$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: 3kr8rUcond3/7LbF1aHdA4crpDbz9rWh+nraH09v7yE= Subject key identifier: 70:86:56:6E:11:CB:49:EB:0B:FD:5E:F2:D9:E7:AE:FF:9A:73:69:AA Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: 0128 Signing time: Fri 17 Apr 2026 05:18:50 +0000 Manifest this update: Fri 17 Apr 2026 05:18:50 +0000 Manifest next update: Fri 24 Apr 2026 05:18:50 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: +vHkCgz6B+yARQ2pBj1tKykSTi2Q/bP8l+AEUeW6gk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Apr 17 05:18:50 2026 GMT Not After : Apr 24 05:18:50 2026 GMT Subject: CN=69e1c2ba-3b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:5d:90:8c:0c:e7:4d:fd:ba:59:56:1e:9d: d7:8d:8f:5c:c2:cc:26:e8:7d:09:d0:83:17:8d:f7: eb:0c:24:15:7c:bb:a3:49:0f:ef:26:f9:b8:b1:c4: 61:cf:72:be:87:4f:60:6d:79:fb:e1:b5:dd:20:27: 80:75:2a:82:79:a7:de:57:a9:62:cd:5d:00:fe:ef: 4e:8b:4d:aa:52:8e:ca:0e:24:db:3b:1c:4a:d4:9f: c9:7a:86:8b:ee:90:93:ba:c4:ff:39:ad:ef:e5:78: eb:fb:40:f8:8e:b0:d6:bc:4f:68:5e:ad:ab:ee:d4: 11:93:4d:8c:1f:79:47:d9:1d:8c:78:24:0f:28:80: 88:c8:78:e3:0f:42:76:0f:2a:30:c9:e3:b7:21:82: c0:d0:c7:51:2e:14:85:be:80:f7:70:82:3b:2f:d1: c6:a3:ca:9f:85:ff:98:b3:cb:b0:33:18:85:0a:3a: 16:9a:1b:ff:d3:91:9e:fb:09:ce:72:42:39:3e:4a: 9a:34:01:a4:1f:c4:5c:f7:70:59:83:ae:0c:b0:1a: 1a:0e:07:ed:0c:49:4c:00:99:9c:a7:ce:d9:8e:a8: 67:b6:c0:11:2f:f2:af:11:15:4a:0e:b6:6c:89:5b: b9:6c:2b:60:4f:c1:60:45:26:f8:d6:24:f7:d0:c8: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:86:56:6E:11:CB:49:EB:0B:FD:5E:F2:D9:E7:AE:FF:9A:73:69:AA X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:cd:39:cb:cf:a4:f0:7d:9c:77:7c:70:3d:4f:0d:7b:82:e2: dd:1d:ae:72:4b:52:a5:43:9a:28:78:4d:9b:5a:2e:ef:f2:d2: f7:5d:d7:16:83:c2:3a:aa:38:85:b1:25:25:16:9d:70:8b:db: 11:cd:76:b5:1e:32:53:fa:f3:40:01:66:18:b0:37:68:1a:cd: fc:2b:c3:c8:9c:d8:5a:ea:e7:90:e2:a6:2b:11:d8:f5:db:48: 1d:f2:87:71:36:7c:35:d4:13:80:1f:0c:be:ad:82:00:7b:8f: 2e:be:1d:55:70:12:ec:8b:28:1d:3b:6f:4b:be:96:72:5e:1b: ad:04:71:0d:db:da:39:37:1d:1d:8d:cd:b8:0c:e5:60:7f:b6: 86:98:ba:9c:f8:af:05:3d:0a:02:1a:11:18:ce:42:04:20:c7: d3:40:b8:c2:10:38:b1:4b:c3:96:81:d7:ed:38:6a:d4:c7:07: 5a:c3:f0:c9:af:5c:9c:2f:13:42:49:9d:e0:d2:29:ab:08:67: d5:2d:0a:6a:df:67:b7:5d:84:50:40:6c:e0:07:ea:ec:67:38: a3:1e:d2:e4:e0:0c:d7:9a:6f:0c:77:f7:3f:1f:42:b3:02:12: 7e:ea:db:09:7c:da:c6:8c:10:39:22:0d:cb:6f:94:92:77:9d: 7a:fa:be:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjYwNDE3MDUxODUwWhcNMjYwNDI0MDUxODUwWjAYMRYwFAYD VQQDEw02OWUxYzJiYS0zYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSFdkIwM5039ullWHp3XjY9cwswm6H0J0IMXjffrDCQVfLujSQ/vJvm4scRh z3K+h09gbXn74bXdICeAdSqCeafeV6lizV0A/u9Oi02qUo7KDiTbOxxK1J/JeoaL 7pCTusT/Oa3v5Xjr+0D4jrDWvE9oXq2r7tQRk02MH3lH2R2MeCQPKICIyHjjD0J2 DyowyeO3IYLA0MdRLhSFvoD3cII7L9HGo8qfhf+Ys8uwMxiFCjoWmhv/05Ge+wnO ckI5PkqaNAGkH8Rc93BZg64MsBoaDgftDElMAJmcp87ZjqhntsARL/KvERVKDrZs iVu5bCtgT8FgRSb41iT30MjGSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCGVm4R y0nrC/1e8tnnrv+ac2mqMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARM05y8+k8H2cd3xwPU8Ne4Li3R2ucktSpUOaKHhNm1ou7/LS913XFoPCOqo4 hbElJRadcIvbEc12tR4yU/rzQAFmGLA3aBrN/CvDyJzYWurnkOKmKxHY9dtIHfKH cTZ8NdQTgB8Mvq2CAHuPLr4dVXAS7IsoHTtvS76Wcl4brQRxDdvaOTcdHY3NuAzl YH+2hpi6nPivBT0KAhoRGM5CBCDH00C4whA4sUvDloHX7Thq1McHWsPwya9cnC8T Qkmd4NIpqwhn1S0Kat9nt12EUEBs4Afq7Gc4ox7S5OAM15pvDHf3Px9CswISfurb CXzaxowQOSINy2+Uknedevq+KA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:39:21 2026 by rpki-client