnzpPn8CCW224/J/Nj5D9xd7acFgDoFhPhAdrLZFh Ko83Cn4ssNvJrmBupiQUe9TIxp6szPwTO1ogTE5UgLoXTRXo6RgjGjnv43kT+skG 3/rTLuHyvzVeHKFm8uV/BDLsGVZJub2vpPrV8COFVO7f7T7mZTc8vNb/FDZpcMsm 9QA8pY/48QPOoAv+FWF2CDb30uuOX1iIvDMKOTm0lSjcqGfs0/vA/ktot5PYFfmF 4G2AkuybOxznsqGXNZNX8xm+04yeKk7Dh+8xo+f26SJpM0RG1ELmR4+Y/YQapP+8 r5CwWh+RkhcqEXpZ7vwQvswK9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeRAM4W 2fxS/bmmvkJFgODstveGMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkgbxFlSG5+ZziRKY8MTvTmcPVtWafgB3JC5czq25Q7vNI4vdg0FfjM6S3X16 mVYxlUZxLa8X1bws98m0HXm1Du5M+znNepNX/IRwf+8c49YHGCFU23dxM4uGClur ZgzbI7B+8uhbNIndPLm2nSU6SKlAtdgt7d1x1miAc3kXeVhLCb1N0UxQV1WpbsZk tlicqyo7C0//9zSI7cOKSdecju4C2eGEQ8vZLGnyTwrKK5MfcLi40LjaRo2DVFGv m2HHOInu6oYhmWJesQU/a9GxeC6NqZ9gKluQMnOwiTxCWRRRmJyG4zHoFTh6MsX6 nYI3yuG8eJ2IdKeY9VIAUPefDw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:48 2026 by rpki-client