$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: bFdXP37v7jpsbHTZrIDbRMUGD5l+qBd5IkRlOG/hg/g= Subject key identifier: 1D:38:E2:33:C6:A2:AA:FD:05:80:26:D1:B4:2B:06:F0:0C:13:25:DE Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 0A6A Signing time: Thu 16 Apr 2026 19:31:57 +0000 Manifest this update: Thu 16 Apr 2026 19:31:57 +0000 Manifest next update: Thu 23 Apr 2026 19:31:57 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: JKcEfwhBMQuBYSMEu3UEmXJhQBqZt523MuZ/2REkZSY=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: q4cXehVjnW5Frytnddrazb4hlR7ZeGkY8+gUIhDzgls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Apr 16 19:31:57 2026 GMT Not After : Apr 23 19:31:57 2026 GMT Subject: CN=69e1392d-8eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:f1:a2:13:df:04:41:06:62:47:bb:8e:d2: a2:3b:78:c6:e3:66:75:68:17:a5:58:a2:cd:9a:eb: ea:fc:64:8d:a7:1c:c4:88:2b:a5:f1:6a:7d:60:46: a6:a0:6d:09:8e:c0:cd:5b:65:a4:e2:ad:d9:ac:ef: df:36:ff:06:92:06:1b:3e:f7:55:61:ad:eb:ca:b4: d7:ce:e5:6a:22:5e:a4:b2:50:36:cd:19:8c:0d:76: ec:d4:e4:77:cc:40:11:f4:3b:96:1b:71:f2:75:db: 7f:82:2e:7a:dd:78:ce:bd:ad:5d:e9:31:58:40:19: 40:7b:fc:20:d3:4e:1f:70:96:0f:dd:d1:ea:d1:ed: 51:e1:2e:8d:92:74:c3:95:ef:ef:34:20:b8:81:77: d4:b4:eb:1c:5b:45:0d:83:cf:e4:fd:ef:9e:71:e8: de:ef:2c:8a:f4:35:e5:a1:68:be:c6:0d:28:43:44: 8a:dc:ce:23:cb:b4:38:53:35:a7:45:b8:fd:3d:90: 51:7a:2d:60:ec:1e:a5:09:d2:a3:02:3d:f3:03:8e: 4b:28:dc:51:61:5b:57:88:0d:a1:2d:15:a3:1e:fc: 0f:66:7f:1c:66:d4:eb:15:74:0d:80:4e:47:e6:ea: a1:33:5a:ec:3a:5d:cb:12:4e:73:fa:da:2e:d1:de: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:E2:33:C6:A2:AA:FD:05:80:26:D1:B4:2B:06:F0:0C:13:25:DE X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e3:63:fb:6f:b2:7e:86:33:90:b2:d0:08:14:78:4e:c1:c2: 1c:09:4e:59:bd:55:b0:e9:f0:04:58:df:f9:32:e4:70:b8:bd: 8d:03:16:66:5c:f8:1c:21:82:2c:fc:68:36:84:1a:1d:2d:af: ef:f8:95:10:bf:82:b2:0a:c6:b6:85:b1:ee:66:7e:54:05:5d: e2:7b:66:d0:f0:67:2f:9f:9b:e0:cd:5f:23:2f:5e:f2:f9:b5: 6a:4c:68:76:1f:08:39:08:1b:1d:0f:a9:b8:58:b8:da:e0:02: b5:f3:9a:97:5b:11:85:57:c2:27:e9:af:b8:63:e8:00:a1:45: 6b:c9:6c:6a:a6:62:88:88:5f:9a:3c:8d:9a:04:1e:27:d5:28: 30:c0:e2:f6:23:d9:48:ad:bf:0a:e0:35:95:a4:f0:08:b3:aa: 4c:4c:5f:57:17:18:64:71:93:4c:1b:23:ed:e7:71:4c:99:6d: b4:55:6d:07:78:ee:b8:68:a1:39:55:04:ba:ef:02:a7:e9:30: a2:5a:42:16:c2:ca:d2:c3:10:58:91:9e:c9:39:15:ce:c6:73: bd:28:75:87:76:e5:8b:9d:0f:0c:4a:58:48:fc:da:d6:1e:70: f5:29:22:4d:2f:32:c0:69:74:fe:87:1a:7e:12:05:8d:b3:8f: 70:cb:19:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjYwNDE2MTkzMTU3WhcNMjYwNDIzMTkzMTU3WjAYMRYwFAYD VQQDEw02OWUxMzkyZC04ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArd/xohPfBEEGYke7jtKiO3jG42Z1aBelWKLNmuvq/GSNpxzEiCul8Wp9YEam oG0JjsDNW2Wk4q3ZrO/fNv8GkgYbPvdVYa3ryrTXzuVqIl6kslA2zRmMDXbs1OR3 zEAR9DuWG3Hyddt/gi563XjOva1d6TFYQBlAe/wg004fcJYP3dHq0e1R4S6NknTD le/vNCC4gXfUtOscW0UNg8/k/e+eceje7yyK9DXloWi+xg0oQ0SK3M4jy7Q4UzWn Rbj9PZBRei1g7B6lCdKjAj3zA45LKNxRYVtXiA2hLRWjHvwPZn8cZtTrFXQNgE5H 5uqhM1rsOl3LEk5z+tou0d5A7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB044jPG oqr9BYAm0bQrBvAMEyXeMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuNj+2+yfoYzkLLQCBR4TsHCHAlOWb1VsOnwBFjf+TLkcLi9jQMWZlz4HCGC LPxoNoQaHS2v7/iVEL+CsgrGtoWx7mZ+VAVd4ntm0PBnL5+b4M1fIy9e8vm1akxo dh8IOQgbHQ+puFi42uACtfOal1sRhVfCJ+mvuGPoAKFFa8lsaqZiiIhfmjyNmgQe J9UoMMDi9iPZSK2/CuA1laTwCLOqTExfVxcYZHGTTBsj7edxTJlttFVtB3juuGih OVUEuu8Cp+kwolpCFsLK0sMQWJGeyTkVzsZzvSh1h3bli50PDEpYSPza1h5w9Ski TS8ywGl0/ocafhIFjbOPcMsZsA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:22 2026 by rpki-client