$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: MbXuo2u2ZvW9Jer16UKvv4BitBUexQ96mO1Qg+4xTCI= Subject key identifier: 5B:1B:5E:31:10:A1:AA:67:3F:4C:EC:4E:38:18:CD:F5:5A:82:F8:45 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0FB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F9E Signing time: Sat 04 Apr 2026 17:25:42 +0000 Manifest this update: Sat 04 Apr 2026 17:25:42 +0000 Manifest next update: Sat 11 Apr 2026 17:25:42 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: gya4qB8ickYvq/vgo8CzgLfu+nNYx2r5XjQXJKutjok=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: zCyf9OjZvyQznidGrRLY9YgyvLWdtz4Gp+P2ldxQodg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Apr 4 17:25:42 2026 GMT Not After : Apr 11 17:25:42 2026 GMT Subject: CN=69d14996-fc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:a7:ec:16:87:ca:ed:04:1f:ac:a8:ba:ea: 03:bd:ea:a5:64:b0:d5:e5:8c:da:db:56:f5:1a:16: 85:01:75:60:83:38:80:d3:cb:af:6f:39:0d:f0:ad: 2a:dc:fd:d0:d8:ca:9c:e8:25:18:52:be:ac:33:c6: 45:7c:33:fb:ae:ae:8c:67:87:13:84:40:10:40:6b: 61:40:4e:ec:6c:57:d8:4c:85:53:d3:89:46:44:3f: 4a:df:18:07:e8:df:05:0e:8f:e3:8b:f0:c9:a1:7c: 4a:4f:bf:e1:f9:43:13:b2:37:bc:ce:e2:f2:61:9f: ee:42:48:89:d0:b8:67:02:e1:54:12:5c:25:fd:fd: b4:74:c3:cb:2b:d7:f5:f8:a9:81:f0:a5:6e:37:f6: c8:85:f6:df:a2:ff:da:27:b9:b0:22:7b:fa:f1:46: 87:a6:ce:5c:18:7c:52:23:08:7d:1d:e4:99:09:37: 95:6c:45:f1:bd:d8:a7:9b:2b:6b:85:49:30:af:4b: 30:56:66:ab:e7:cf:94:39:9b:16:3d:7b:0a:d1:75: de:d3:12:51:6e:1d:30:b8:c2:45:31:62:66:44:15: 70:41:36:57:6c:af:c0:00:55:a5:59:2f:6c:16:77: ed:57:2f:58:ff:ab:4c:36:e2:32:bd:8c:80:53:9a: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1B:5E:31:10:A1:AA:67:3F:4C:EC:4E:38:18:CD:F5:5A:82:F8:45 X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6b:9d:a4:23:b4:f0:25:ff:b2:9d:2a:49:c7:1e:9c:8c:a6: 17:3a:18:88:98:5e:01:8d:35:44:a1:af:f6:c7:b3:a1:30:06: 57:d9:50:85:fd:84:ca:4d:04:d0:1c:c3:5e:d3:89:71:58:d9: 6c:88:1e:85:b9:f8:2d:e9:1e:8d:de:ea:9a:55:88:fc:e0:9f: 56:70:83:ed:43:5c:c8:41:aa:fd:ce:3b:24:e5:06:c6:0f:e6: ef:84:0e:37:4a:c1:37:b3:c7:83:1f:85:46:27:cc:73:87:98: 6d:db:bc:97:20:c7:1a:e6:10:1d:dc:c6:c7:0c:2d:b0:a2:0d: 13:6d:ce:df:30:df:33:63:67:46:ae:9b:d9:b6:50:41:7e:11: 3f:e1:ba:da:d0:bf:da:20:7c:1b:1c:59:2d:78:19:91:2f:8f: be:3d:11:3d:fe:c0:4c:32:58:fb:4f:48:34:58:bb:3b:74:c5: 58:c3:ed:22:85:a1:b6:4f:62:93:8c:f7:54:00:3c:83:d2:1a: 24:a0:76:42:99:57:0c:49:29:8e:8f:69:90:97:c1:25:a1:dd: cf:53:a2:c9:c4:c9:3d:11:22:51:ca:13:40:4a:6f:a1:f9:2f: 95:35:0f:dc:b2:b6:ac:86:47:24:48:5c:86:8b:9a:19:5f:3e: 69:a6:d2:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjYwNDA0MTcyNTQyWhcNMjYwNDExMTcyNTQyWjAYMRYwFAYD VQQDEw02OWQxNDk5Ni1mYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsyn7BaHyu0EH6youuoDveqlZLDV5Yza21b1GhaFAXVggziA08uvbzkN8K0q 3P3Q2Mqc6CUYUr6sM8ZFfDP7rq6MZ4cThEAQQGthQE7sbFfYTIVT04lGRD9K3xgH 6N8FDo/ji/DJoXxKT7/h+UMTsje8zuLyYZ/uQkiJ0LhnAuFUElwl/f20dMPLK9f1 +KmB8KVuN/bIhfbfov/aJ7mwInv68UaHps5cGHxSIwh9HeSZCTeVbEXxvdinmytr hUkwr0swVmar58+UOZsWPXsK0XXe0xJRbh0wuMJFMWJmRBVwQTZXbK/AAFWlWS9s FnftVy9Y/6tMNuIyvYyAU5r8bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsbXjEQ oapnP0zsTjgYzfVagvhFMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArGudpCO08CX/sp0qSccenIymFzoYiJheAY01RKGv9sezoTAGV9lQhf2Eyk0E 0BzDXtOJcVjZbIgehbn4Lekejd7qmlWI/OCfVnCD7UNcyEGq/c47JOUGxg/m74QO N0rBN7PHgx+FRifMc4eYbdu8lyDHGuYQHdzGxwwtsKINE23O3zDfM2NnRq6b2bZQ QX4RP+G62tC/2iB8GxxZLXgZkS+Pvj0RPf7ATDJY+09INFi7O3TFWMPtIoWhtk9i k4z3VAA8g9IaJKB2QplXDEkpjo9pkJfBJaHdz1OiycTJPREiUcoTQEpvofkvlTUP 3LK2rIZHJEhchouaGV8+aabS9Q== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:00 2026 by rpki-client