$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: 0MlletUvMuAvxFT1ObiaU8GKu0MNkMnnG5stjDt23gQ= Subject key identifier: B0:D5:B4:DE:F1:E8:2B:40:7D:9E:7D:9C:7E:C3:5B:3F:6C:5D:5C:2A Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 08AF Signing time: Sat 04 Apr 2026 20:48:18 +0000 Manifest this update: Sat 04 Apr 2026 20:48:18 +0000 Manifest next update: Sat 11 Apr 2026 20:48:18 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: vaMIzr6R7F31mNeAhKGWPzhqrnkvJol9AbWo5vCbQ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Apr 4 20:48:18 2026 GMT Not After : Apr 11 20:48:18 2026 GMT Subject: CN=69d17912-8457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:a6:08:d0:45:a3:8a:9a:b9:90:07:0c:62: b6:4d:94:d5:7f:a4:54:74:8e:9d:0d:b0:38:86:67: a2:fe:54:15:9c:fe:89:d6:50:87:86:97:f0:95:9e: cd:88:bd:9e:b9:d3:82:9c:8c:53:e8:b8:9d:73:f2: 07:50:77:c4:6e:34:db:2e:6e:53:c4:ff:5e:4b:2c: 67:c5:88:45:0d:0e:95:e4:91:16:71:02:2b:c7:26: f3:94:e5:5b:bf:6a:25:67:01:02:5e:43:e8:16:ae: 48:1e:55:fd:6c:8f:9b:53:8e:f3:81:68:37:19:5a: 2b:32:12:b4:75:02:42:09:32:11:d7:e8:ae:f2:7f: 50:8a:5a:6f:5b:aa:b9:1f:3c:da:c6:02:f2:af:9b: 67:30:86:9a:f8:95:f5:33:ff:59:83:1e:59:56:eb: c3:7b:09:e2:fc:f2:91:41:50:83:98:39:81:f2:05: 2a:24:d2:52:b5:26:fc:75:ae:44:19:0e:a6:91:2d: b0:78:cd:fe:b3:42:e4:3d:2e:d1:77:cd:7f:f2:bc: e5:ae:48:10:ac:a2:de:c3:e2:01:64:bf:54:ae:82: fd:8f:1e:c6:96:c1:98:ae:92:aa:13:18:bf:17:6e: 29:fe:ae:76:26:5b:9f:ce:09:25:f9:66:80:03:d8: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:B4:DE:F1:E8:2B:40:7D:9E:7D:9C:7E:C3:5B:3F:6C:5D:5C:2A X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5c:5b:90:10:9a:c5:b1:f6:ac:9d:49:96:65:d3:17:8a:09: c9:1b:6a:e6:b1:d2:11:cc:cc:b5:34:95:92:fd:50:ef:d9:3b: 4e:40:44:a1:8b:b3:50:be:c0:c5:f5:a7:e2:c7:1a:d5:6e:ea: 61:1e:07:b6:d9:04:48:3a:ef:56:41:da:01:23:c7:a4:57:55: fd:3b:ed:89:c9:b9:16:50:ec:9b:bb:73:46:9e:cf:5b:e2:46: 89:8c:ba:a2:f5:df:02:77:ca:4b:42:a2:86:6e:a0:8b:82:08: 17:e0:ae:c7:5b:f4:7a:b0:62:ef:94:44:66:27:55:2d:17:a5: e0:a4:97:a5:65:86:f6:18:4f:54:05:39:c2:ec:e5:3e:85:69: 4e:b8:e5:f9:32:51:bf:86:e0:0e:92:45:bf:76:b8:3a:0a:9a: 0a:b6:5c:8d:4d:67:14:8b:b9:71:79:91:f6:14:ab:dc:d4:cd: 5d:bd:48:09:7d:c4:36:e8:b0:93:55:d1:df:f3:fe:df:82:6a: 1d:75:34:9f:9a:d5:64:6b:61:72:ff:87:ab:9f:9c:26:24:b6: b7:d7:04:fd:5a:6b:e6:31:cd:cd:fb:18:62:91:6d:e4:5d:25: 83:64:56:78:bc:ac:e4:6c:bc:49:67:40:82:7d:1f:7a:94:68: ca:e9:94:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjYwNDA0MjA0ODE4WhcNMjYwNDExMjA0ODE4WjAYMRYwFAYD VQQDEw02OWQxNzkxMi04NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx++mCNBFo4qauZAHDGK2TZTVf6RUdI6dDbA4hmei/lQVnP6J1lCHhpfwlZ7N iL2eudOCnIxT6Lidc/IHUHfEbjTbLm5TxP9eSyxnxYhFDQ6V5JEWcQIrxybzlOVb v2olZwECXkPoFq5IHlX9bI+bU47zgWg3GVorMhK0dQJCCTIR1+iu8n9QilpvW6q5 HzzaxgLyr5tnMIaa+JX1M/9Zgx5ZVuvDewni/PKRQVCDmDmB8gUqJNJStSb8da5E GQ6mkS2weM3+s0LkPS7Rd81/8rzlrkgQrKLew+IBZL9UroL9jx7GlsGYrpKqExi/ F24p/q52Jlufzgkl+WaAA9iEaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDVtN7x 6CtAfZ59nH7DWz9sXVwqMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASlxbkBCaxbH2rJ1JlmXTF4oJyRtq5rHSEczMtTSVkv1Q79k7TkBEoYuzUL7A xfWn4sca1W7qYR4HttkESDrvVkHaASPHpFdV/Tvticm5FlDsm7tzRp7PW+JGiYy6 ovXfAnfKS0Kihm6gi4IIF+Cux1v0erBi75REZidVLRel4KSXpWWG9hhPVAU5wuzl PoVpTrjl+TJRv4bgDpJFv3a4OgqaCrZcjU1nFIu5cXmR9hSr3NTNXb1ICX3ENuiw k1XR3/P+34JqHXU0n5rVZGthcv+Hq5+cJiS2t9cE/Vpr5jHNzfsYYpFt5F0lg2RW eLys5Gy8SWdAgn0fepRoyumULA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:25 2026 by rpki-client