$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: sB1I4Ho0WYj4ZP8vDO0gnnVdf3KrCtGQzcsBcxX+gKQ= Subject key identifier: 7F:BE:31:9C:BB:A7:8F:4E:48:EB:EF:F5:EA:5A:7B:08:C5:AB:84:B0 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 0474 Signing time: Fri 17 Apr 2026 00:00:52 +0000 Manifest this update: Fri 17 Apr 2026 00:00:51 +0000 Manifest next update: Fri 24 Apr 2026 00:00:51 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: qgMQID5OU5CO4G8tPE2NykdU8x5OkQOXHpozoE+F7cc=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 607WTIqC4PIUwpaUGmTN6xifKoIF7YfDRmmrGwuTkFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Apr 17 00:00:51 2026 GMT Not After : Apr 24 00:00:51 2026 GMT Subject: CN=69e17833-55d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:74:1f:81:9b:50:2a:b0:c6:91:68:1e:4e: 1c:78:e5:23:f0:0e:98:e1:d8:19:61:4a:ba:87:fd: 3c:82:58:25:2b:2f:f7:fa:65:89:fb:c7:d6:73:60: 16:06:0c:62:79:4e:0f:f3:de:27:7a:0d:e1:be:d5: 6e:51:98:7e:65:36:87:a9:34:6b:22:23:a2:3e:23: 21:25:23:17:85:77:08:2a:0b:fb:bc:21:aa:17:d4: 4c:57:17:e3:4f:86:40:aa:25:dc:4a:26:31:88:93: 14:1d:bc:62:b9:59:3a:cd:7e:ec:7e:70:d2:d8:e4: 20:00:a7:28:e5:7a:06:00:cd:a0:83:16:39:0e:2f: ce:ce:50:3e:42:17:6f:4c:c4:fc:9f:ff:98:1b:51: cb:eb:19:76:f6:85:83:ff:74:b7:b3:4a:ea:54:c3: 90:d9:7f:22:f6:b3:52:13:58:58:63:4b:22:5b:26: 97:fe:7a:b7:fc:dd:62:be:5f:7f:91:45:f3:b7:46: ee:6f:5f:45:38:17:24:8d:12:c1:12:63:7d:26:53: 01:67:96:61:ed:ef:c7:b0:82:67:d4:aa:7d:48:4b: ca:2a:4a:63:ff:42:66:0a:df:aa:ff:c9:19:f9:e4: 48:6b:12:a5:16:e5:cc:7b:d3:30:5f:a2:41:51:f1: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BE:31:9C:BB:A7:8F:4E:48:EB:EF:F5:EA:5A:7B:08:C5:AB:84:B0 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:64:6d:e1:15:75:b9:78:61:e8:fd:5f:36:f2:97:1b:79:38: bc:83:31:cd:ef:6d:f7:97:f9:a9:56:96:94:6a:19:01:96:b7: 32:9d:b3:a1:a2:8e:6f:65:57:27:57:8f:f9:fc:92:b5:ec:40: f0:b1:11:d5:e4:91:00:ba:a9:f3:bf:dc:55:07:19:d7:06:d4: e6:08:83:fa:5c:f9:fe:8d:15:08:07:e7:4c:81:72:6c:ef:ab: 40:97:5f:eb:dd:68:49:13:50:a2:b8:63:f2:c2:35:a5:27:c4: 4a:50:42:62:95:f9:88:5e:2d:fd:f2:2a:49:96:2a:f1:a5:82: cf:90:96:ef:43:71:ea:c2:56:13:8f:d9:a3:75:a8:fa:55:96: 40:f2:93:6c:80:39:e5:6e:f6:61:cc:f1:49:83:b5:d1:05:c9: 37:d2:d3:71:5e:6d:63:61:6e:cf:94:34:7e:e5:91:e1:bb:47: 6c:e2:47:6c:bf:6c:3e:f0:0d:a2:ab:f8:11:9c:da:42:c9:14: 6d:01:1c:71:53:e7:28:77:87:b6:24:bd:ea:ea:94:34:a3:71: 21:8d:ed:c7:5f:5d:01:10:a9:d5:3a:3e:a6:1b:57:ea:2d:5c: 4f:7c:a2:f0:05:4d:69:b1:10:ba:af:89:d2:4d:56:f3:e3:c1: ef:ce:84:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjYwNDE3MDAwMDUxWhcNMjYwNDI0MDAwMDUxWjAYMRYwFAYD VQQDEw02OWUxNzgzMy01NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXp0H4GbUCqwxpFoHk4ceOUj8A6Y4dgZYUq6h/08glglKy/3+mWJ+8fWc2AW BgxieU4P894neg3hvtVuUZh+ZTaHqTRrIiOiPiMhJSMXhXcIKgv7vCGqF9RMVxfj T4ZAqiXcSiYxiJMUHbxiuVk6zX7sfnDS2OQgAKco5XoGAM2ggxY5Di/OzlA+Qhdv TMT8n/+YG1HL6xl29oWD/3S3s0rqVMOQ2X8i9rNSE1hYY0siWyaX/nq3/N1ivl9/ kUXzt0bub19FOBckjRLBEmN9JlMBZ5Zh7e/HsIJn1Kp9SEvKKkpj/0JmCt+q/8kZ +eRIaxKlFuXMe9MwX6JBUfF8VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH++MZy7 p49OSOvv9epaewjFq4SwMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkWRt4RV1uXhh6P1fNvKXG3k4vIMxze9t95f5qVaWlGoZAZa3Mp2zoaKOb2VX J1eP+fyStexA8LER1eSRALqp87/cVQcZ1wbU5giD+lz5/o0VCAfnTIFybO+rQJdf 691oSRNQorhj8sI1pSfESlBCYpX5iF4t/fIqSZYq8aWCz5CW70Nx6sJWE4/Zo3Wo +lWWQPKTbIA55W72YczxSYO10QXJN9LTcV5tY2Fuz5Q0fuWR4btHbOJHbL9sPvAN oqv4EZzaQskUbQEccVPnKHeHtiS96uqUNKNxIY3tx19dARCp1To+phtX6i1cT3yi 8AVNabEQuq+J0k1W8+PB786EfA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:16:54 2026 by rpki-client