$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft File: ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json) Hash identifier: Y/nadf9DItQkoy/70vWUeVtAx6ocXp0xOnYXA2alb+c= Subject key identifier: 4A:3E:F9:E9:D5:33:EF:8A:AD:6B:A3:D1:F8:2A:7C:C6:E7:2B:6A:EF Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft Manifest number: 92 Signing time: Sun 05 Apr 2026 06:54:01 +0000 Manifest this update: Sun 05 Apr 2026 06:54:00 +0000 Manifest next update: Sun 12 Apr 2026 06:54:00 +0000 Files and hashes: 1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: +awjAvJeJKM7QMM5CaQ8ZbWU4bPN3TLO/KD4YN9O2aE=) 2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: b7KSMqHlW/fLzJCiZxf5k1GieLFoYTeHx+A/fvcNQj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE Validity Not Before: Apr 5 06:54:00 2026 GMT Not After : Apr 12 06:54:00 2026 GMT Subject: CN=69d20708-ee22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:cc:d9:d1:a7:4b:84:3b:e7:2c:34:6a:c9: e0:f4:aa:9b:e4:d9:cd:f6:2e:42:84:99:28:f2:64: 0f:a7:94:c1:d4:2a:e3:9c:4c:5f:63:cb:2e:38:74: 07:aa:a1:44:ab:f2:ae:da:bb:e6:b4:7c:ea:94:4e: df:aa:ac:37:e5:4b:f7:55:1e:4d:38:52:7b:36:51: 23:ff:40:13:a6:53:ff:80:d1:e4:d7:fa:f8:6e:80: 2e:2a:90:ee:a1:b6:bd:f3:f2:ad:64:17:54:b7:69: a8:21:73:8a:d2:19:ca:81:d6:32:48:c5:bd:43:41: f5:45:7c:45:b4:f8:fa:48:a6:fc:e8:35:b0:55:25: d7:d5:38:da:eb:38:be:00:8d:24:45:c0:64:35:51: e1:2a:b2:3b:76:8f:86:e0:c7:ae:ab:d4:e9:7a:65: 2b:59:15:36:da:70:fe:e9:76:9d:6f:0b:db:ff:58: 6e:bd:b4:5f:5d:f2:d2:7f:b0:1d:cc:f0:e7:8f:e0: 54:56:6b:c5:df:90:9c:1f:6f:f0:da:58:dc:15:2e: a1:35:9d:73:88:63:60:6d:6c:2f:f1:ef:fb:8f:d4: ca:1f:d3:03:76:fb:a7:f9:9d:f6:91:36:86:0f:e5: fa:db:8d:52:ea:30:22:47:e4:c4:fb:ef:b8:07:44: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:F9:E9:D5:33:EF:8A:AD:6B:A3:D1:F8:2A:7C:C6:E7:2B:6A:EF X509v3 Authority Key Identifier: keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1e:a6:50:a5:bf:95:06:a5:bf:fa:cc:dd:2e:c1:01:f6:4d: 58:b5:1c:64:02:78:08:77:d0:0f:39:70:7d:02:8e:4a:2c:c5: 7c:8f:ee:ae:21:fd:e2:62:a8:8a:fc:60:74:b4:98:48:b6:1b: c9:cc:43:e3:e6:e5:6b:e0:f2:43:51:23:cb:1b:9d:3d:3e:44: f9:c7:f3:02:f2:52:34:b7:e7:40:04:db:ee:70:16:34:34:2d: 81:b2:70:ae:40:95:12:ad:78:f1:12:d0:ac:61:de:05:92:52: 15:dd:c9:80:7e:7c:9c:65:c3:3f:6d:c7:93:d7:85:89:bf:a6: d8:58:d4:33:37:82:1d:54:ff:9b:f3:88:eb:3b:f1:76:05:49: 27:dc:34:d0:01:cf:2a:cb:09:2c:d1:ea:63:c5:07:6b:83:4a: 56:f1:3b:97:34:65:b3:ce:dc:b5:7a:39:93:4b:7d:47:09:d1: 90:27:83:be:bf:c9:4f:13:06:13:c7:98:eb:37:27:fc:72:f5: 69:e0:9b:4c:ee:40:eb:74:f6:b1:8c:b0:98:26:ee:87:7a:a8: ab:06:8f:63:00:d3:b9:80:09:b1:5e:13:be:59:b0:98:34:95: 05:06:8e:e3:ee:a4:0b:bf:4d:65:43:70:95:e4:fa:43:b5:7a: cc:86:1f:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZDNUMxMTAvBgNVBAUTKDcyREFCN0NFQkU4QTdGMjc4OERFNzgyRURBNzAxRTQ2 N0Q4Qzc4REUwHhcNMjYwNDA1MDY1NDAwWhcNMjYwNDEyMDY1NDAwWjAYMRYwFAYD VQQDEw02OWQyMDcwOC1lZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ/M2dGnS4Q75yw0asng9Kqb5NnN9i5ChJko8mQPp5TB1CrjnExfY8suOHQH qqFEq/Ku2rvmtHzqlE7fqqw35Uv3VR5NOFJ7NlEj/0ATplP/gNHk1/r4boAuKpDu oba98/KtZBdUt2moIXOK0hnKgdYySMW9Q0H1RXxFtPj6SKb86DWwVSXX1Tja6zi+ AI0kRcBkNVHhKrI7do+G4Meuq9TpemUrWRU22nD+6Xadbwvb/1huvbRfXfLSf7Ad zPDnj+BUVmvF35CcH2/w2ljcFS6hNZ1ziGNgbWwv8e/7j9TKH9MDdvun+Z32kTaG D+X6241S6jAiR+TE+++4B0R9RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEo++enV M++KrWuj0fgqfMbnK2rvMB8GA1UdIwQYMBaAFHLat86+in8niN54LtpwHkZ9jHje MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkM1Qy8zNjM3ODhFQzVD QjAxMUYwQjc0NDI1MzlDNEY5QUUwMi9jdHEzenI2S2Z5ZUkzbmd1Mm5BZVJuMk1l TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0cTN6cjZLZnllSTNuZ3UybkFlUm4yTWVONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkM1Qy8zNjM3ODhFQzVDQjAxMUYwQjc0NDI1MzlDNEY5QUUwMi9jdHEzenI2S2Z5 ZUkzbmd1Mm5BZVJuMk1lTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZR6mUKW/lQalv/rM3S7BAfZNWLUcZAJ4CHfQDzlwfQKOSizFfI/uriH94mKo ivxgdLSYSLYbycxD4+bla+DyQ1EjyxudPT5E+cfzAvJSNLfnQATb7nAWNDQtgbJw rkCVEq148RLQrGHeBZJSFd3JgH58nGXDP23Hk9eFib+m2FjUMzeCHVT/m/OI6zvx dgVJJ9w00AHPKssJLNHqY8UHa4NKVvE7lzRls87ctXo5k0t9RwnRkCeDvr/JTxMG E8eY6zcn/HL1aeCbTO5A63T2sYywmCbuh3qoqwaPYwDTuYAJsV4TvlmwmDSVBQaO 4+6kC79NZUNwleT6Q7V6zIYfcw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:04 2026 by rpki-client