$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: ZVxR8ARKk5jJn3/Mu6bPJftoZAqsIda7Y8/WaDjqkd0= Subject key identifier: 3A:A4:8A:B2:FE:C4:65:BB:22:2D:7D:9E:31:AD:8A:C6:E4:61:EC:D7 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0D58 Signing time: Thu 16 Apr 2026 18:22:46 +0000 Manifest this update: Thu 16 Apr 2026 18:22:45 +0000 Manifest next update: Thu 23 Apr 2026 18:22:45 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: hUzXY/axmx/TzGbRykBgjsVlWnIq0f+ZkgVnb3XE31Q=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: Bv4I5rq7MBx0s2USNkw1xSvDRiJ8d4Rtj7uOmiuLiRo=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: EzHhVhOcZNg4rGX3+arvWhv7Y1/rtxS40spbE5dRN4w=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: 2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Apr 16 18:22:45 2026 GMT Not After : Apr 23 18:22:45 2026 GMT Subject: CN=69e128f6-9e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:8c:1e:03:3e:7f:2d:a9:f5:12:0e:bf:11: 66:0b:b9:99:d9:4e:00:9d:f2:70:9c:86:be:18:8d: 15:62:00:97:c5:47:c3:a7:6e:25:8e:5b:3a:57:b5: 27:5a:63:9b:6d:09:de:c1:37:46:7c:67:d1:24:a7: 7a:91:1e:f4:9e:5e:9d:3f:c1:78:ca:f5:47:52:2b: 83:30:c0:e1:18:27:b3:2d:c6:25:96:97:69:5d:1a: e1:fa:b0:7b:69:06:88:31:78:7b:01:a4:f7:66:11: 06:6e:47:b7:eb:8b:9a:7b:0a:9e:36:98:e3:83:71: 5d:5a:a7:f9:f5:d9:c2:95:bf:3b:15:f3:79:74:f4: c6:b7:e0:1a:c4:06:4f:21:ee:dd:6c:32:9e:55:ba: 0c:ad:fd:07:d7:f9:a7:d1:cc:d0:c1:c8:6b:62:97: 30:6f:43:e3:46:f5:7e:5f:ef:34:f8:5d:58:95:d2: ec:15:d4:ea:a9:99:7e:d2:17:8f:bd:f5:18:2b:ea: c1:81:fe:47:e5:8e:f5:bf:a4:ed:0b:c0:e5:a8:ae: 15:ff:35:4c:f6:f8:c0:9f:72:1f:a8:49:86:6d:56: e4:58:31:a2:08:07:d5:93:1a:8b:04:45:c9:87:01: ba:19:b5:d4:e1:b5:33:bf:e1:45:a5:80:9e:65:92: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A4:8A:B2:FE:C4:65:BB:22:2D:7D:9E:31:AD:8A:C6:E4:61:EC:D7 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:94:68:c8:70:3f:7b:59:68:96:ac:b6:83:2c:6c:6a:e6:f8: 26:3e:7e:70:b0:9a:fb:9e:eb:37:a4:e4:20:90:d2:37:a0:19: d1:c4:79:ca:c3:4b:75:65:59:a7:f4:0e:10:b4:fb:fe:3a:d8: 5f:91:c1:7d:f8:19:8f:0f:03:4f:ae:29:02:57:d1:12:a3:1e: 55:1f:85:16:45:2f:0c:ef:4a:0b:cc:c7:79:5a:6a:3d:c9:e5: d6:0f:85:25:39:ad:7a:10:63:24:a8:dc:cb:43:b2:65:42:68: 40:ca:02:4f:6e:9f:2e:17:a3:8a:d9:c6:eb:48:d5:a8:7b:26: f5:1d:c1:ae:3f:62:d5:07:f6:1d:24:3a:bd:ec:d1:68:70:19: a5:b6:f6:24:04:3a:21:e9:6d:0e:78:8f:bb:e6:51:2a:cd:3b: bc:63:fe:0a:a7:13:51:84:1a:9e:ed:24:d4:2e:4a:92:24:29: 4e:b0:65:37:f5:1f:fe:ec:c8:f8:28:a8:2e:84:27:70:cf:1d: 76:14:0a:56:b6:95:de:55:6f:ec:a0:f3:10:30:77:ea:85:98: e4:2b:45:2a:ef:f5:99:58:e8:82:21:1e:94:46:ca:be:f4:0a: d5:91:a7:2e:d6:db:8e:9e:e3:69:0d:e8:8d:b6:8b:a6:85:d3: 96:ca:81:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjYwNDE2MTgyMjQ1WhcNMjYwNDIzMTgyMjQ1WjAYMRYwFAYD VQQDEw02OWUxMjhmNi05ZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkw+MHgM+fy2p9RIOvxFmC7mZ2U4AnfJwnIa+GI0VYgCXxUfDp24ljls6V7Un WmObbQnewTdGfGfRJKd6kR70nl6dP8F4yvVHUiuDMMDhGCezLcYllpdpXRrh+rB7 aQaIMXh7AaT3ZhEGbke364uaewqeNpjjg3FdWqf59dnClb87FfN5dPTGt+AaxAZP Ie7dbDKeVboMrf0H1/mn0czQwchrYpcwb0PjRvV+X+80+F1YldLsFdTqqZl+0heP vfUYK+rBgf5H5Y71v6TtC8DlqK4V/zVM9vjAn3IfqEmGbVbkWDGiCAfVkxqLBEXJ hwG6GbXU4bUzv+FFpYCeZZLRrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqkirL+ xGW7Ii19njGtisbkYezXMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoZRoyHA/e1lolqy2gyxsaub4Jj5+cLCa+57rN6TkIJDSN6AZ0cR5ysNLdWVZ p/QOELT7/jrYX5HBffgZjw8DT64pAlfREqMeVR+FFkUvDO9KC8zHeVpqPcnl1g+F JTmtehBjJKjcy0OyZUJoQMoCT26fLhejitnG60jVqHsm9R3Brj9i1Qf2HSQ6vezR aHAZpbb2JAQ6IeltDniPu+ZRKs07vGP+CqcTUYQanu0k1C5KkiQpTrBlN/Uf/uzI +CioLoQncM8ddhQKVraV3lVv7KDzEDB36oWY5CtFKu/1mVjogiEelEbKvvQK1ZGn Ltbbjp7jaQ3ojbaLpoXTlsqBpg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:17 2026 by rpki-client