$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json) Hash identifier: Uxmj+KPLpRwJHV5SbOD1DUvkcuFwroaXMsZmdLQs+FY= Subject key identifier: 8C:8B:E5:15:F3:82:EE:54:7B:1E:35:2E:00:F8:D9:FF:7B:DC:BC:6A Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Certificate serial: 3558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft Manifest number: 354A Signing time: Sat 04 Apr 2026 14:59:08 +0000 Manifest this update: Sat 04 Apr 2026 14:59:08 +0000 Manifest next update: Sat 11 Apr 2026 14:59:08 +0000 Files and hashes: 1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: jcYbXRcLRmHS/H5iAGPKZt/gSlAaBvAGPswKNb4jsrA=) 2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: 3jca7UxaXV6c6olMc9z1yWqeuEFOcKZmp0PXJwoJU88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13656 (0x3558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15 Validity Not Before: Apr 4 14:59:08 2026 GMT Not After : Apr 11 14:59:08 2026 GMT Subject: CN=69d1273c-1b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:8c:69:08:d1:f4:cf:41:5c:29:69:11:00: fb:ed:73:eb:aa:1b:fe:2e:90:23:39:b6:3c:1c:32: 6d:22:d4:a4:33:44:b0:a4:03:7f:fb:1a:59:d2:40: 58:e2:cb:69:55:a5:97:96:cd:3d:49:0b:0a:7f:f7: 23:b7:db:37:34:4e:8b:02:53:c1:c5:ca:5e:6f:3c: 4d:c6:94:fe:9a:9e:12:f7:99:80:f8:45:25:22:06: f7:41:d7:4e:60:08:cc:65:b4:cd:6a:96:79:3f:fa: 24:57:0f:a2:d0:ea:55:3c:42:40:42:8a:41:ce:0a: 3b:06:24:64:30:3c:ba:23:53:01:bd:f8:0e:3c:ce: 7d:40:1c:bf:b2:73:62:65:ce:50:71:b8:08:83:49: 85:40:6a:a1:00:ef:ac:bd:3a:88:1f:94:63:7c:99: 72:22:99:08:a4:41:19:85:cd:59:42:e6:f9:0a:d0: dc:3c:79:90:d2:6c:47:c3:69:43:9d:0c:49:a6:25: 95:af:7d:e6:14:b5:ad:87:9f:3d:e3:c7:d9:54:07: 75:16:83:a2:23:93:1f:4c:de:00:32:25:03:5b:76: f5:6b:a4:85:11:08:0e:d0:36:db:76:63:bd:82:4a: fe:c9:6c:8c:80:70:44:24:26:90:6a:0a:7d:8d:1b: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8B:E5:15:F3:82:EE:54:7B:1E:35:2E:00:F8:D9:FF:7B:DC:BC:6A X509v3 Authority Key Identifier: keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:96:a7:1c:30:0c:4b:6e:20:22:4d:80:5a:65:13:84:5c:fa: bf:fe:4b:67:db:7e:c6:1f:a6:ef:23:22:8f:95:b5:8a:27:60: 2c:6a:5f:f0:13:a6:1f:00:5e:73:3d:0c:9a:09:64:de:fb:6d: 2b:96:cc:64:70:dd:51:0e:d9:c0:b8:dd:79:f0:79:7b:9e:d5: be:ea:bb:c0:48:e8:fd:b1:70:21:bf:63:2e:98:85:79:c7:31: d1:19:7b:75:99:b7:3b:ad:e6:65:68:0e:d8:19:36:e2:0b:6b: 6e:c1:78:11:46:88:41:57:3d:09:b3:5b:7a:2c:a5:22:54:11: 68:ca:34:85:0e:f3:41:67:d6:03:da:95:2f:fa:08:26:5f:90: fc:07:3c:c7:71:77:1b:b7:f9:d5:4d:9d:90:d3:b8:7c:dc:f7: 8e:e8:11:b3:5a:17:c0:7c:91:67:c6:bc:e3:2c:f7:93:59:d9: cc:ca:4d:cd:32:8d:f3:67:f3:6f:1b:bf:fc:ef:ef:26:18:6a: 9f:27:70:39:ff:37:90:17:f3:e5:e0:c6:f9:21:3a:ae:b7:e4: d7:0e:a7:98:b7:9e:91:91:f3:fc:03:5c:08:37:0a:e0:cf:f3: 0c:f8:6b:86:07:69:43:81:d3:9a:31:c7:26:c6:ad:d3:73:91: be:c8:3f:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2 QzQ4OEREMTUwHhcNMjYwNDA0MTQ1OTA4WhcNMjYwNDExMTQ1OTA4WjAYMRYwFAYD VQQDEw02OWQxMjczYy0xYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdeMaQjR9M9BXClpEQD77XPrqhv+LpAjObY8HDJtItSkM0SwpAN/+xpZ0kBY 4stpVaWXls09SQsKf/cjt9s3NE6LAlPBxcpebzxNxpT+mp4S95mA+EUlIgb3QddO YAjMZbTNapZ5P/okVw+i0OpVPEJAQopBzgo7BiRkMDy6I1MBvfgOPM59QBy/snNi Zc5QcbgIg0mFQGqhAO+svTqIH5RjfJlyIpkIpEEZhc1ZQub5CtDcPHmQ0mxHw2lD nQxJpiWVr33mFLWth58948fZVAd1FoOiI5MfTN4AMiUDW3b1a6SFEQgO0DbbdmO9 gkr+yWyMgHBEJCaQagp9jRtw0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyL5RXz gu5Uex41LgD42f973LxqMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew VmJiYU1XRHQtUHRzU0kzUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuJanHDAMS24gIk2AWmUThFz6v/5LZ9t+xh+m7yMij5W1iidgLGpf8BOmHwBe cz0Mmglk3vttK5bMZHDdUQ7ZwLjdefB5e57Vvuq7wEjo/bFwIb9jLpiFeccx0Rl7 dZm3O63mZWgO2Bk24gtrbsF4EUaIQVc9CbNbeiylIlQRaMo0hQ7zQWfWA9qVL/oI Jl+Q/Ac8x3F3G7f51U2dkNO4fNz3jugRs1oXwHyRZ8a84yz3k1nZzMpNzTKN82fz bxu//O/vJhhqnydwOf83kBfz5eDG+SE6rrfk1w6nmLeekZHz/ANcCDcK4M/zDPhr hgdpQ4HTmjHHJsat03ORvsg/ag== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:06 2026 by rpki-client