$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: vgATqyUSGVjfV6oEenOc8RS51vGT5TUCk5h6D8XulWg= Subject key identifier: 51:BC:26:02:DA:A3:A2:5D:F0:C6:5A:BE:BD:C4:81:41:94:D6:BA:29 Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: C7 Signing time: Fri 17 Apr 2026 06:36:27 +0000 Manifest this update: Fri 17 Apr 2026 06:36:27 +0000 Manifest next update: Fri 24 Apr 2026 06:36:27 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: 0bq5YeXebZXKf2gHoWx7A/29psf1Q9WE5ta8Bli2obM=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: 09psz8wD6VQRY3lNubXSJ0qySYqq1I9NwqwomYkBSy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Apr 17 06:36:27 2026 GMT Not After : Apr 24 06:36:27 2026 GMT Subject: CN=69e1d4eb-ceac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:e2:89:93:89:0e:f5:ee:4d:65:88:cc:59: 11:50:44:77:9a:ce:2a:97:ec:1f:9c:27:42:7e:7c: a5:fd:8d:fa:d1:0d:c3:ad:f9:36:f3:2c:8e:b9:4a: 70:dc:39:5f:06:ae:f0:8c:c0:ef:af:f1:01:a1:3f: 6f:23:68:1d:44:fa:5b:7f:2a:10:28:40:01:f2:26: cb:3f:54:87:dc:ee:d1:89:67:ba:94:16:16:21:2e: db:ea:8c:23:f5:e9:58:18:50:7d:a2:31:88:b2:be: 96:7a:d1:a7:d7:ec:be:5d:72:0e:d8:bb:77:ac:5d: 8c:9e:17:15:e0:50:22:59:8b:ca:0b:2a:06:a5:51: 82:b4:c9:01:15:a3:8c:eb:ac:10:5c:b3:4d:34:92: 12:a4:7c:94:1a:d3:d2:6f:63:87:30:89:4a:10:d0: dc:a9:21:21:5d:d4:b7:ea:c8:ba:d2:d0:ef:3b:01: 16:08:40:90:0d:b7:4c:ed:d9:44:0a:de:0d:79:4f: 61:a9:e7:3e:36:4a:93:d6:8e:97:03:6c:4c:e6:14: 95:62:b4:6d:40:03:ba:b3:c3:8b:e1:10:20:53:1d: 2f:42:24:f1:50:ab:03:b2:bd:59:d2:42:0e:0d:c5: 0d:41:2e:ab:29:09:5f:e4:8e:f3:7d:ba:51:a5:28: 8e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BC:26:02:DA:A3:A2:5D:F0:C6:5A:BE:BD:C4:81:41:94:D6:BA:29 X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ae:cf:54:66:ec:6f:9a:0d:33:a4:13:50:7d:ce:ff:da:a0: b7:9e:70:88:97:16:a1:ad:92:d9:5f:10:3c:f3:fe:27:21:2d: bf:7e:0f:20:b2:b0:0b:f9:d3:66:13:b9:bd:57:ef:d2:30:72: 74:c5:db:45:c2:b7:80:4c:f0:18:90:a8:d7:6f:1e:9d:b8:f7: e7:83:80:e4:a8:b2:15:07:08:b3:47:9d:f3:a0:2b:e8:8a:aa: d8:af:a6:01:0f:1e:25:3f:47:0b:97:b0:07:8e:c1:1b:b7:39: 63:ea:f0:e4:25:36:30:06:46:9a:4e:7d:7e:59:99:4c:ec:a6: 73:b6:8c:86:3b:ef:ea:b7:c6:08:23:80:7e:93:55:4d:fb:1b: 75:6b:6e:75:ff:9d:1f:89:bb:8d:b4:c0:4d:b8:19:12:e6:a8: de:b0:96:db:af:c5:a4:b1:47:4d:d2:5c:fa:07:7b:20:f1:b5: f3:58:42:02:ea:8f:9c:c6:76:27:0c:5b:47:4e:02:ea:77:6a: 0c:c1:11:f9:f4:16:71:52:f2:66:41:36:8a:e9:e5:d1:39:73: 27:30:f5:8a:3c:5b:fa:67:6b:c3:ee:4f:dc:b2:63:a6:ea:47: f3:07:37:1f:e5:b7:e3:48:37:44:11:ec:8d:ad:1b:8c:69:67: d9:52:84:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKEIwRDUyNUVBOTlENEM4RUM3NTYwNzEyNkE0OUVGNjcw N0JENkY0QUQwHhcNMjYwNDE3MDYzNjI3WhcNMjYwNDI0MDYzNjI3WjAYMRYwFAYD VQQDEw02OWUxZDRlYi1jZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx07iiZOJDvXuTWWIzFkRUER3ms4ql+wfnCdCfnyl/Y360Q3Drfk28yyOuUpw 3DlfBq7wjMDvr/EBoT9vI2gdRPpbfyoQKEAB8ibLP1SH3O7RiWe6lBYWIS7b6owj 9elYGFB9ojGIsr6WetGn1+y+XXIO2Lt3rF2MnhcV4FAiWYvKCyoGpVGCtMkBFaOM 66wQXLNNNJISpHyUGtPSb2OHMIlKENDcqSEhXdS36si60tDvOwEWCECQDbdM7dlE Ct4NeU9hqec+NkqT1o6XA2xM5hSVYrRtQAO6s8OL4RAgUx0vQiTxUKsDsr1Z0kIO DcUNQS6rKQlf5I7zfbpRpSiOdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFG8JgLa o6Jd8MZavr3EgUGU1ropMB8GA1UdIwQYMBaAFLDVJeqZ1MjsdWBxJqSe9nB71vSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS83QkEzRTcwQzBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlPeDFZSEVtcEo3MmNIdlc5 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS83QkEzRTcwQzBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlP eDFZSEVtcEo3MmNIdlc5SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyK7PVGbsb5oNM6QTUH3O/9qgt55wiJcWoa2S2V8QPPP+JyEtv34PILKwC/nT ZhO5vVfv0jBydMXbRcK3gEzwGJCo128enbj354OA5KiyFQcIs0ed86Ar6Iqq2K+m AQ8eJT9HC5ewB47BG7c5Y+rw5CU2MAZGmk59flmZTOymc7aMhjvv6rfGCCOAfpNV TfsbdWtudf+dH4m7jbTATbgZEuao3rCW26/FpLFHTdJc+gd7IPG181hCAuqPnMZ2 JwxbR04C6ndqDMER+fQWcVLyZkE2iunl0TlzJzD1ijxb+mdrw+5P3LJjpupH8wc3 H+W340g3RBHsja0bjGln2VKE+w== -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:02 2026 by rpki-client