$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.mft (raw, json) Hash identifier: s0PnEkJavXSK9Gsk17DZeJ6BYtSGriLA9IAw2INSCeA= Subject key identifier: 76:C1:BA:8D:7B:01:CB:AD:BE:AD:BF:70:C2:16:EB:65:82:52:D2:52 Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft Manifest number: 19 Signing time: Tue 21 Apr 2026 13:41:19 +0000 Manifest this update: Tue 21 Apr 2026 13:41:18 +0000 Manifest next update: Tue 28 Apr 2026 13:41:18 +0000 Files and hashes: 1: 33H2KoYwGsbTrKQJgyzDqdmcmhE.crl (hash: I4sejULu5pToUhCDg61w5V+8njq0WW3NgnGvqw6fRZo=) 2: 08A46B6A1B5111F18293DF0B253D8C67.roa (hash: TF6EFrOkoOfXprH347Zxdrds6n86GSJg1BTmg1x6OAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 13:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Validity Not Before: Apr 21 13:41:18 2026 GMT Not After : Apr 28 13:41:18 2026 GMT Subject: CN=69e77e7f-e224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:70:42:b4:8a:7c:d8:6b:31:f4:e3:fb:0c: 85:65:90:f0:82:d0:d5:e1:27:97:6d:e7:b8:93:f8: fd:96:9f:cd:df:75:96:93:4c:0f:a4:22:1c:5d:cb: 9f:a4:dc:7e:80:2c:29:72:3b:d5:09:2f:4c:b4:96: 86:42:86:b9:04:b3:9d:3a:e3:58:68:9b:22:4b:03: 9e:33:c3:c6:0e:ef:b3:30:5a:ea:6e:50:16:bd:bf: 5c:a5:0d:ab:0d:2b:97:19:e8:9a:49:fc:16:14:06: b3:83:29:a0:4a:1b:33:14:44:52:95:e0:b1:aa:72: aa:dc:69:3a:40:28:3f:a5:c2:c8:ce:f9:e9:98:a6: 47:5f:d9:5f:0b:9b:5f:8e:d0:ad:f8:94:96:38:12: d3:e7:b2:03:1b:4b:92:f3:84:86:e9:b2:7e:4a:3c: 73:42:d8:14:f5:b8:b7:49:59:aa:01:18:b6:1e:3a: e6:f1:e9:d3:33:8a:73:4b:69:83:c7:5f:c2:20:63: 80:d9:c0:c2:22:d1:04:98:4b:63:d3:8d:33:58:92: 21:18:a5:f5:ee:4f:27:c8:89:f8:e7:ad:5f:c5:b5: 44:ea:93:13:01:be:83:47:22:26:4e:6b:ef:ba:a7: f5:01:83:4a:35:12:cc:4b:19:e7:24:80:31:14:90: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C1:BA:8D:7B:01:CB:AD:BE:AD:BF:70:C2:16:EB:65:82:52:D2:52 X509v3 Authority Key Identifier: keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:a6:20:a8:dc:65:a3:5a:b7:d8:80:5b:ca:7d:23:ca:43: 89:6c:9d:3d:e3:c6:79:2b:e8:9a:29:94:3f:88:0f:e8:0b:7e: 75:13:bc:e9:53:ec:53:30:2a:b7:5b:07:8b:fb:89:28:67:83: 3b:3f:01:e0:6c:8c:91:0d:c2:80:11:20:fa:26:e8:4b:d6:28: a2:80:73:5a:ec:78:3e:f1:71:08:bf:53:b4:3d:27:ce:3b:88: c8:03:a9:93:15:31:d3:ac:3e:27:ee:94:19:f1:f9:b7:38:ab: dd:08:8e:1b:ab:4f:5d:af:af:ff:72:24:1b:71:de:2d:da:f6: 99:28:b5:54:bb:5f:6c:d3:bf:0e:6f:3c:70:fa:4e:88:cd:43: 7e:33:6d:16:fc:c0:49:70:1c:6f:58:2e:7a:97:e5:4a:78:db: 54:51:12:d1:ac:28:88:82:4c:2e:e1:a4:bc:c9:72:62:c2:c4: 25:77:7c:69:5c:00:7c:4e:f2:f5:e9:cc:7e:f5:91:dd:5b:79: 2f:b0:18:09:eb:cc:ae:2a:94:12:b2:a4:0c:3e:70:2c:27:a2: b6:84:4d:48:ff:b9:46:60:44:60:9b:ba:d8:d6:ab:e7:f2:02: 2b:da:8f:e9:ba:66:7d:a6:52:ec:7b:14:fe:18:93:8d:23:56: 53:cd:8a:f7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE OTlDOUExMTAeFw0yNjA0MjExMzQxMThaFw0yNjA0MjgxMzQxMThaMBgxFjAUBgNV BAMTDTY5ZTc3ZTdmLWUyMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB1nBCtIp82Gsx9OP7DIVlkPCC0NXhJ5dt57iT+P2Wn83fdZaTTA+kIhxdy5+k 3H6ALClyO9UJL0y0loZChrkEs50641homyJLA54zw8YO77MwWupuUBa9v1ylDasN K5cZ6JpJ/BYUBrODKaBKGzMURFKV4LGqcqrcaTpAKD+lwsjO+emYpkdf2V8Lm1+O 0K34lJY4EtPnsgMbS5LzhIbpsn5KPHNC2BT1uLdJWaoBGLYeOubx6dMzinNLaYPH X8IgY4DZwMIi0QSYS2PTjTNYkiEYpfXuTyfIifjnrV/FtUTqkxMBvoNHIiZOa++6 p/UBg0o1EsxLGeckgDEUkNx9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdsG6jXsB y62+rb9wwhbrZYJS0lIwHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzMzMDc0OTQ2MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3Ni VHJLUUpneXpEcWRtY21oRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhsKYgqNxlo1q32IBbyn0jykOJbJ0948Z5K+iaKZQ/iA/oC351E7zpU+xTMCq3 WweL+4koZ4M7PwHgbIyRDcKAESD6JuhL1iiigHNa7Hg+8XEIv1O0PSfOO4jIA6mT FTHTrD4n7pQZ8fm3OKvdCI4bq09dr6//ciQbcd4t2vaZKLVUu19s078Obzxw+k6I zUN+M20W/MBJcBxvWC56l+VKeNtUURLRrCiIgkwu4aS8yXJiwsQld3xpXAB8TvL1 6cx+9ZHdW3kvsBgJ68yuKpQSsqQMPnAsJ6K2hE1I/7lGYERgm7rY1qvn8gIr2o/p umZ9plLsexT+GJONI1ZTzYr3 -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:01 2026 by rpki-client