$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: O/i6pm3WsR/Bx81L2Q7AI7t1ADxHK4fIEgAGvsQluzY= Subject key identifier: C5:CF:30:78:7B:15:CE:E0:6C:63:DB:AF:33:47:7B:64:88:0D:1E:AD Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 01E3 Signing time: Sun 05 Apr 2026 02:56:04 +0000 Manifest this update: Sun 05 Apr 2026 02:56:03 +0000 Manifest next update: Sun 12 Apr 2026 02:56:03 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: JyA7BM7XAaMCu8Y9Ibr8OMnYuvelQn3OFa+ud2RTdkI=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Apr 5 02:56:03 2026 GMT Not After : Apr 12 02:56:03 2026 GMT Subject: CN=69d1cf43-c1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:41:9e:9e:6a:e8:85:62:9d:4e:fa:22:10: ef:da:a0:80:33:c9:07:57:96:c6:bb:92:4d:29:4a: 14:39:28:4c:f5:49:5f:62:66:b6:e3:00:4f:19:f7: cd:d9:5e:ab:72:72:33:6b:88:4e:ee:89:04:ab:9d: b3:e2:ac:b7:f2:5e:a6:5a:a2:3d:cb:8f:06:b3:22: 93:d2:cb:52:51:84:89:6f:82:5c:a6:4f:d2:16:5c: 4c:93:f8:1c:d5:72:30:b0:18:7c:bd:10:6e:36:ad: 89:db:8c:69:21:af:e7:94:01:db:7e:7b:b6:84:4a: b2:d3:6a:f8:c8:bf:bb:07:ee:d9:e6:b6:ec:7e:77: fa:55:b4:a9:f2:af:02:4e:aa:dd:e1:a8:a5:d6:91: 20:1c:e9:8d:ce:0c:0b:7c:ff:6d:1d:10:6c:b9:4a: f6:20:5e:33:d3:b8:79:6a:dd:4e:b2:98:2c:14:9e: 0e:56:cc:4b:6f:5a:80:bd:68:59:70:f2:61:a7:0b: 68:0c:a9:a9:be:8e:bc:9d:d1:0f:6c:86:cd:b8:27: 75:ca:9a:3f:d3:1a:f7:0b:6d:68:9d:ca:c3:ad:d4: b4:c7:0e:04:03:c4:6c:7b:c1:04:c5:05:00:16:22: 5c:08:a0:bd:5f:1c:10:59:6b:16:78:20:6a:02:eb: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:30:78:7B:15:CE:E0:6C:63:DB:AF:33:47:7B:64:88:0D:1E:AD X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a6:4c:10:f0:3d:5b:6b:04:3d:40:21:44:d0:60:ad:a4:54: 86:f4:45:65:dc:93:b8:06:36:2a:1e:d0:09:10:84:0b:01:b9: 91:c6:32:a1:72:dc:e1:78:48:88:5e:1e:cd:b5:de:1f:cd:16: 55:41:bd:5c:dc:77:b1:90:67:51:c0:6d:b1:37:3d:f8:14:f4: a3:84:40:94:88:4e:74:b7:d6:12:f3:f8:9b:17:63:30:5e:67: 04:56:d7:f9:e9:22:58:ec:1c:fb:ca:39:8d:6f:eb:31:3a:a4: 7e:b9:8b:84:75:4c:7e:f8:60:a0:ae:98:ec:e6:a2:aa:37:17: 5b:70:1d:f5:a4:4b:78:78:6d:e2:9f:4d:21:6b:fb:34:7d:67: bb:db:c7:3d:74:fc:d1:3a:98:f6:6a:b6:ce:90:4a:26:fd:18: 63:65:d6:d4:f8:0e:6e:d4:f2:19:65:06:25:16:c2:e0:28:6f: 32:94:32:06:bd:85:b0:a0:93:4d:ce:68:67:6d:c5:9e:9f:2a: 1d:8c:5f:98:98:7f:6d:48:d0:dc:50:45:ea:e2:b4:d9:55:4d: 94:be:01:58:31:dc:c3:84:08:fa:9e:34:c4:c9:a4:4b:3e:b3: 93:10:d6:7d:29:70:f2:9f:ff:c8:44:1e:43:ac:42:8e:16:00: 75:2e:ed:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwNDA1MDI1NjAzWhcNMjYwNDEyMDI1NjAzWjAYMRYwFAYD VQQDEw02OWQxY2Y0My1jMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOlBnp5q6IVinU76IhDv2qCAM8kHV5bGu5JNKUoUOShM9UlfYma24wBPGffN 2V6rcnIza4hO7okEq52z4qy38l6mWqI9y48GsyKT0stSUYSJb4Jcpk/SFlxMk/gc 1XIwsBh8vRBuNq2J24xpIa/nlAHbfnu2hEqy02r4yL+7B+7Z5rbsfnf6VbSp8q8C Tqrd4ail1pEgHOmNzgwLfP9tHRBsuUr2IF4z07h5at1OspgsFJ4OVsxLb1qAvWhZ cPJhpwtoDKmpvo68ndEPbIbNuCd1ypo/0xr3C21oncrDrdS0xw4EA8Rse8EExQUA FiJcCKC9XxwQWWsWeCBqAusOKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXPMHh7 Fc7gbGPbrzNHe2SIDR6tMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx6ZMEPA9W2sEPUAhRNBgraRUhvRFZdyTuAY2Kh7QCRCECwG5kcYyoXLc4XhI iF4ezbXeH80WVUG9XNx3sZBnUcBtsTc9+BT0o4RAlIhOdLfWEvP4mxdjMF5nBFbX +ekiWOwc+8o5jW/rMTqkfrmLhHVMfvhgoK6Y7OaiqjcXW3Ad9aRLeHht4p9NIWv7 NH1nu9vHPXT80TqY9mq2zpBKJv0YY2XW1PgObtTyGWUGJRbC4ChvMpQyBr2FsKCT Tc5oZ23Fnp8qHYxfmJh/bUjQ3FBF6uK02VVNlL4BWDHcw4QI+p40xMmkSz6zkxDW fSlw8p//yEQeQ6xCjhYAdS7tgQ== -----END CERTIFICATE-----Generated at Sun Apr 5 21:07:09 2026 by rpki-client