$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: MEzfdreKfbcR5w8uEdezC/jVJMYowJOxgaV74Jch550= Subject key identifier: 97:69:EE:95:7F:CB:0B:AB:64:05:A2:E6:13:81:9D:D1:6A:59:0B:42 Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 17 Signing time: Sun 05 Apr 2026 08:19:01 +0000 Manifest this update: Sun 05 Apr 2026 08:19:00 +0000 Manifest next update: Sun 12 Apr 2026 08:19:00 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: h5+5HETkkc1yJDjQk8x3yxIC2DwLYClC1lB2fxO24Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: Apr 5 08:19:00 2026 GMT Not After : Apr 12 08:19:00 2026 GMT Subject: CN=69d21af4-0898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:d4:4f:17:19:5f:08:d0:e5:a5:f7:14:a9: a2:9e:34:6c:89:d6:74:6c:b9:de:17:da:0a:23:e2: 7c:74:23:24:ac:66:69:68:56:e0:86:7b:31:f5:f0: 55:51:53:fc:99:45:7b:e8:01:3d:b6:08:c5:38:b9: 35:05:ee:b0:bd:eb:ae:29:86:1e:f5:5d:de:8d:58: bf:c8:39:0f:33:26:90:1e:ce:22:2b:f1:c7:73:5b: a4:75:b3:fb:db:fc:af:e8:3a:39:75:70:ba:60:f5: 5e:e3:0d:51:0f:e8:5b:2b:48:27:3f:2f:2e:04:f2: af:01:7d:cc:af:56:21:ac:e5:93:cc:31:e3:5e:10: 8c:bd:43:8d:ad:b5:10:5a:16:a4:10:84:21:4e:14: 5a:07:34:10:02:ff:1e:ee:06:c7:e7:dc:d6:8a:de: 5c:74:97:00:1f:eb:e5:a5:df:5e:49:9a:8c:a3:a7: db:55:8b:3b:af:50:30:04:16:59:3a:83:75:63:5d: a7:10:0c:8f:00:6d:23:50:cd:d7:77:5c:b3:d7:d1: 9d:9a:d3:8e:f5:44:2f:3d:c4:96:67:cc:0a:45:aa: 17:67:25:58:be:a1:1c:46:00:c5:93:16:eb:6b:94: 3a:fa:3c:8a:16:a4:56:da:39:19:65:87:b8:49:cd: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:EE:95:7F:CB:0B:AB:64:05:A2:E6:13:81:9D:D1:6A:59:0B:42 X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b5:83:2a:c4:c9:fe:92:cc:ac:75:f5:91:85:9d:52:29:af: 31:eb:7f:2e:be:ff:14:21:13:dc:f5:7a:37:82:4a:5c:40:ae: ac:66:d5:95:55:25:69:97:a0:51:54:f1:d6:e4:86:0f:58:97: 31:4d:a7:1f:35:ad:dc:6d:bd:b6:55:b8:9a:75:10:10:3c:c9: 96:7c:b1:0c:3f:0f:9f:52:4a:f8:65:56:9f:ae:27:6a:7a:67: 85:59:65:59:43:ae:c6:e4:24:b8:34:bd:3a:e1:9e:ca:d9:2c: 0f:5d:be:a6:54:47:4a:a3:87:4f:ea:d0:b8:01:a9:75:3f:08: 0b:8f:fc:a0:5d:f7:24:d6:1e:28:54:8a:99:54:9b:57:57:4b: e2:e0:6e:b8:7b:c8:3d:fb:a7:ff:f2:da:ec:31:ea:83:a0:21: 95:be:61:c6:78:a2:d3:77:1f:97:c0:29:97:15:26:07:99:b8: 9f:c6:9b:08:94:8d:ff:ba:0b:71:7f:bf:55:15:8f:ea:6c:d3: 60:ae:c4:93:3b:ed:e3:69:30:98:2d:a2:87:2a:0a:2f:61:9e: 69:b1:19:31:d7:47:9f:31:25:fb:db:c0:1f:e2:2a:0d:d7:6e: 5b:7e:58:fb:ab:a1:5d:14:72:11:be:74:04:5b:d4:ce:f0:87: 58:c9:ee:58 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjA0MDUwODE5MDBaFw0yNjA0MTIwODE5MDBaMBgxFjAUBgNV BAMTDTY5ZDIxYWY0LTA4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmzNRPFxlfCNDlpfcUqaKeNGyJ1nRsud4X2goj4nx0IySsZmloVuCGezH18FVR U/yZRXvoAT22CMU4uTUF7rC9664phh71Xd6NWL/IOQ8zJpAeziIr8cdzW6R1s/vb /K/oOjl1cLpg9V7jDVEP6FsrSCc/Ly4E8q8BfcyvViGs5ZPMMeNeEIy9Q42ttRBa FqQQhCFOFFoHNBAC/x7uBsfn3NaK3lx0lwAf6+Wl315Jmoyjp9tVizuvUDAEFlk6 g3VjXacQDI8AbSNQzdd3XLPX0Z2a0471RC89xJZnzApFqhdnJVi+oRxGAMWTFutr lDr6PIoWpFbaORllh7hJzd45AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl2nulX/L C6tkBaLmE4Gd0WpZC0IwHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBetYMqxMn+ksysdfWRhZ1SKa8x638uvv8UIRPc9Xo3gkpcQK6sZtWVVSVpl6BR VPHW5IYPWJcxTacfNa3cbb22VbiadRAQPMmWfLEMPw+fUkr4ZVafridqemeFWWVZ Q67G5CS4NL064Z7K2SwPXb6mVEdKo4dP6tC4Aal1PwgLj/ygXfck1h4oVIqZVJtX V0vi4G64e8g9+6f/8trsMeqDoCGVvmHGeKLTdx+XwCmXFSYHmbifxpsIlI3/ugtx f79VFY/qbNNgrsSTO+3jaTCYLaKHKgovYZ5psRkx10efMSX728Af4ioN125bflj7 q6FdFHIRvnQEW9TO8IdYye5Y -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:18 2026 by rpki-client