$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft File: TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json) Hash identifier: V33p/K4Zd3YedfnfBm1WhLVX+cbjYBJqTCUQO62Un2A= Subject key identifier: 4C:09:A1:86:4E:9A:F7:C7:3C:F9:52:0B:25:34:CD:FD:D4:BD:76:9E Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71 Certificate issuer: /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft Manifest number: 0C Signing time: Sun 05 Apr 2026 08:27:01 +0000 Manifest this update: Sun 05 Apr 2026 08:27:01 +0000 Manifest next update: Sun 12 Apr 2026 08:27:01 +0000 Files and hashes: 1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: 5DhcVCLqbb/M5w2qTpKpFkaIRm2hwvMdboigK16E2ew=) 2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971 Validity Not Before: Apr 5 08:27:01 2026 GMT Not After : Apr 12 08:27:01 2026 GMT Subject: CN=69d21cd5-5e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:61:7d:72:c2:2f:ee:cc:45:49:88:59:97:66: 33:d6:38:be:d7:5d:b1:df:c1:49:04:25:7c:f8:8d: 71:fe:5c:0a:34:49:4c:94:03:27:9b:25:3e:9e:6d: 85:c2:45:38:47:d4:7f:8b:34:36:ab:24:0c:63:bd: ad:41:38:f4:0f:96:33:d6:ad:99:d5:0d:d7:fe:51: 6e:d0:55:a0:84:bd:40:a1:09:e7:3c:a8:a2:23:4f: 82:ad:8c:1d:2f:8d:3d:aa:e0:5d:30:a1:cf:25:7a: 19:ae:2c:31:96:47:b6:8f:8d:09:70:e8:6b:d6:19: 45:c0:8c:ff:1d:7c:0a:29:67:32:b1:ef:9c:10:3d: b2:46:0f:d6:de:60:42:8f:5c:95:b0:2f:60:4b:1b: c4:6a:58:fd:2f:64:aa:df:8e:29:7e:c8:e9:27:86: 1d:38:cb:5d:26:2c:c0:e1:e4:5f:22:9c:77:d5:34: 33:1c:76:ff:de:14:48:b3:e8:42:9b:79:c9:9e:4d: 2e:fe:69:e9:09:06:44:9b:56:6d:f9:af:d2:04:7f: a9:83:33:52:4a:38:0b:f1:ea:45:65:83:ed:42:bb: ff:c7:59:37:19:0f:9c:5f:31:99:78:3f:2e:3a:80: da:4a:6c:61:ca:f1:23:a7:61:38:3f:78:de:5b:14: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:09:A1:86:4E:9A:F7:C7:3C:F9:52:0B:25:34:CD:FD:D4:BD:76:9E X509v3 Authority Key Identifier: keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3b:db:ca:02:81:d9:0a:5e:53:b8:98:53:c4:20:cf:80:70: e3:45:76:e2:28:cd:ee:12:6d:c1:9f:07:93:b1:17:68:fe:e9: 30:c1:97:f8:f1:52:0f:4f:1f:62:6e:d1:e1:ea:ab:fc:82:e9: 12:9d:71:9c:6d:03:59:5f:26:34:38:22:c1:b3:0e:1d:54:1d: 2d:53:ca:aa:c5:b6:38:d8:4c:e2:12:99:1d:39:3a:fd:a7:89: 21:e8:cc:c5:08:90:41:95:f8:8a:d7:5e:ca:ce:ff:22:48:5e: f2:6a:b0:b1:9c:96:09:68:26:ae:85:c7:c2:69:8f:7e:7a:56: e0:7c:61:f2:5f:c0:0f:66:5b:7e:20:9f:09:35:97:cf:95:6d: 3d:d4:1b:2d:a1:b7:3e:d4:2c:02:8c:a6:5d:87:c6:43:70:3b: 2b:78:74:7e:dc:5b:f8:a3:f0:a8:6c:37:92:d7:e5:c5:d3:6e: d7:d2:c9:4d:cc:38:a0:94:72:20:4e:e5:10:bf:44:77:7d:b0: fa:9a:65:fb:d8:8a:45:6a:8a:35:8e:44:6f:2a:74:3f:9f:cd: a3:24:b0:2c:40:98:76:0a:60:76:40:cf:1d:8c:b2:26:ac:65: a1:9c:bf:15:18:47:02:08:b8:97:76:b5:50:be:72:30:29:92: ff:07:10:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTdFMzExMC8GA1UEBRMoNENDMUFBODNBMjhBMTAzNzcyNDlCNkVBNEI4OUQ5RURE QTA2QTk3MTAeFw0yNjA0MDUwODI3MDFaFw0yNjA0MTIwODI3MDFaMBgxFjAUBgNV BAMTDTY5ZDIxY2Q1LTVlNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhYX1ywi/uzEVJiFmXZjPWOL7XXbHfwUkEJXz4jXH+XAo0SUyUAyebJT6ebYXC RThH1H+LNDarJAxjva1BOPQPljPWrZnVDdf+UW7QVaCEvUChCec8qKIjT4KtjB0v jT2q4F0woc8lehmuLDGWR7aPjQlw6GvWGUXAjP8dfAopZzKx75wQPbJGD9beYEKP XJWwL2BLG8RqWP0vZKrfjil+yOknhh04y10mLMDh5F8inHfVNDMcdv/eFEiz6EKb ecmeTS7+aekJBkSbVm35r9IEf6mDM1JKOAvx6kVlg+1Cu//HWTcZD5xfMZl4Py46 gNpKbGHK8SOnYTg/eN5bFFgRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTAmhhk6a 98c8+VILJTTN/dS9dp4wHwYDVR0jBBgwFoAUTMGqg6KKEDdySbbqS4nZ7doGqXEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBN0UzL0VBREMwMTlBMjQ1 ODExRjE5M0UwRTE4QkMzODMzNzczL1RNR3FnNktLRURkeVNiYnFTNG5aN2RvR3FY RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVE1HcWc2S0tFRGR5U2JicVM0blo3ZG9HcVhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB N0UzL0VBREMwMTlBMjQ1ODExRjE5M0UwRTE4QkMzODMzNzczL1RNR3FnNktLRURk eVNiYnFTNG5aN2RvR3FYRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9O9vKAoHZCl5TuJhTxCDPgHDjRXbiKM3uEm3BnweTsRdo/ukwwZf48VIPTx9i btHh6qv8gukSnXGcbQNZXyY0OCLBsw4dVB0tU8qqxbY42EziEpkdOTr9p4kh6MzF CJBBlfiK117Kzv8iSF7yarCxnJYJaCauhcfCaY9+elbgfGHyX8APZlt+IJ8JNZfP lW091Bstobc+1CwCjKZdh8ZDcDsreHR+3Fv4o/CobDeS1+XF027X0slNzDiglHIg TuUQv0R3fbD6mmX72IpFaoo1jkRvKnQ/n82jJLAsQJh2CmB2QM8djLImrGWhnL8V GEcCCLiXdrVQvnIwKZL/BxAI -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:18 2026 by rpki-client