$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: rAGBfzZfvG8/Fy66LK7qIzw37JlvASJKcbyx4UgoG4s= Subject key identifier: 1C:2B:26:93:30:F9:0B:9E:E7:29:83:2D:BE:86:5C:85:74:6B:BE:4C Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04D9 Signing time: Mon 20 Apr 2026 23:49:28 +0000 Manifest this update: Mon 20 Apr 2026 23:49:28 +0000 Manifest next update: Mon 27 Apr 2026 23:49:28 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: sRm+d08VMMZUD7rHS+ThWVaBPX16SPyrLFO+p94lsb4=) 2: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 4: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 5: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 6: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 7: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 8: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Apr 20 23:49:28 2026 GMT Not After : Apr 27 23:49:28 2026 GMT Subject: CN=69e6bb88-0404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:70:68:59:93:f0:ef:f0:36:ac:2f:3f:56: ca:fa:b5:ab:14:fa:c1:9f:40:28:13:45:e2:bb:58: 4f:be:3c:81:9f:14:1a:1c:68:fd:c8:02:8b:5c:06: cf:7e:80:5c:e2:f8:0e:7c:3a:38:0b:f8:98:aa:c3: a8:11:5e:b2:92:cf:38:41:1d:93:06:e5:18:6c:77: 3f:64:66:32:17:af:cc:56:65:60:d3:3a:8a:10:a3: ed:ef:00:a6:8c:2c:95:c5:ba:df:e7:af:a4:b2:42: c8:b0:d4:5b:33:8f:a5:ef:20:5d:6f:77:a6:6a:e9: 57:02:50:6d:ce:f5:a4:2e:c4:48:d2:cc:5b:99:8d: 87:1d:d3:08:72:6e:9b:1d:1f:83:be:8a:9a:84:e9: 1e:06:f2:9a:9b:83:1a:c5:c2:14:a0:2c:da:66:9c: ca:87:e0:3d:e0:56:b4:89:0d:6b:f3:24:5f:e6:75: fd:67:36:75:85:fb:5c:3f:93:82:0e:5e:7c:33:09: 6f:0a:39:c5:1b:20:d7:a8:ff:24:7c:6f:b3:86:bc: 3f:35:e3:5b:b8:d9:a0:f3:72:e4:88:e2:36:43:18: 47:87:21:57:e8:66:16:b5:43:08:9d:69:9c:85:b3: cf:ac:3d:e7:fd:79:b0:cc:54:28:b7:94:a7:e9:86: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2B:26:93:30:F9:0B:9E:E7:29:83:2D:BE:86:5C:85:74:6B:BE:4C X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:99:e6:83:71:74:c5:1e:78:5a:36:24:aa:e8:f8:ec:bb: 60:cd:0d:85:27:f2:3e:ca:20:98:d4:cc:f9:d2:33:11:58:cd: 5b:32:70:9b:29:f8:28:39:a5:71:6f:0e:6c:3f:db:3a:83:5a: d4:96:a2:cb:cc:c5:6a:c6:05:86:d5:3c:d2:ef:6f:bb:d6:b3: a7:20:d0:a9:cd:71:0c:9f:32:a2:f3:87:93:7c:5e:11:c6:a1: cb:fa:2d:35:ae:ad:33:43:cc:28:b2:2a:71:e6:18:6d:d9:f8: 0c:f5:cf:c0:c8:89:36:38:ee:d4:5c:05:9e:11:4f:f4:9d:21: 04:5c:ee:35:ea:cd:4f:b8:d4:27:7e:e3:d2:73:d1:48:cc:91: 1f:7c:f6:ef:fb:6d:9f:d1:5a:24:a0:da:58:6b:dc:e4:2a:00: 7f:c6:b0:e4:0b:0a:bb:55:26:79:68:2d:1e:dc:2b:32:dd:4c: a4:71:25:19:1f:3b:50:13:78:3b:52:ac:74:fc:cb:8b:0b:d6: 51:61:9d:d3:1b:69:2d:af:19:89:19:48:2b:05:99:f6:6f:a0: c1:44:88:59:86:e3:56:90:04:9b:90:c8:bc:cf:81:b8:f5:0b: a2:9d:c2:81:1b:05:a7:98:38:cb:1d:bf:8b:af:1b:bf:27:c9: 23:75:91:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNDIwMjM0OTI4WhcNMjYwNDI3MjM0OTI4WjAYMRYwFAYD VQQDEw02OWU2YmI4OC0wNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc5waFmT8O/wNqwvP1bK+rWrFPrBn0AoE0Xiu1hPvjyBnxQaHGj9yAKLXAbP foBc4vgOfDo4C/iYqsOoEV6yks84QR2TBuUYbHc/ZGYyF6/MVmVg0zqKEKPt7wCm jCyVxbrf56+kskLIsNRbM4+l7yBdb3emaulXAlBtzvWkLsRI0sxbmY2HHdMIcm6b HR+DvoqahOkeBvKam4MaxcIUoCzaZpzKh+A94Fa0iQ1r8yRf5nX9ZzZ1hftcP5OC Dl58MwlvCjnFGyDXqP8kfG+zhrw/NeNbuNmg83LkiOI2QxhHhyFX6GYWtUMInWmc hbPPrD3n/XmwzFQot5Sn6YYHQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwrJpMw +Que5ymDLb6GXIV0a75MMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANySZ5oNxdMUeeFo2JKro+Oy7YM0NhSfyPsogmNTM+dIzEVjNWzJwmyn4KDml cW8ObD/bOoNa1Jaiy8zFasYFhtU80u9vu9azpyDQqc1xDJ8yovOHk3xeEcahy/ot Na6tM0PMKLIqceYYbdn4DPXPwMiJNjju1FwFnhFP9J0hBFzuNerNT7jUJ37j0nPR SMyRH3z27/ttn9FaJKDaWGvc5CoAf8aw5AsKu1UmeWgtHtwrMt1MpHElGR87UBN4 O1KsdPzLiwvWUWGd0xtpLa8ZiRlIKwWZ9m+gwUSIWYbjVpAEm5DIvM+BuPULop3C gRsFp5g4yx2/i68bvyfJI3WRPg== -----END CERTIFICATE-----Generated at Wed Apr 22 03:34:22 2026 by rpki-client