$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: RyBE5BR0gUgcnzzy+3ApsSbt84V76Plshqfs3UJb8qc= Subject key identifier: 3F:18:35:52:92:66:DC:76:B2:D4:59:A2:B5:49:23:B2:AA:AC:A3:E9 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 3634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 3598 Signing time: Mon 20 Apr 2026 14:24:35 +0000 Manifest this update: Mon 20 Apr 2026 14:24:35 +0000 Manifest next update: Mon 27 Apr 2026 14:24:35 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: JkB+0VvVVTe7TytPP7KZdZLrfVSdt+rkLnTM7+MsIyI=) 2: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: 2+uDGIyNCQwdI4kpyLzkpL270iQx3eFCTQmOCW4llcA=) 3: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: Aq2aXJwiDmleCL4Y5dXro6eaNkC/MLx9wlaLd0aot6I=) 4: D0886954188811EC8E86754FC4F9AE02.roa (hash: W4C6/CMmIu13G3sy+4epSwhK8wjgstVqttIzDULu+ak=) 5: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: GK0larljqDnIZSIDwqWiFQo4BToMGpYrvOsSZwaLGDI=) 6: 80222864027211F19767E73A2C3D8C67.roa (hash: ywqZnsw0viWQVsstxlcIR8TqE6o6V9nWSSr21sJVdy4=) 7: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: AAS+jxhp2xik0OYMSPq+B01L4sPGFryRO2dGHyui2mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13876 (0x3634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Apr 20 14:24:35 2026 GMT Not After : Apr 27 14:24:35 2026 GMT Subject: CN=69e63723-8088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:ce:16:50:16:25:f2:d6:34:51:ba:e8:d9: 5b:f1:5b:62:de:a9:1c:72:06:0f:9c:3b:85:9c:83: ab:12:0c:1f:ed:bd:c8:04:b1:b5:cb:8c:85:43:7d: 38:8f:7e:a7:aa:2d:be:32:3d:ff:da:0d:d9:db:94: 16:fa:43:fa:94:d6:78:59:f2:c6:fe:c2:62:56:7e: 2c:5d:c5:d4:dc:e0:94:5a:38:8d:f4:e7:1b:48:c8: 84:29:38:4b:83:a9:32:a4:b3:2a:f3:00:0a:81:32: 9c:d8:23:37:65:20:58:61:48:cf:e5:70:8d:ec:d3: 42:dc:db:c9:f1:6d:df:b8:22:9e:5a:95:6e:c2:5b: d2:92:87:ba:ba:81:3b:36:89:01:6e:75:9c:47:81: df:60:3a:e4:0e:d7:70:c9:8c:6f:4c:22:b6:e2:ff: 2e:b4:56:7f:77:96:8a:27:ca:19:f9:44:e0:74:41: cb:05:4a:18:5a:b2:8d:48:1a:61:41:a8:f4:5d:b7: 3d:5d:11:2e:7e:1d:69:7d:45:22:02:9b:8b:e3:c3: 92:aa:52:ec:e8:c2:1d:98:40:1d:d2:5b:86:29:e3: cd:26:d0:a5:3c:af:60:02:a9:50:df:06:c2:2b:93: 6f:5a:0a:32:99:99:fc:a9:58:86:79:c9:4a:ee:2b: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:35:52:92:66:DC:76:B2:D4:59:A2:B5:49:23:B2:AA:AC:A3:E9 X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:0e:3a:90:ca:87:8d:60:7d:dc:1d:8f:f6:d6:de:ee:78: 71:c8:b4:59:fa:c7:36:00:54:56:dd:6f:81:02:ef:26:70:5e: 17:d0:66:9d:a1:ad:38:48:9a:5c:d9:24:78:ec:74:12:c4:57: 18:c1:92:31:4f:c5:d6:f0:f1:98:c1:37:94:33:35:05:77:3e: ce:1a:75:91:19:90:9e:95:6f:48:9a:0e:33:ee:58:1a:a4:ef: 51:6d:b6:bd:81:01:0e:1e:50:da:4f:69:c2:fb:bd:08:d3:a1: 33:ec:7a:e8:8b:1b:20:e4:85:d2:dc:d0:74:ce:ce:05:c5:83: 3e:0f:20:e3:45:ed:19:24:de:09:ae:94:b2:0a:5c:13:24:ec: c9:16:a2:90:ec:9a:28:f7:da:2c:b6:51:49:6b:c7:70:ec:9c: 42:0f:b1:b9:db:0a:75:5d:7a:2e:43:53:94:c3:68:16:d7:22: 85:18:90:d3:6e:36:d3:60:c9:f7:07:99:94:d6:36:26:4d:f8: 00:81:1f:e4:5d:a5:06:70:7c:e1:37:1b:f3:58:35:5c:f6:bd: fc:9a:52:52:1d:e2:c3:e9:ae:fe:21:bc:73:9a:07:ab:2e:25: 70:20:a8:06:7e:40:ce:94:89:11:bf:52:0d:84:66:89:5e:83: 1b:9a:f2:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjYwNDIwMTQyNDM1WhcNMjYwNDI3MTQyNDM1WjAYMRYwFAYD VQQDEw02OWU2MzcyMy04MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XnOFlAWJfLWNFG66Nlb8Vti3qkccgYPnDuFnIOrEgwf7b3IBLG1y4yFQ304 j36nqi2+Mj3/2g3Z25QW+kP6lNZ4WfLG/sJiVn4sXcXU3OCUWjiN9OcbSMiEKThL g6kypLMq8wAKgTKc2CM3ZSBYYUjP5XCN7NNC3NvJ8W3fuCKeWpVuwlvSkoe6uoE7 NokBbnWcR4HfYDrkDtdwyYxvTCK24v8utFZ/d5aKJ8oZ+UTgdEHLBUoYWrKNSBph Qaj0Xbc9XREufh1pfUUiApuL48OSqlLs6MIdmEAd0luGKePNJtClPK9gAqlQ3wbC K5NvWgoymZn8qViGeclK7iswOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8YNVKS Ztx2stRZorVJI7KqrKPpMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHoOOpDKh41gfdwdj/bW3u54cci0WfrHNgBUVt1vgQLvJnBeF9BmnaGtOEia XNkkeOx0EsRXGMGSMU/F1vDxmME3lDM1BXc+zhp1kRmQnpVvSJoOM+5YGqTvUW22 vYEBDh5Q2k9pwvu9CNOhM+x66IsbIOSF0tzQdM7OBcWDPg8g40XtGSTeCa6Usgpc EyTsyRaikOyaKPfaLLZRSWvHcOycQg+xudsKdV16LkNTlMNoFtcihRiQ024202DJ 9weZlNY2Jk34AIEf5F2lBnB84Tcb81g1XPa9/JpSUh3iw+mu/iG8c5oHqy4lcCCo Bn5AzpSJEb9SDYRmiV6DG5ryYA== -----END CERTIFICATE-----Generated at Wed Apr 22 09:29:47 2026 by rpki-client