$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: G8MC3jD8giTJsETmX4dqIUmRYEhv1HdVO6vVAqA9enw= Subject key identifier: 3D:CE:B5:3B:A8:B7:8C:4D:65:DD:55:77:EE:CD:46:51:08:9A:AA:DC Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 083E Signing time: Sat 18 Apr 2026 20:50:17 +0000 Manifest this update: Sat 18 Apr 2026 20:50:16 +0000 Manifest next update: Sat 25 Apr 2026 20:50:16 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: YJzcv9AuP6vI4yBp3TeCXHd2NG994hm1+MqF9a5i5so=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: g7qg1j/BlXjx4IL6IJ73Vzos8b7yBkmpoG+vbhDXfpI=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 2R/fqixLYXQj2CN0sqD6jpnwoixSqADSrbi58jnvIx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 20:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Apr 18 20:50:16 2026 GMT Not After : Apr 25 20:50:16 2026 GMT Subject: CN=69e3ee89-0f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:db:8d:2d:2a:26:ea:36:7d:44:08:6d:34: 66:0b:98:6b:ab:71:d3:66:b1:b1:3d:2f:89:be:5c: 77:f4:65:c6:fc:48:11:b6:1b:ad:ab:08:45:e1:64: 25:fa:04:e0:73:be:e5:73:6a:20:9a:68:36:7e:f1: 75:0d:f7:79:81:db:d0:60:a5:9a:38:1e:6f:2d:db: 5e:98:11:00:82:7f:c2:c1:10:44:62:bb:02:7d:c0: df:2f:a6:b9:71:68:69:a0:dd:30:e0:12:f3:45:43: 84:18:1c:73:79:c5:7e:df:78:68:93:0d:39:5d:71: b0:16:46:c9:f5:84:71:bc:88:d2:1e:b4:46:99:fe: 32:60:c8:c3:a3:d6:16:b4:9e:0d:c1:54:f8:cb:ee: 92:2c:e7:51:f4:05:a8:ec:ed:07:3c:48:56:ba:87: c8:08:cd:74:c2:bd:c1:6c:0a:a5:45:69:10:66:35: 88:90:67:2c:01:bd:ee:8d:fd:7d:1d:c9:a7:79:05: 91:54:90:be:0d:e7:83:18:de:f9:a4:e5:d8:a3:63: f9:e1:b1:4c:0d:db:ea:48:17:be:06:5e:90:36:86: 2d:a9:71:12:2d:71:40:4f:1a:01:a2:3f:70:a6:4e: 5d:5c:04:a0:2f:7b:81:e2:c6:14:56:83:cd:4c:cc: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CE:B5:3B:A8:B7:8C:4D:65:DD:55:77:EE:CD:46:51:08:9A:AA:DC X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e0:74:b4:c8:2c:24:dd:a6:3f:bf:fc:9c:97:46:07:0a:d3: d8:a8:1d:19:e6:78:1c:6a:88:34:16:a8:41:48:f8:84:71:e4: 27:24:20:75:22:5f:a0:b4:1f:e7:10:04:89:64:19:88:51:d4: 5c:b2:bf:27:46:2e:89:00:af:3c:ad:24:0a:ff:fd:c2:9b:47: 67:17:17:b0:65:8f:29:52:56:99:72:34:83:0f:bf:49:2d:2f: b7:fe:8a:4f:e3:c3:d2:a1:e1:35:2e:ce:e5:3d:a2:ec:44:f6: 7a:b4:1b:33:ab:1d:0a:06:fd:c0:4f:87:86:2f:f9:27:d1:e4: 80:59:f6:b9:45:b1:7f:f1:05:14:86:e1:b4:25:e3:96:9e:70: b3:23:35:b6:70:ce:b8:8e:e4:36:90:da:68:2a:32:bc:1c:ea: 38:eb:f0:05:38:2a:5d:d6:74:10:35:24:1b:58:05:4c:78:be: 55:a7:e3:b2:13:43:24:2e:5b:2d:e2:c4:41:a8:43:77:35:84: 46:95:f2:88:33:62:48:6e:b1:8a:1c:35:cf:3a:9e:15:8f:ee: 4c:93:85:16:df:4f:07:61:0d:56:ba:04:d4:84:0a:12:72:8e: 17:29:ff:85:ac:be:93:9e:ee:b3:20:ce:1a:3b:e0:bd:35:75: 48:12:cb:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwNDE4MjA1MDE2WhcNMjYwNDI1MjA1MDE2WjAYMRYwFAYD VQQDEw02OWUzZWU4OS0wZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrvbjS0qJuo2fUQIbTRmC5hrq3HTZrGxPS+Jvlx39GXG/EgRthutqwhF4WQl +gTgc77lc2ogmmg2fvF1Dfd5gdvQYKWaOB5vLdtemBEAgn/CwRBEYrsCfcDfL6a5 cWhpoN0w4BLzRUOEGBxzecV+33hokw05XXGwFkbJ9YRxvIjSHrRGmf4yYMjDo9YW tJ4NwVT4y+6SLOdR9AWo7O0HPEhWuofICM10wr3BbAqlRWkQZjWIkGcsAb3ujf19 HcmneQWRVJC+DeeDGN75pOXYo2P54bFMDdvqSBe+Bl6QNoYtqXESLXFATxoBoj9w pk5dXASgL3uB4sYUVoPNTMz/7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3OtTuo t4xNZd1Vd+7NRlEImqrcMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPeB0tMgsJN2mP7/8nJdGBwrT2KgdGeZ4HGqINBaoQUj4hHHkJyQgdSJfoLQf 5xAEiWQZiFHUXLK/J0YuiQCvPK0kCv/9wptHZxcXsGWPKVJWmXI0gw+/SS0vt/6K T+PD0qHhNS7O5T2i7ET2erQbM6sdCgb9wE+Hhi/5J9HkgFn2uUWxf/EFFIbhtCXj lp5wsyM1tnDOuI7kNpDaaCoyvBzqOOvwBTgqXdZ0EDUkG1gFTHi+VafjshNDJC5b LeLEQahDdzWERpXyiDNiSG6xihw1zzqeFY/uTJOFFt9PB2ENVroE1IQKEnKOFyn/ hay+k57usyDOGjvgvTV1SBLL4A== -----END CERTIFICATE-----Generated at Sat Apr 18 23:37:59 2026 by rpki-client