$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: 2FSb9kLUqGjTYY8C9I66mnalhzC/vE4SBAq4U4eVnLM= Subject key identifier: 33:16:C3:DA:7A:07:BB:18:17:01:A0:DD:81:8D:BA:BC:80:82:94:E1 Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0F7D Signing time: Sat 04 Apr 2026 17:36:58 +0000 Manifest this update: Sat 04 Apr 2026 17:36:58 +0000 Manifest next update: Sat 11 Apr 2026 17:36:58 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: koN3QCvQM8BZmjdiTT9LZw3w5eG32h4dQXCJPun+J4s=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Apr 4 17:36:58 2026 GMT Not After : Apr 11 17:36:58 2026 GMT Subject: CN=69d14c3a-4194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:63:3a:c9:82:cd:46:a6:c1:80:72:13:30: 64:5e:89:54:c6:9c:b6:47:fe:44:a3:aa:78:fd:3b: 5c:12:89:dd:f0:01:b5:9c:a5:c8:3c:45:a2:7d:b4: a1:07:ce:ce:da:8d:d7:5c:ac:4b:01:71:83:b6:92: 9b:f0:a2:0a:27:6e:2f:4d:91:ce:b3:67:30:4e:d8: 54:59:6c:4c:a9:5e:75:16:12:49:15:04:2c:2a:45: 8b:c1:28:7b:80:47:8b:7c:d7:66:91:0d:c2:8a:13: 2e:48:c4:13:93:39:3b:aa:20:82:83:54:10:8f:9f: 23:f0:81:dd:5d:10:32:fc:07:7d:80:c0:66:f4:68: b2:b7:07:4e:6c:e1:76:16:1c:d0:e3:4b:bf:63:8f: 61:dc:5c:1a:15:f2:6e:28:58:1c:a1:7f:76:ac:45: fe:67:48:22:08:04:aa:57:58:c1:59:02:b9:ab:8e: 96:82:d8:76:71:55:9e:69:58:2d:f4:0c:66:7a:73: e2:f9:59:db:15:4f:da:9b:56:db:11:34:fc:6d:28: d7:e3:5d:cb:81:0d:c7:3d:36:22:39:47:59:c1:1a: cb:59:8d:a7:3f:7f:dc:35:4d:b0:f6:15:42:4b:a8: a4:46:4a:41:1f:fb:0c:1c:59:dd:ce:e0:34:12:c1: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:C3:DA:7A:07:BB:18:17:01:A0:DD:81:8D:BA:BC:80:82:94:E1 X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:60:b1:1e:5a:c5:58:e3:62:ea:29:53:6f:db:c0:c1:f1:f1: b1:d0:49:05:f3:08:30:74:ad:94:ad:0f:e0:13:12:9f:d1:a5: 84:27:bb:32:96:85:77:49:a8:4d:1b:44:7a:0b:73:a3:dc:d2: c4:9e:2e:6e:c5:60:1d:61:0c:6a:96:49:58:79:c4:70:90:cd: 2a:f2:51:ec:33:c8:81:90:35:cd:de:cf:7c:ea:97:05:de:fd: 77:ec:c5:88:5e:7f:50:35:2c:e0:1d:ac:58:90:8a:bf:aa:d0: 6a:f8:11:30:4e:37:63:8e:f6:23:bb:b9:0b:26:ad:88:20:3c: c3:da:a8:ec:85:24:1d:09:48:65:b8:96:a3:9e:26:2e:84:4e: ec:55:8b:bf:12:e2:f4:8d:da:fe:e2:66:d6:b3:83:b1:f9:06: 7b:c2:45:62:39:65:ad:64:d9:15:49:3b:43:c8:e7:66:a9:c2: dc:15:18:e4:99:42:53:9b:2f:1d:94:b0:97:c0:36:22:24:9b: 06:69:5f:ec:30:90:7f:8b:46:ab:cf:9a:da:7a:a1:bd:85:9b: 45:f8:b2:4a:bd:f7:6b:ad:50:3b:58:ee:99:2d:f0:9a:a2:f6: 84:a0:33:b2:f4:5d:bb:ee:7c:2c:8f:ba:bd:e2:fc:b7:e5:aa: 31:99:01:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF OTYwNkJGOEYwHhcNMjYwNDA0MTczNjU4WhcNMjYwNDExMTczNjU4WjAYMRYwFAYD VQQDEw02OWQxNGMzYS00MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzNjOsmCzUamwYByEzBkXolUxpy2R/5Eo6p4/TtcEond8AG1nKXIPEWifbSh B87O2o3XXKxLAXGDtpKb8KIKJ24vTZHOs2cwTthUWWxMqV51FhJJFQQsKkWLwSh7 gEeLfNdmkQ3CihMuSMQTkzk7qiCCg1QQj58j8IHdXRAy/Ad9gMBm9GiytwdObOF2 FhzQ40u/Y49h3FwaFfJuKFgcoX92rEX+Z0giCASqV1jBWQK5q46Wgth2cVWeaVgt 9AxmenPi+VnbFU/am1bbETT8bSjX413LgQ3HPTYiOUdZwRrLWY2nP3/cNU2w9hVC S6ikRkpBH/sMHFndzuA0EsGb2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMWw9p6 B7sYFwGg3YGNuryAgpThMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2 NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu MHdidU85SHF4MGpwWUd2NDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABmCxHlrFWONi6ilTb9vAwfHxsdBJBfMIMHStlK0P4BMSn9GlhCe7MpaFd0mo TRtEegtzo9zSxJ4ubsVgHWEMapZJWHnEcJDNKvJR7DPIgZA1zd7PfOqXBd79d+zF iF5/UDUs4B2sWJCKv6rQavgRME43Y472I7u5CyatiCA8w9qo7IUkHQlIZbiWo54m LoRO7FWLvxLi9I3a/uJm1rODsfkGe8JFYjllrWTZFUk7Q8jnZqnC3BUY5JlCU5sv HZSwl8A2IiSbBmlf7DCQf4tGq8+a2nqhvYWbRfiySr33a61QO1jumS3wmqL2hKAz svRdu+58LI+6veL8t+WqMZkBbw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:07 2026 by rpki-client