$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json) Hash identifier: vg06jx6uSKob54HYn4TZKPDPj4QUuIlncYpyVb88R9w= Subject key identifier: 62:60:10:E6:DA:37:03:6B:31:01:B4:98:4F:EA:00:8C:F5:59:04:CA Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft Manifest number: 1D Signing time: Tue 21 Apr 2026 08:43:35 +0000 Manifest this update: Tue 21 Apr 2026 08:43:34 +0000 Manifest next update: Tue 28 Apr 2026 08:43:34 +0000 Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: wE7XqYo4Vo7Bs6NZ038jIhdR9MgQ6WK1uhxo2Vr3/bM=) 2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC Validity Not Before: Apr 21 08:43:34 2026 GMT Not After : Apr 28 08:43:34 2026 GMT Subject: CN=69e738b7-368b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:12:72:84:b7:d7:4d:9d:b6:7c:36:19:9d: 92:a9:f1:75:e7:b8:4a:d5:2e:d9:f7:54:90:67:33: 97:75:19:04:08:9a:88:f1:34:92:ae:39:04:2f:36: 7d:be:e9:5a:fd:ae:82:01:71:aa:78:be:da:74:e3: 9c:96:b0:fb:95:9d:4d:7c:70:3c:a1:e2:18:2f:c8: 46:a6:a4:67:80:31:83:cc:5d:50:3e:8a:aa:fe:59: 16:c5:c8:bb:2c:19:ca:2e:8d:2e:11:b0:d4:0c:88: d0:88:97:27:cc:66:ef:57:6f:00:f1:f1:45:a0:0d: 54:b9:14:dd:4b:5e:0a:14:37:ce:dc:09:03:1d:58: b9:b7:ff:36:aa:01:bf:35:38:8d:13:10:b5:6f:47: 8c:bf:aa:b1:95:9f:7b:ea:64:9e:57:59:d3:f3:da: 72:16:2c:a3:ad:1a:c9:7a:11:e8:25:3f:d0:05:a3: 23:36:a0:30:91:7d:23:da:67:d7:89:c3:0b:57:1f: 2f:40:ea:89:e6:03:70:65:01:b8:55:5e:fd:fb:26: 75:53:7a:6e:51:6c:0c:85:f2:7f:58:d7:8a:b4:22: e9:a9:b0:a4:90:20:b3:31:53:1e:45:b0:47:bc:c6: fe:83:87:36:73:06:2f:e8:70:31:3a:b1:97:5d:13: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:60:10:E6:DA:37:03:6B:31:01:B4:98:4F:EA:00:8C:F5:59:04:CA X509v3 Authority Key Identifier: keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:33:f8:78:3b:fc:e6:bb:f5:b6:8e:05:c8:79:e5:be:19:72: 1f:c1:f6:4f:87:5d:47:df:15:f2:e6:ec:17:44:0d:8f:e4:a3: 2a:97:e7:e7:38:2d:c1:4e:2a:cf:e3:fa:a2:98:d9:78:d8:13: ec:d2:ec:67:75:7b:21:f6:10:a8:af:52:b8:0b:97:a7:dc:02: 90:88:12:d2:c4:81:52:7f:c8:ab:b8:9d:c0:a1:4e:67:91:1c: cc:6c:fa:51:18:30:87:2d:d9:6a:b1:11:42:9e:fe:1e:ee:4e: a3:ee:2d:c8:f4:1a:85:a0:16:c4:d8:95:96:f4:ed:77:67:07: 04:6e:32:2a:c2:0b:77:a4:5b:f2:f4:c1:c2:d4:54:50:20:b8: b5:8d:f5:12:20:f7:f4:4d:da:cc:76:d2:ee:05:82:33:cc:16: 4c:54:a1:8a:b2:cb:9e:2f:fe:0f:06:a3:38:33:30:2f:79:dc: ea:be:7f:6c:a1:b4:f9:a0:08:d2:07:2f:99:b8:5f:86:49:71: 5b:71:5c:87:12:8e:06:6f:82:64:27:e6:3d:7a:f4:11:d1:2b: eb:f4:b0:71:e2:73:1c:af:7a:1c:17:d3:e6:84:8e:b7:7c:0b: 77:bd:9b:00:f5:3b:51:2c:96:95:dd:a3:18:1d:6c:23:af:22: f5:c6:7f:57 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoNzJCNTQ5RTAzRkY3NTBBNTM5NzlEMDBEQ0IxREE2NDRC QjUyQUNBQzAeFw0yNjA0MjEwODQzMzRaFw0yNjA0MjgwODQzMzRaMBgxFjAUBgNV BAMTDTY5ZTczOGI3LTM2OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH9xJyhLfXTZ22fDYZnZKp8XXnuErVLtn3VJBnM5d1GQQImojxNJKuOQQvNn2+ 6Vr9roIBcap4vtp045yWsPuVnU18cDyh4hgvyEampGeAMYPMXVA+iqr+WRbFyLss GcoujS4RsNQMiNCIlyfMZu9XbwDx8UWgDVS5FN1LXgoUN87cCQMdWLm3/zaqAb81 OI0TELVvR4y/qrGVn3vqZJ5XWdPz2nIWLKOtGsl6EeglP9AFoyM2oDCRfSPaZ9eJ wwtXHy9A6onmA3BlAbhVXv37JnVTem5RbAyF8n9Y14q0IumpsKSQILMxUx5FsEe8 xv6DhzZzBi/ocDE6sZddE0jTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYmAQ5to3 A2sxAbSYT+oAjPVZBMowHwYDVR0jBBgwFoAUcrVJ4D/3UKU5edANyx2mRLtSrKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzI4MzEwMENBMTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L2NyVko0RF8zVUtVNWVkQU55eDJtUkx0U3JL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvY3JWSjREXzNVS1U1ZWRBTnl4Mm1STHRTckt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzI4MzEwMENBMTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L2NyVko0RF8zVUtV NWVkQU55eDJtUkx0U3JLdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGM/h4O/zmu/W2jgXIeeW+GXIfwfZPh11H3xXy5uwXRA2P5KMql+fnOC3BTirP 4/qimNl42BPs0uxndXsh9hCor1K4C5en3AKQiBLSxIFSf8iruJ3AoU5nkRzMbPpR GDCHLdlqsRFCnv4e7k6j7i3I9BqFoBbE2JWW9O13ZwcEbjIqwgt3pFvy9MHC1FRQ ILi1jfUSIPf0TdrMdtLuBYIzzBZMVKGKssueL/4PBqM4MzAvedzqvn9sobT5oAjS By+ZuF+GSXFbcVyHEo4Gb4JkJ+Y9evQR0Svr9LBx4nMcr3ocF9PmhI63fAt3vZsA 9TtRLJaV3aMYHWwjryL1xn9X -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:37 2026 by rpki-client