$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: hldVy6EB+j7lBo3evPo+2MoRsohBktt60g5UPm7b54M= Subject key identifier: 7C:E8:1B:9B:12:CF:C1:7C:59:B7:9C:47:78:B5:70:99:1B:FF:87:2A Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0CEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0CD1 Signing time: Thu 16 Apr 2026 18:17:34 +0000 Manifest this update: Thu 16 Apr 2026 18:17:33 +0000 Manifest next update: Thu 23 Apr 2026 18:17:33 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: CRirpCkolp2b5h8pjC/q0cOqUBVO+FvlEZLheCk4FPo=) 2: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=) 3: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=) 4: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Apr 16 18:17:33 2026 GMT Not After : Apr 23 18:17:33 2026 GMT Subject: CN=69e127bd-0e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:66:39:f5:31:b9:45:44:6d:e0:4b:d4:08:6d: 92:69:ec:3d:3b:cd:1f:45:53:4f:84:b0:7e:35:f7: ad:3a:b1:8a:de:3c:59:c5:fb:78:c5:13:59:ff:0c: 10:2e:a0:99:59:7f:42:d0:c6:cb:ee:20:b0:e4:cf: 4f:b7:cc:94:68:fe:f3:89:41:a3:a2:e5:68:78:1d: b2:d6:70:20:dc:c0:55:01:fa:61:af:de:b5:d0:71: 78:87:3b:f1:bc:a5:30:a8:a6:0e:da:4e:9c:12:38: 22:cf:92:2c:27:07:5e:f2:49:68:a0:49:60:07:17: af:c3:a8:01:2e:e9:62:ae:65:ac:16:e6:0c:bf:3e: e8:80:49:2c:16:3f:e4:74:e3:43:19:26:03:91:b4: c0:52:af:c0:15:50:42:77:f1:4d:12:c4:10:11:98: 8e:e2:07:8a:89:c3:01:22:5b:0b:a6:22:70:df:ae: d8:7d:37:56:39:12:28:b6:cf:ab:1b:74:c5:10:cc: f8:3b:f7:97:00:69:40:66:99:78:1e:6c:b1:d1:d1: a5:a5:c1:4b:d1:ba:a3:c9:24:0a:f7:a8:62:17:1c: 0a:3f:4d:7c:ce:de:75:b0:3d:17:d7:b9:02:fc:7c: 5b:90:be:f3:e4:15:da:55:67:d4:58:4e:f3:ab:2c: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E8:1B:9B:12:CF:C1:7C:59:B7:9C:47:78:B5:70:99:1B:FF:87:2A X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:32:6f:dc:e6:36:9f:ef:c9:8b:e0:51:72:4b:b3:28:54: b2:83:00:0f:2c:06:ca:95:c9:67:87:6d:af:23:bd:b7:d3:77: 79:76:12:ae:84:67:d4:a7:d8:fa:14:8b:cf:f8:19:48:03:aa: 5c:10:12:51:f6:d5:71:a1:1b:5e:42:4b:e8:44:a5:66:64:72: 52:95:c1:c0:46:b6:f3:9d:e9:d0:a7:dc:03:37:16:27:96:0a: 93:55:39:0f:28:c5:a3:e0:6a:d7:1f:a9:31:85:09:e8:10:1d: a2:06:7d:9a:8a:86:97:22:02:85:4c:30:7e:5f:25:e0:4f:0c: 34:51:09:21:80:8d:69:6b:e2:c4:7f:b2:f5:af:3b:69:29:4c: 0e:30:86:b4:d4:1e:d3:d8:20:da:58:5e:df:37:06:24:09:f6: c5:6d:d6:c7:3a:e1:f0:1f:44:80:ef:2f:cd:2a:01:d9:10:44: 9e:be:3e:f3:d0:40:d6:d5:18:51:98:55:6b:57:37:ae:50:1f: 56:7a:d5:21:a3:37:d8:43:8f:ff:4a:0f:69:7c:a1:39:bb:dd: c5:5b:a8:f0:bc:40:ba:38:64:a9:35:98:35:5e:7f:47:cb:85: e1:a3:26:89:5a:37:b4:f9:f8:bd:f7:f3:aa:fa:d6:8b:eb:4c: d2:88:cf:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwNDE2MTgxNzMzWhcNMjYwNDIzMTgxNzMzWjAYMRYwFAYD VQQDEw02OWUxMjdiZC0wZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/GY59TG5RURt4EvUCG2Saew9O80fRVNPhLB+NfetOrGK3jxZxft4xRNZ/wwQ LqCZWX9C0MbL7iCw5M9Pt8yUaP7ziUGjouVoeB2y1nAg3MBVAfphr9610HF4hzvx vKUwqKYO2k6cEjgiz5IsJwde8klooElgBxevw6gBLulirmWsFuYMvz7ogEksFj/k dONDGSYDkbTAUq/AFVBCd/FNEsQQEZiO4geKicMBIlsLpiJw367YfTdWORIots+r G3TFEMz4O/eXAGlAZpl4Hmyx0dGlpcFL0bqjySQK96hiFxwKP018zt51sD0X17kC /HxbkL7z5BXaVWfUWE7zqyyEHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzoG5sS z8F8WbecR3i1cJkb/4cqMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZ8yb9zmNp/vyYvgUXJLsyhUsoMADywGypXJZ4dtryO9t9N3eXYSroRn1KfY +hSLz/gZSAOqXBASUfbVcaEbXkJL6ESlZmRyUpXBwEa2853p0KfcAzcWJ5YKk1U5 DyjFo+Bq1x+pMYUJ6BAdogZ9moqGlyIChUwwfl8l4E8MNFEJIYCNaWvixH+y9a87 aSlMDjCGtNQe09gg2lhe3zcGJAn2xW3Wxzrh8B9EgO8vzSoB2RBEnr4+89BA1tUY UZhVa1c3rlAfVnrVIaM32EOP/0oPaXyhObvdxVuo8LxAujhkqTWYNV5/R8uF4aMm iVo3tPn4vffzqvrWi+tM0ojPiQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:13:08 2026 by rpki-client