$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: smA6gZWcsX3BT2L7qB5H/DGfaosmuQnt6wB4Fekfyqc= Subject key identifier: BF:4B:CD:27:A4:62:9E:26:75:AE:C7:69:46:74:9C:34:C7:AE:80:F3 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 03A4 Signing time: Fri 17 Apr 2026 02:05:23 +0000 Manifest this update: Fri 17 Apr 2026 02:05:22 +0000 Manifest next update: Fri 24 Apr 2026 02:05:22 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: o+N9pz3LHAe6lskSsDSsNcWqL7JIwbkVUkzXSrfWQU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Apr 17 02:05:22 2026 GMT Not After : Apr 24 02:05:22 2026 GMT Subject: CN=69e19563-67ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:7d:89:4b:b7:b4:fe:6a:08:c5:e4:70:32: 65:42:32:38:c5:bf:c7:68:d0:e7:64:a6:85:76:32: e0:6c:18:7a:cf:5f:35:65:bc:2f:1e:e3:24:8e:a8: bc:9d:c5:21:9d:7f:64:16:82:6f:ea:eb:69:7e:f9: 7a:a3:9a:82:e3:21:93:ab:c6:2f:c9:b1:74:3b:4d: fe:4f:1f:ad:c1:e9:ef:44:29:11:95:9c:22:24:7e: 15:65:fb:97:d9:65:88:0f:c1:ab:16:89:82:b1:ab: 88:3e:5b:42:89:52:33:81:11:73:f5:4a:8d:30:51: b5:99:36:cf:a5:35:6f:de:b1:99:7f:d8:09:65:59: 32:db:ef:ae:da:7d:60:30:15:24:33:9e:99:34:22: 7f:69:88:90:83:ca:f0:76:f7:ec:44:86:5c:90:23: cd:f6:71:87:4e:26:2b:7a:26:34:21:7d:92:ed:aa: 96:c6:5e:a6:86:54:ea:c4:a6:c4:ee:a8:9b:93:da: 21:f2:e5:6f:b4:9f:70:3a:b3:e5:f1:65:ab:be:c2: b1:12:1d:64:d1:fe:a6:73:ff:77:3d:82:79:31:e3: b5:31:9b:fa:07:ec:45:8b:f8:ad:b7:cf:16:82:7b: 2c:84:3c:6e:b0:e0:04:c1:e4:cb:f4:b1:1c:f5:3d: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4B:CD:27:A4:62:9E:26:75:AE:C7:69:46:74:9C:34:C7:AE:80:F3 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6c:66:3b:73:87:fd:ab:f4:3c:a4:9a:f5:38:51:aa:0b:9a: 6e:97:7d:12:50:77:67:ab:a2:cc:ec:d4:df:cf:1c:e2:aa:62: a4:ae:5b:1e:a1:e5:a0:5e:b1:3c:9f:17:5f:0a:2c:f6:3f:ad: f3:c4:24:db:af:77:f1:2e:4f:95:29:39:08:fa:47:5b:ac:44: 4c:80:41:28:04:80:ae:8a:99:ed:70:89:26:02:b1:0c:a4:13: 7f:d4:71:07:4a:8d:b1:67:b6:f9:02:13:9d:64:c2:34:1d:45: ad:5c:d4:a8:a1:82:3a:da:b3:08:17:0b:0b:2c:05:5c:27:dd: 2e:7a:aa:c1:89:73:37:70:47:1a:9b:b7:aa:92:c6:99:ee:52: 75:6d:bc:4b:8f:24:84:94:9c:42:5d:4a:e2:7a:4b:24:ae:5d: 00:aa:c1:f2:51:38:f8:d5:53:f4:ae:3c:25:ca:3a:bc:9c:5b: 98:84:00:4c:25:4a:23:09:17:41:7b:68:4a:34:60:10:37:52: 10:91:94:ee:8e:d4:81:92:fb:dc:1d:38:3c:9e:68:90:6a:6a: d5:3b:86:21:79:59:a3:d4:e8:c2:4e:a8:39:42:2f:47:63:fd: 46:31:28:f7:4a:a9:a6:44:2c:b3:05:73:41:ac:50:d4:2f:b1: d4:4c:d9:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjYwNDE3MDIwNTIyWhcNMjYwNDI0MDIwNTIyWjAYMRYwFAYD VQQDEw02OWUxOTU2My02N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKV9iUu3tP5qCMXkcDJlQjI4xb/HaNDnZKaFdjLgbBh6z181ZbwvHuMkjqi8 ncUhnX9kFoJv6utpfvl6o5qC4yGTq8YvybF0O03+Tx+twenvRCkRlZwiJH4VZfuX 2WWID8GrFomCsauIPltCiVIzgRFz9UqNMFG1mTbPpTVv3rGZf9gJZVky2++u2n1g MBUkM56ZNCJ/aYiQg8rwdvfsRIZckCPN9nGHTiYreiY0IX2S7aqWxl6mhlTqxKbE 7qibk9oh8uVvtJ9wOrPl8WWrvsKxEh1k0f6mc/93PYJ5MeO1MZv6B+xFi/itt88W gnsshDxusOAEweTL9LEc9T1N3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9LzSek Yp4mda7HaUZ0nDTHroDzMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWxmO3OH/av0PKSa9ThRqguabpd9ElB3Z6uizOzU388c4qpipK5bHqHloF6x PJ8XXwos9j+t88Qk26938S5PlSk5CPpHW6xETIBBKASAroqZ7XCJJgKxDKQTf9Rx B0qNsWe2+QITnWTCNB1FrVzUqKGCOtqzCBcLCywFXCfdLnqqwYlzN3BHGpu3qpLG me5SdW28S48khJScQl1K4npLJK5dAKrB8lE4+NVT9K48Jco6vJxbmIQATCVKIwkX QXtoSjRgEDdSEJGU7o7UgZL73B04PJ5okGpq1TuGIXlZo9Towk6oOUIvR2P9RjEo 90qppkQsswVzQaxQ1C+x1EzZGw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:09 2026 by rpki-client