$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft File: rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json) Hash identifier: XWNagL/pz8laL9BLTcMb2DnxiH9TtUZLOFMkXwnXsCo= Subject key identifier: A9:1F:34:79:51:63:68:69:7A:16:0A:86:16:D6:01:97:BA:41:B3:DD Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC Certificate issuer: /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft Manifest number: 72 Signing time: Fri 17 Apr 2026 07:29:55 +0000 Manifest this update: Fri 17 Apr 2026 07:29:55 +0000 Manifest next update: Fri 24 Apr 2026 07:29:55 +0000 Files and hashes: 1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: fd+TbTdwOpwTw2vqWXS9pcIV2M4cDZsP9/O1FvwHrAU=) 2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: TEkM5L9gYDSbXl7l7QCjyJ+tRJyP8a0ZBB6nUCwEyKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Validity Not Before: Apr 17 07:29:55 2026 GMT Not After : Apr 24 07:29:55 2026 GMT Subject: CN=69e1e173-0121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:60:be:05:5c:08:5b:41:58:9c:cf:93:c7: 41:3e:99:e7:2e:f5:f3:e6:86:ad:dc:5b:e3:91:e3: 92:c5:ad:2c:4c:a4:c9:29:1e:c6:53:bb:74:39:89: 47:47:08:c4:3b:fd:70:db:1f:9b:89:df:ee:ec:09: 1c:5f:40:97:30:83:1e:e5:cf:ca:dd:a0:17:73:3e: f5:21:44:d9:78:5d:6b:a9:56:ae:d3:28:a8:4a:a9: a9:81:81:fb:74:82:fa:79:a7:6a:65:0c:e0:ea:39: c8:79:73:c7:15:7f:44:e2:d6:e7:56:b6:7f:6b:72: 4f:b5:57:45:7e:72:bb:ba:2b:2c:11:c3:91:23:b9: 93:9a:8f:24:78:ae:1b:a3:d2:01:a4:0b:91:21:b6: 6f:eb:88:18:bc:3c:df:d9:a0:f6:04:bc:d5:55:fe: 4b:f6:b5:c6:ae:39:0a:b9:1a:13:df:72:fb:db:a9: 0a:3e:e6:07:1f:33:dc:08:d9:aa:24:53:9c:57:cf: 73:28:ab:5a:a7:e8:70:2b:5f:b1:aa:d7:00:47:9f: 9f:eb:ef:ca:6c:88:57:a2:0d:67:84:6c:1b:41:75: 48:86:5c:69:4b:90:32:92:b6:ae:31:08:93:91:47: 43:a6:a0:78:60:91:16:10:60:0a:3c:69:a0:d5:4b: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:34:79:51:63:68:69:7A:16:0A:86:16:D6:01:97:BA:41:B3:DD X509v3 Authority Key Identifier: keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d2:ab:df:70:d0:96:aa:8e:96:a9:2c:7b:2a:d7:7f:99:77: df:dd:87:2a:76:3e:32:14:95:1a:6c:ef:f0:c4:d3:d4:0b:0d: 9d:60:e6:ee:8a:ba:75:a5:55:c8:99:70:71:63:bd:04:8c:0b: b1:b2:bd:9e:ef:61:c8:98:b5:3a:7b:b5:73:63:89:dc:e1:07: f9:6d:a7:28:64:3b:10:b0:0b:57:c1:85:01:e4:8a:ab:06:a7: 9d:8e:31:82:a3:5d:b8:ce:91:62:c3:ff:75:b0:ac:93:e9:66: a8:8d:7b:59:84:14:4b:29:33:eb:97:fd:e5:a3:ce:62:20:fe: f5:56:ab:03:25:3b:2d:66:90:4f:b2:1d:6a:cd:3c:2d:41:ce: 64:fe:54:4b:70:8e:24:b9:bd:a1:b8:8f:17:29:5f:50:28:9f: f4:d1:6d:f7:25:de:07:b5:90:4b:9b:7d:3a:b0:a7:89:6b:43: 75:61:62:14:28:cb:5c:32:0e:45:40:5d:9a:85:e6:66:20:85: fe:b2:5e:eb:c2:b2:fc:67:8d:87:57:94:74:ca:ff:c6:bd:b9: 16:12:66:f4:ce:e6:28:b3:e3:ec:74:ca:8f:8f:24:4b:4c:7a: 20:3b:ca:fb:b9:e1:d3:33:c5:1f:54:96:65:a4:07:e3:c0:32: 83:df:7b:6a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjRGNzExMC8GA1UEBRMoQUM3Q0QxNjM2OUQ3MERBNjY3NTk5REEzNjhFMjAyNDI0 OUNCMDJGQzAeFw0yNjA0MTcwNzI5NTVaFw0yNjA0MjQwNzI5NTVaMBgxFjAUBgNV BAMTDTY5ZTFlMTczLTAxMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbgmC+BVwIW0FYnM+Tx0E+mecu9fPmhq3cW+OR45LFrSxMpMkpHsZTu3Q5iUdH CMQ7/XDbH5uJ3+7sCRxfQJcwgx7lz8rdoBdzPvUhRNl4XWupVq7TKKhKqamBgft0 gvp5p2plDODqOch5c8cVf0Ti1udWtn9rck+1V0V+cru6KywRw5EjuZOajyR4rhuj 0gGkC5Ehtm/riBi8PN/ZoPYEvNVV/kv2tcauOQq5GhPfcvvbqQo+5gcfM9wI2aok U5xXz3Moq1qn6HArX7Gq1wBHn5/r78psiFeiDWeEbBtBdUiGXGlLkDKStq4xCJOR R0OmoHhgkRYQYAo8aaDVS3E9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqR80eVFj aGl6FgqGFtYBl7pBs90wHwYDVR0jBBgwFoAUrHzRY2nXDaZnWZ2jaOICQknLAvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNEY3LzEyQkFCODk2OEM2 RjExRjBCQzAzQTgyOEM0RjlBRTAyL3JIelJZMm5YRGFabldaMmphT0lDUWtuTEF2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckh6UlkyblhEYVpuV1oyamFPSUNRa25MQXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NEY3LzEyQkFCODk2OEM2RjExRjBCQzAzQTgyOEM0RjlBRTAyL3JIelJZMm5YRGFa bldaMmphT0lDUWtuTEF2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC60qvfcNCWqo6WqSx7Ktd/mXff3Ycqdj4yFJUabO/wxNPUCw2dYObuirp1pVXI mXBxY70EjAuxsr2e72HImLU6e7VzY4nc4Qf5bacoZDsQsAtXwYUB5IqrBqedjjGC o124zpFiw/91sKyT6WaojXtZhBRLKTPrl/3lo85iIP71VqsDJTstZpBPsh1qzTwt Qc5k/lRLcI4kub2huI8XKV9QKJ/00W33Jd4HtZBLm306sKeJa0N1YWIUKMtcMg5F QF2aheZmIIX+sl7rwrL8Z42HV5R0yv/GvbkWEmb0zuYos+PsdMqPjyRLTHogO8r7 ueHTM8UfVJZlpAfjwDKD33tq -----END CERTIFICATE-----Generated at Sat Apr 18 21:04:25 2026 by rpki-client