$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: eyewNVwROEUbqnREKpCcn5S8DGMy69i92nFJQY2ZuBk= Subject key identifier: B6:90:A9:C7:BF:6D:99:26:2D:E3:4C:3F:94:7C:04:F2:F7:5B:B7:C7 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0C9E Signing time: Thu 16 Apr 2026 18:27:25 +0000 Manifest this update: Thu 16 Apr 2026 18:27:24 +0000 Manifest next update: Thu 23 Apr 2026 18:27:24 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: e+iuhnA+HGcnjEUl/3QFPKNDPcKBOk9BnjKjEFjO93U=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: S7vABV4LANs4s/qDbVNaE7a/E/6cf6qzp42fekgpXlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Apr 16 18:27:24 2026 GMT Not After : Apr 23 18:27:24 2026 GMT Subject: CN=69e12a0d-95c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:f0:91:d1:e4:44:e8:90:91:a1:00:e5:af: 09:97:0e:21:7f:24:21:37:b4:88:89:25:11:58:2b: c0:54:63:8a:0b:71:92:ee:ef:ac:c1:cb:d3:2c:df: 87:42:ae:dd:76:56:55:2d:4a:38:a0:ae:f3:f1:8d: 14:38:e2:31:45:8a:7c:17:c2:e6:c3:86:84:2d:e4: 90:c0:11:fe:12:95:eb:1f:e2:a6:0e:1e:7e:6a:71: 05:76:6f:f2:ec:b6:6b:c8:e7:95:66:08:25:b0:94: a2:24:68:61:fc:92:51:fd:bd:61:6f:9a:1b:a3:4a: de:1e:08:ac:6d:8b:e2:be:e9:1e:56:93:1c:21:ed: 70:b9:b9:c5:a7:0a:c9:a9:54:80:e5:01:7f:b2:b9: 60:85:7c:7e:23:de:29:1d:41:dc:89:61:38:96:20: 90:2d:e5:09:e8:fc:b9:3a:7b:46:9b:91:8c:be:1e: b7:43:3f:aa:dc:b5:7e:d3:5d:26:39:27:28:da:01: a7:63:b8:e5:9c:83:3b:ea:71:1e:53:38:e5:08:e9: bf:16:ad:99:f9:a9:b0:81:52:f2:9a:71:0c:a9:34: c8:e3:1b:8a:9a:95:6d:cc:46:35:aa:00:73:b7:63: 41:1b:8c:ac:b2:64:eb:3c:64:a1:9f:10:44:12:d5: da:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:A9:C7:BF:6D:99:26:2D:E3:4C:3F:94:7C:04:F2:F7:5B:B7:C7 X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6b:ef:57:72:16:2e:b6:65:5c:98:52:c5:a5:3d:2b:ee:01: 7c:f5:66:e8:9d:04:0c:e0:13:03:72:ef:0a:f7:17:0f:f8:85: c2:fa:95:1a:86:10:c5:fa:6e:15:e2:d4:55:1a:55:6d:f3:c9: 36:52:e4:10:31:c1:e6:a9:af:48:d7:c8:d2:54:42:c2:f0:79: 11:e4:02:8e:e3:dc:8c:86:71:e2:e4:09:2a:c7:3e:26:24:9c: c5:52:d3:e0:5b:b5:e7:6a:f9:e5:1f:1a:4e:68:e2:c4:6c:f3: 6c:a5:7d:8a:6c:30:65:85:c5:7a:6b:1d:1a:a3:01:fc:19:d0: f7:57:56:17:1e:71:4c:62:fe:7d:fb:df:bb:b7:a8:71:af:05: 4d:81:77:99:01:e9:e1:e0:79:4c:58:75:a2:fe:63:40:5f:09: e2:08:15:f6:d4:44:c4:7b:06:4d:80:56:33:a1:69:db:d8:b6: a4:c5:33:10:0d:4e:0a:77:d7:78:87:44:5c:db:ba:26:72:4f: 43:9c:83:85:4b:f6:65:a0:ec:c3:a8:f4:9d:e6:3d:8e:bb:d1: 94:d4:fe:91:b8:a9:cd:4a:7c:78:49:1f:ef:75:79:e6:c8:e5: c5:73:67:4d:de:fe:3a:ae:da:8a:3a:1e:17:b7:99:5d:e3:97: 41:b9:4c:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjYwNDE2MTgyNzI0WhcNMjYwNDIzMTgyNzI0WjAYMRYwFAYD VQQDEw02OWUxMmEwZC05NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4fwkdHkROiQkaEA5a8Jlw4hfyQhN7SIiSURWCvAVGOKC3GS7u+swcvTLN+H Qq7ddlZVLUo4oK7z8Y0UOOIxRYp8F8Lmw4aELeSQwBH+EpXrH+KmDh5+anEFdm/y 7LZryOeVZgglsJSiJGhh/JJR/b1hb5obo0reHgisbYvivukeVpMcIe1wubnFpwrJ qVSA5QF/srlghXx+I94pHUHciWE4liCQLeUJ6Py5OntGm5GMvh63Qz+q3LV+010m OSco2gGnY7jlnIM76nEeUzjlCOm/Fq2Z+amwgVLymnEMqTTI4xuKmpVtzEY1qgBz t2NBG4yssmTrPGShnxBEEtXaWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaQqce/ bZkmLeNMP5R8BPL3W7fHMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADWvvV3IWLrZlXJhSxaU9K+4BfPVm6J0EDOATA3LvCvcXD/iFwvqVGoYQxfpu FeLUVRpVbfPJNlLkEDHB5qmvSNfI0lRCwvB5EeQCjuPcjIZx4uQJKsc+JiScxVLT 4Fu152r55R8aTmjixGzzbKV9imwwZYXFemsdGqMB/BnQ91dWFx5xTGL+ffvfu7eo ca8FTYF3mQHp4eB5TFh1ov5jQF8J4ggV9tRExHsGTYBWM6Fp29i2pMUzEA1OCnfX eIdEXNu6JnJPQ5yDhUv2ZaDsw6j0neY9jrvRlNT+kbipzUp8eEkf73V55sjlxXNn Td7+Oq7aijoeF7eZXeOXQblM6Q== -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:42 2026 by rpki-client