$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: SNjOKJ5yiYEYpLxmILWww7FnxSuRpi6GWVm81PLUREM= Subject key identifier: 07:91:65:B8:22:31:1C:28:D9:65:C5:8E:0A:D4:99:14:8A:2D:F1:25 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 05DA Signing time: Sat 04 Apr 2026 22:52:10 +0000 Manifest this update: Sat 04 Apr 2026 22:52:10 +0000 Manifest next update: Sat 11 Apr 2026 22:52:10 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: rirJ1VCzkPH/j2D9JVuNsB04r+ujSvCvbqYOm7GabSE=) 2: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: yO5pYh5kSLeQxWbh/IwZl8/NyVYKsbLWb0OeBMKvlS8=) 3: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: +1hhCYUIxlCa2Yw+101XYnenXc2fZJwDnEsS0lMdUl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Apr 4 22:52:10 2026 GMT Not After : Apr 11 22:52:10 2026 GMT Subject: CN=69d1961a-dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:e6:62:7d:5a:b6:18:c0:2d:31:3d:78:df: 45:3b:b4:7c:68:e8:59:7d:c8:1a:1e:82:1d:2a:c5: 34:0c:9f:22:c0:3e:4d:3f:ff:5f:ae:67:cd:60:67: 12:89:c7:46:ee:74:be:71:d1:76:66:e9:d4:39:05: a4:59:99:f9:44:b9:9e:7d:0d:56:84:e4:3b:03:ac: 33:c4:87:5a:39:a3:99:4b:b5:9c:2c:69:07:dc:19: 10:58:55:e9:ac:5d:54:c1:d2:4a:5e:d0:57:85:ce: 78:3d:60:5b:fc:9a:63:7d:1d:3c:ad:f0:b3:78:39: 73:ed:c4:df:ce:35:b0:d2:2a:e6:7f:c1:6a:37:d7: 54:3c:92:6d:fa:a4:6f:44:e7:af:87:44:6c:84:cf: 2f:b5:6f:ea:38:ae:f7:17:40:45:a0:83:bd:ae:a3: 8e:9e:ef:c0:e0:8c:c5:85:22:da:e1:83:1a:8f:d3: f3:69:f1:78:24:92:20:3d:8f:bb:65:02:c3:58:75: 78:7c:bb:68:52:5c:79:a0:19:e2:52:08:ea:b5:24: 4b:72:7c:30:84:8c:87:c9:9c:44:fe:6b:35:d6:b3: 6a:23:a3:85:7b:51:2f:74:6f:1c:8e:a6:38:6c:8f: 0d:d2:d8:3c:53:a2:f7:1e:1e:02:56:1d:b0:b5:25: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:91:65:B8:22:31:1C:28:D9:65:C5:8E:0A:D4:99:14:8A:2D:F1:25 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1b:20:a1:f3:1a:52:f2:13:7b:a1:96:06:1e:ac:85:66:0c: bf:c2:37:8d:96:1c:36:ac:e3:4f:9c:fc:b2:e5:6b:01:fd:a8: ae:6d:00:71:d1:21:11:1b:a2:52:5d:5f:c4:5f:ce:aa:ed:6d: 84:e2:06:1f:73:7e:14:13:c7:f0:4b:c7:f8:7d:9f:9b:96:78: 97:28:01:ac:73:6f:32:01:a2:34:69:cb:5f:ad:2b:76:a9:e7: 86:06:6e:0f:be:30:18:56:91:96:8b:a9:a5:3e:0c:a8:7b:b7: 7a:4a:fb:59:c9:3f:27:57:f2:ae:00:7f:59:88:48:5d:ca:92: b5:d4:db:3b:7b:25:75:4e:c5:90:b1:8d:ff:8e:42:d4:10:fb: 23:c0:77:96:67:c2:ae:24:ca:db:cc:c1:b4:26:c6:2b:63:e0: 6d:f5:28:30:ab:e7:c4:48:ed:16:e2:62:d2:30:d1:b9:bf:dc: 9e:ca:85:7b:2d:a9:e1:57:bb:6c:69:4a:21:c9:f1:df:23:bc: 79:4f:83:52:1f:81:3d:a4:63:a7:d7:02:8a:9e:1b:c7:71:ba: b4:56:2b:92:b8:e5:e5:49:10:e4:bf:d4:ea:8f:37:54:2c:4c: d3:e0:eb:92:78:cc:4b:1c:0d:cd:9e:8a:e9:ed:dd:e7:ab:da: 5c:51:5d:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjYwNDA0MjI1MjEwWhcNMjYwNDExMjI1MjEwWjAYMRYwFAYD VQQDEw02OWQxOTYxYS1kZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlL3mYn1athjALTE9eN9FO7R8aOhZfcgaHoIdKsU0DJ8iwD5NP/9frmfNYGcS icdG7nS+cdF2ZunUOQWkWZn5RLmefQ1WhOQ7A6wzxIdaOaOZS7WcLGkH3BkQWFXp rF1UwdJKXtBXhc54PWBb/JpjfR08rfCzeDlz7cTfzjWw0irmf8FqN9dUPJJt+qRv ROevh0RshM8vtW/qOK73F0BFoIO9rqOOnu/A4IzFhSLa4YMaj9PzafF4JJIgPY+7 ZQLDWHV4fLtoUlx5oBniUgjqtSRLcnwwhIyHyZxE/ms11rNqI6OFe1EvdG8cjqY4 bI8N0tg8U6L3Hh4CVh2wtSUvbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeRZbgi MRwo2WXFjgrUmRSKLfElMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATBsgofMaUvITe6GWBh6shWYMv8I3jZYcNqzjT5z8suVrAf2orm0AcdEhERui Ul1fxF/Oqu1thOIGH3N+FBPH8EvH+H2fm5Z4lygBrHNvMgGiNGnLX60rdqnnhgZu D74wGFaRlouppT4MqHu3ekr7Wck/J1fyrgB/WYhIXcqStdTbO3sldU7FkLGN/45C 1BD7I8B3lmfCriTK28zBtCbGK2PgbfUoMKvnxEjtFuJi0jDRub/cnsqFey2p4Ve7 bGlKIcnx3yO8eU+DUh+BPaRjp9cCip4bx3G6tFYrkrjl5UkQ5L/U6o83VCxM0+Dr knjMSxwNzZ6K6e3d56vaXFFdWg== -----END CERTIFICATE-----Generated at Mon Apr 6 15:25:54 2026 by rpki-client