$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: piLnX9bDfymqzy/DbKux7R0/4u+v0byH0ySL146X7Jk= Subject key identifier: 66:B3:E6:E9:82:5A:19:3B:79:14:A1:EA:B0:70:ED:95:21:D2:3D:D9 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D8C Signing time: Sat 04 Apr 2026 17:48:37 +0000 Manifest this update: Sat 04 Apr 2026 17:48:37 +0000 Manifest next update: Sat 11 Apr 2026 17:48:37 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: 3KUmoxsaPUJNMbrBOXLbKF/2nD9z+fbI8geBMiP5EFs=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=) 3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Apr 4 17:48:37 2026 GMT Not After : Apr 11 17:48:37 2026 GMT Subject: CN=69d14ef5-14cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:73:df:12:f4:42:33:40:36:76:24:64:e7: f9:2d:67:1b:06:5f:0b:f2:7e:a8:1b:32:bc:22:18: 16:e4:4e:1c:cd:b1:d0:a8:88:89:ce:98:fd:a8:ab: ed:a3:b6:fd:2e:88:0a:a0:0a:3a:f6:02:e9:55:e1: 2b:b3:2d:27:86:c0:78:15:25:19:ad:44:8c:fd:71: 3e:69:f1:d1:e8:97:4f:02:d5:a1:1a:8b:7b:2a:d4: f4:73:5d:29:66:aa:74:1f:97:6b:a5:e5:37:b0:94: 47:8e:93:b9:d4:e1:70:5f:23:54:f0:00:51:1d:24: ca:d0:6a:56:a4:bb:67:5b:08:bb:13:0f:de:82:b7: d3:30:d6:cd:3c:78:c2:35:5d:94:db:76:15:7c:63: f7:34:08:49:19:19:3c:34:f1:ea:dd:19:fb:d5:7c: ad:18:fc:40:43:ac:10:82:4e:e0:91:ee:3e:f9:c5: 7f:26:0f:2d:bc:b2:82:22:57:42:c2:40:10:34:f3: 48:a2:88:0a:df:e3:79:fb:d1:6f:23:39:db:fc:79: f9:bf:54:11:05:6e:48:09:0e:86:8d:0b:34:9b:b4: 71:e7:21:81:ea:0b:ea:49:38:0d:fc:45:f1:b2:27: 0c:4d:aa:3c:dd:ef:54:a4:06:d6:07:5f:d3:36:94: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:E6:E9:82:5A:19:3B:79:14:A1:EA:B0:70:ED:95:21:D2:3D:D9 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:5f:ee:28:4e:4e:63:1a:99:e3:2d:00:80:a4:2f:95:d5: 8f:db:f4:b1:c8:ff:bf:10:d6:95:11:24:37:93:8b:f4:4c:47: 2a:57:88:6d:9f:52:f9:00:af:97:89:df:93:1d:fa:c7:23:01: 08:6e:e1:c5:b9:6c:1d:d7:ea:45:77:94:bb:51:19:14:79:8b: 1c:92:ae:0b:5e:1a:7f:97:5b:93:de:a0:c7:cd:67:c8:e0:b4: 15:93:0f:6e:2a:3e:20:f9:27:2e:7b:31:e6:e6:d5:74:d7:32: f7:b5:3d:3a:ec:eb:f0:de:d8:f8:4c:7c:24:24:c5:ed:0c:75: 59:8e:aa:50:8d:e0:9f:77:5a:5e:6c:ea:62:5e:79:0f:48:d6: 2b:f0:2d:30:55:66:d4:ff:1d:e2:26:7a:72:90:21:f0:84:81: 42:0c:9a:84:6d:e5:64:e8:bc:df:ab:12:f0:c3:ab:df:1d:c2: b5:34:0d:31:fb:d6:22:77:85:ab:50:fd:7d:c9:4d:8c:d7:43: 61:5e:fb:44:64:44:28:c0:5e:1d:24:51:8f:9f:0e:f0:3c:70: 0b:dd:82:65:d4:b5:a4:b1:4e:3a:fa:7e:16:3a:9a:63:6e:00: 7e:2a:05:f0:04:7d:f3:cd:3f:8a:38:b7:84:fe:c2:99:11:93: 4d:b8:e8:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwNDA0MTc0ODM3WhcNMjYwNDExMTc0ODM3WjAYMRYwFAYD VQQDEw02OWQxNGVmNS0xNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5lz3xL0QjNANnYkZOf5LWcbBl8L8n6oGzK8IhgW5E4czbHQqIiJzpj9qKvt o7b9LogKoAo69gLpVeErsy0nhsB4FSUZrUSM/XE+afHR6JdPAtWhGot7KtT0c10p Zqp0H5drpeU3sJRHjpO51OFwXyNU8ABRHSTK0GpWpLtnWwi7Ew/egrfTMNbNPHjC NV2U23YVfGP3NAhJGRk8NPHq3Rn71XytGPxAQ6wQgk7gke4++cV/Jg8tvLKCIldC wkAQNPNIoogK3+N5+9FvIznb/Hn5v1QRBW5ICQ6GjQs0m7Rx5yGB6gvqSTgN/EXx sicMTao83e9UpAbWB1/TNpQksQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaz5umC Whk7eRSh6rBw7ZUh0j3ZMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPjlf7ihOTmMameMtAICkL5XVj9v0scj/vxDWlREkN5OL9ExHKleIbZ9S+QCv l4nfkx36xyMBCG7hxblsHdfqRXeUu1EZFHmLHJKuC14af5dbk96gx81nyOC0FZMP bio+IPknLnsx5ubVdNcy97U9Ouzr8N7Y+Ex8JCTF7Qx1WY6qUI3gn3daXmzqYl55 D0jWK/AtMFVm1P8d4iZ6cpAh8ISBQgyahG3lZOi836sS8MOr3x3CtTQNMfvWIneF q1D9fclNjNdDYV77RGREKMBeHSRRj58O8DxwC92CZdS1pLFOOvp+FjqaY24AfioF 8AR9880/iji3hP7CmRGTTbjoIA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:26 2026 by rpki-client