$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: Ln0TJ/tksVTNh0sHhQNrUkiBfqA1piZHOV8e8cffvfs= Subject key identifier: 42:EC:D7:8A:36:CA:41:D9:9E:5A:76:82:21:30:5C:6D:2C:36:30:0A Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0237 Signing time: Mon 20 Apr 2026 22:52:55 +0000 Manifest this update: Mon 20 Apr 2026 22:52:55 +0000 Manifest next update: Mon 27 Apr 2026 22:52:55 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: VqOYQy8qdXVC+IZkY7Zk+IaJPtikgFfCh+NCjHcxXIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Apr 20 22:52:55 2026 GMT Not After : Apr 27 22:52:55 2026 GMT Subject: CN=69e6ae47-cc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:d9:38:1e:65:82:6f:7a:9e:3b:63:8c:3f: 64:5d:46:0a:90:f8:6c:4b:70:3f:bd:4c:de:35:b8: 42:0b:db:47:86:d6:d1:0e:07:88:5d:d2:42:95:8f: ca:7a:a7:47:39:5d:2c:cd:d3:fa:96:90:bd:02:4e: 6c:57:05:0e:15:62:b5:f7:85:34:ae:0a:fe:64:28: 64:c6:13:ba:2f:6c:e0:e8:53:af:94:bd:78:25:0a: 4a:e7:31:52:74:44:88:f8:10:2d:ce:13:e5:46:2d: 57:ab:73:29:8c:06:d0:f7:58:4e:c9:4a:fb:11:e7: e6:02:ef:3e:2c:a1:be:ca:df:c5:a3:74:74:cc:91: 85:53:ea:67:24:5d:fd:06:a9:fb:af:74:bf:a5:8e: 9d:01:b9:4d:04:ef:10:03:31:45:25:37:0e:2e:89: e7:af:01:a6:09:83:e5:f1:3c:8b:3b:17:7a:06:7b: bb:6b:7d:e6:5b:a8:e2:9d:53:42:7f:fd:0d:7d:d9: 2b:91:a3:f4:c9:ab:31:a5:f3:ea:fb:e0:40:26:3d: 5f:bc:65:b7:38:0a:02:7c:03:f0:f0:e4:0d:19:55: c5:27:07:2a:b2:4d:ca:5f:9f:06:ce:fa:6e:92:78: 60:87:9a:19:93:28:c1:e6:e6:83:33:d5:a2:c4:ac: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EC:D7:8A:36:CA:41:D9:9E:5A:76:82:21:30:5C:6D:2C:36:30:0A X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b0:c8:87:cd:f6:86:b5:38:0b:ec:90:e0:ba:bc:cc:45:ca: 19:1c:44:f8:0e:56:b6:6e:5f:9c:2f:5e:02:46:d3:24:9b:a6: fa:6f:2c:58:f1:31:e2:c3:58:bd:80:81:ee:bd:a6:45:cf:60: 15:a9:eb:35:16:d8:26:90:5c:f5:fa:13:79:75:2f:38:13:8e: b8:c3:bf:a0:ae:7f:36:d4:32:d3:1b:c4:a1:bb:02:70:f0:e7: 46:1a:f3:d3:b9:f3:a2:8b:8b:fa:da:35:fd:c1:66:b2:35:32: 32:6a:b7:32:0c:85:ca:32:a4:ba:1e:1b:82:bd:d4:49:36:50: 54:5b:d3:15:e1:51:4a:5f:f1:85:34:eb:ce:66:6f:24:25:e0: 4b:6d:52:39:ca:ec:3c:a0:d5:ac:96:8e:07:26:49:c2:b3:7a: 65:9e:32:9a:12:c1:92:fb:29:9e:7a:23:87:ff:c1:03:61:a0: 61:22:7f:6c:26:6d:4e:83:8d:76:d0:7d:b2:fe:15:f6:76:6a: ae:51:39:a7:09:3e:1b:72:f6:fb:65:8e:34:52:65:7a:ef:c6: c4:4e:18:37:d7:1e:e7:6c:87:e6:d7:74:e7:0d:06:20:96:b7: f4:93:16:ed:9f:f6:b0:d2:a7:6b:e9:bd:3d:d4:81:ab:b7:03: 64:5f:51:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjYwNDIwMjI1MjU1WhcNMjYwNDI3MjI1MjU1WjAYMRYwFAYD VQQDEw02OWU2YWU0Ny1jYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRjZOB5lgm96njtjjD9kXUYKkPhsS3A/vUzeNbhCC9tHhtbRDgeIXdJClY/K eqdHOV0szdP6lpC9Ak5sVwUOFWK194U0rgr+ZChkxhO6L2zg6FOvlL14JQpK5zFS dESI+BAtzhPlRi1Xq3MpjAbQ91hOyUr7EefmAu8+LKG+yt/Fo3R0zJGFU+pnJF39 Bqn7r3S/pY6dAblNBO8QAzFFJTcOLonnrwGmCYPl8TyLOxd6Bnu7a33mW6jinVNC f/0NfdkrkaP0yasxpfPq++BAJj1fvGW3OAoCfAPw8OQNGVXFJwcqsk3KX58Gzvpu knhgh5oZkyjB5uaDM9WixKxFkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELs14o2 ykHZnlp2giEwXG0sNjAKMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZLDIh832hrU4C+yQ4Lq8zEXKGRxE+A5Wtm5fnC9eAkbTJJum+m8sWPEx4sNY vYCB7r2mRc9gFanrNRbYJpBc9foTeXUvOBOOuMO/oK5/NtQy0xvEobsCcPDnRhrz 07nzoouL+to1/cFmsjUyMmq3MgyFyjKkuh4bgr3USTZQVFvTFeFRSl/xhTTrzmZv JCXgS21SOcrsPKDVrJaOByZJwrN6ZZ4ymhLBkvspnnojh//BA2GgYSJ/bCZtToON dtB9sv4V9nZqrlE5pwk+G3L2+2WONFJleu/GxE4YN9ce52yH5td05w0GIJa39JMW 7Z/2sNKna+m9PdSBq7cDZF9REg== -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:49 2026 by rpki-client