$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: XOEqsOgQswyx7lDtRZqpMlWdf51fn/XtHTlWlnZPWR8= Subject key identifier: 92:40:19:8B:66:33:EB:07:55:4C:2B:AA:72:01:90:B9:93:21:61:32 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 0286 Signing time: Mon 27 Apr 2026 01:38:48 +0000 Manifest this update: Mon 27 Apr 2026 01:38:48 +0000 Manifest next update: Mon 04 May 2026 01:38:48 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: lgt+TDL2Z7nC7YEWbiKI1OMLQUtjH1YMun9/UEC5Kl4=) 2: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=) 3: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Apr 27 01:38:48 2026 GMT Not After : May 4 01:38:48 2026 GMT Subject: CN=69eebe28-0229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:7d:72:eb:a7:8c:b3:96:05:32:db:df:5e: 2e:7f:ef:17:0a:0e:86:11:17:58:07:43:62:07:59: d5:6b:bc:e5:67:44:e0:de:95:5d:04:fd:6e:9e:e7: 0a:b2:50:9e:5a:b2:66:e6:d9:b0:5b:c4:52:92:77: 3a:bf:6f:4e:ae:13:c3:99:d0:9f:89:e3:f5:d1:18: 57:4b:e9:6d:34:93:f4:49:66:e9:da:99:e0:78:11: e4:38:fc:c3:8d:d8:8d:8d:14:47:59:e6:be:d2:5f: 60:42:f1:8d:46:45:6a:b9:54:51:98:ec:d7:72:c9: 6a:c8:ec:68:84:5b:54:da:a9:88:15:e1:8e:d4:e9: 98:10:f7:b1:4e:f4:32:89:a5:f1:ba:65:5c:d4:8a: d1:8e:d3:37:bb:05:36:2c:d9:a9:fa:73:7c:d2:b3: 8c:af:c3:44:31:78:49:f7:f4:c3:2e:43:e7:27:12: b7:6a:52:ac:28:b0:d1:95:34:e4:72:dc:b2:dd:a3: 85:22:99:77:30:8f:07:73:93:4b:e4:06:82:cb:48: 01:7a:02:75:e5:c5:7c:e5:ce:7c:30:cc:05:15:1c: df:c8:36:7c:50:8b:74:04:c3:06:a7:61:38:fd:95: c1:f0:2c:ff:b0:7c:ab:12:98:97:a6:e6:0a:7c:22: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:19:8B:66:33:EB:07:55:4C:2B:AA:72:01:90:B9:93:21:61:32 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:35:aa:fe:77:72:45:3e:2d:c6:13:24:bd:d2:f3:20:ac:f2: 02:bc:8c:1a:0e:9a:49:c5:96:d5:01:93:c0:a8:4d:7c:0e:ef: 3a:d1:3d:17:3c:34:96:ce:24:7f:1f:3e:df:02:62:4a:7f:ad: 2c:9c:ac:2d:d6:18:7e:25:1f:3a:8a:5a:8e:f4:04:33:8a:9c: 7b:19:1d:6b:37:e0:a5:1b:07:e5:d4:20:56:3f:3e:73:5f:de: 34:a9:56:6f:bf:90:fd:b9:7d:bc:f3:0f:34:96:d0:4e:ea:52: 26:fe:36:d5:d9:96:6c:5b:ef:8a:62:41:70:d3:96:dc:de:f7: f9:be:99:50:49:a8:72:3c:d0:87:89:f8:e9:5b:c4:b2:6f:66: 6d:4f:65:4a:39:f8:20:52:22:68:46:d8:7b:ff:f9:f2:a6:e3: 74:f3:39:11:c9:12:fc:9b:b0:23:2f:ad:13:2c:00:e3:51:04: 89:cb:98:52:3e:fd:85:88:ac:fa:40:cd:98:ff:e9:4d:81:30: d6:d3:9c:7f:78:a3:1e:97:ef:06:6d:95:f2:ca:fd:0b:8a:fa: 97:64:aa:48:8e:b1:f2:7b:3b:a1:cf:95:36:af:e4:5b:bd:dc: ad:7b:21:3e:f4:dd:61:01:52:56:bb:0c:c2:78:74:95:8d:ba: 38:bb:4c:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjYwNDI3MDEzODQ4WhcNMjYwNTA0MDEzODQ4WjAYMRYwFAYD VQQDEw02OWVlYmUyOC0wMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotp9cuunjLOWBTLb314uf+8XCg6GERdYB0NiB1nVa7zlZ0Tg3pVdBP1unucK slCeWrJm5tmwW8RSknc6v29OrhPDmdCfieP10RhXS+ltNJP0SWbp2pngeBHkOPzD jdiNjRRHWea+0l9gQvGNRkVquVRRmOzXcslqyOxohFtU2qmIFeGO1OmYEPexTvQy iaXxumVc1IrRjtM3uwU2LNmp+nN80rOMr8NEMXhJ9/TDLkPnJxK3alKsKLDRlTTk ctyy3aOFIpl3MI8Hc5NL5AaCy0gBegJ15cV85c58MMwFFRzfyDZ8UIt0BMMGp2E4 /ZXB8Cz/sHyrEpiXpuYKfCL8owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJAGYtm M+sHVUwrqnIBkLmTIWEyMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfzWq/ndyRT4txhMkvdLzIKzyAryMGg6aScWW1QGTwKhNfA7vOtE9Fzw0ls4k fx8+3wJiSn+tLJysLdYYfiUfOopajvQEM4qcexkdazfgpRsH5dQgVj8+c1/eNKlW b7+Q/bl9vPMPNJbQTupSJv421dmWbFvvimJBcNOW3N73+b6ZUEmocjzQh4n46VvE sm9mbU9lSjn4IFIiaEbYe//58qbjdPM5EckS/JuwIy+tEywA41EEicuYUj79hYis +kDNmP/pTYEw1tOcf3ijHpfvBm2V8sr9C4r6l2SqSI6x8ns7oc+VNq/kW73crXsh PvTdYQFSVrsMwnh0lY26OLtMGQ== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:41 2026 by rpki-client