$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: DT1opWRu80N5ZrK3ggthW/ssuvQDxb5GzDdtKsIV7/k= Subject key identifier: 9F:34:0B:8D:16:E2:7D:D4:54:A1:8F:82:04:4B:03:84:59:9A:77:F0 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 04D2 Signing time: Thu 16 Apr 2026 23:45:47 +0000 Manifest this update: Thu 16 Apr 2026 23:45:47 +0000 Manifest next update: Thu 23 Apr 2026 23:45:47 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: mSl8eC0AfGaizaVcfjzqsVeAhsuZtrLEBFO43tKqexM=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: w4vmk0k0tj0CqVbPYlrB/AsgbCIeobBsis6ku1ih1HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Apr 16 23:45:47 2026 GMT Not After : Apr 23 23:45:47 2026 GMT Subject: CN=69e174ab-e038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:f6:84:fc:c3:cd:72:ee:0d:b1:e3:8b:e2: df:f7:a1:25:b7:6b:fe:00:cd:7a:a8:d2:a6:58:36: 91:25:66:b6:db:59:ea:95:3b:1e:96:e1:34:a3:01: 1f:5f:0f:8e:46:c7:b0:6b:5a:47:ef:38:cc:91:53: 24:92:15:1d:4c:8f:bb:70:05:79:cb:f8:9a:99:14: 1a:70:16:37:9c:05:53:24:76:68:7b:29:b0:b9:07: 34:75:09:44:15:15:dc:53:05:6a:7b:cd:33:8b:90: b9:b6:81:a0:fb:e4:ba:a0:86:8b:3a:a7:5f:f7:8a: a1:18:3d:4b:f6:12:69:7f:e7:d5:15:33:ed:22:aa: 79:fa:bd:04:a4:eb:d9:ab:5e:3a:87:97:a4:1e:7b: f6:24:03:a7:a4:49:5f:fb:25:c3:2f:69:0c:d7:da: 02:6c:69:81:b4:e7:40:22:96:02:99:31:8a:eb:20: e8:ab:ad:56:e3:27:3f:78:94:10:97:29:93:30:07: b3:7e:9c:79:af:d3:5c:6d:7d:ba:39:15:c0:50:62: 5a:a8:70:f8:f7:6a:5c:80:04:d9:9e:6b:87:4d:d1: 99:62:88:ad:cf:03:c7:9e:5d:20:52:ff:e0:e1:50: 36:64:ae:11:9c:8f:1a:08:b9:b4:48:ed:ba:a7:d8: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:34:0B:8D:16:E2:7D:D4:54:A1:8F:82:04:4B:03:84:59:9A:77:F0 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9c:24:c7:45:4e:56:ae:e3:8b:19:17:e4:80:ed:38:8a:cc: 0c:ba:dc:39:f4:1f:f3:10:ad:4b:85:47:a0:83:e7:36:95:f9: 19:05:88:a2:e4:0b:94:99:49:13:d2:3a:9f:f6:6f:44:d4:c2: 7b:0c:6e:d4:d6:ef:7c:84:7b:76:42:87:98:ec:6e:c3:18:d3: 37:44:43:83:60:35:3e:fb:c8:3a:a6:3e:8b:a2:7a:6d:c9:fc: 00:ab:9d:1d:b8:ff:0e:00:45:29:03:f5:60:8a:4f:de:78:36: 09:f6:0c:6e:75:e9:ac:59:8c:79:2b:3d:24:9b:38:d9:46:d0: f5:60:0a:c1:7c:e1:9c:2b:fb:08:2a:07:a1:4f:0f:08:c7:e3: f0:64:ac:4c:11:0f:f8:31:a3:a7:a1:d9:56:b6:b1:d1:56:38: bf:78:60:5e:6b:86:40:28:d0:31:25:fe:81:01:ae:10:b7:09: 58:ce:6c:63:4d:35:bd:cd:69:fb:ac:83:8a:43:8c:9c:6b:e1: 30:d2:1f:bf:9c:ea:a8:80:c6:d2:3b:27:2a:ba:13:e3:ca:5b: 69:2c:09:ee:e0:27:90:e6:f0:35:8b:51:52:1a:fe:2d:5e:d4: 60:04:d9:bc:b1:ae:6a:42:f7:0a:fd:17:4e:3e:9c:5c:c5:bb: ee:21:ae:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjYwNDE2MjM0NTQ3WhcNMjYwNDIzMjM0NTQ3WjAYMRYwFAYD VQQDEw02OWUxNzRhYi1lMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYb2hPzDzXLuDbHji+Lf96Elt2v+AM16qNKmWDaRJWa221nqlTseluE0owEf Xw+ORsewa1pH7zjMkVMkkhUdTI+7cAV5y/iamRQacBY3nAVTJHZoeymwuQc0dQlE FRXcUwVqe80zi5C5toGg++S6oIaLOqdf94qhGD1L9hJpf+fVFTPtIqp5+r0EpOvZ q146h5ekHnv2JAOnpElf+yXDL2kM19oCbGmBtOdAIpYCmTGK6yDoq61W4yc/eJQQ lymTMAezfpx5r9NcbX26ORXAUGJaqHD492pcgATZnmuHTdGZYoitzwPHnl0gUv/g 4VA2ZK4RnI8aCLm0SO26p9hKFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ80C40W 4n3UVKGPggRLA4RZmnfwMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ5wkx0VOVq7jixkX5IDtOIrMDLrcOfQf8xCtS4VHoIPnNpX5GQWIouQLlJlJ E9I6n/ZvRNTCewxu1NbvfIR7dkKHmOxuwxjTN0RDg2A1PvvIOqY+i6J6bcn8AKud Hbj/DgBFKQP1YIpP3ng2CfYMbnXprFmMeSs9JJs42UbQ9WAKwXzhnCv7CCoHoU8P CMfj8GSsTBEP+DGjp6HZVrax0VY4v3hgXmuGQCjQMSX+gQGuELcJWM5sY001vc1p +6yDikOMnGvhMNIfv5zqqIDG0jsnKroT48pbaSwJ7uAnkObwNYtRUhr+LV7UYATZ vLGuakL3Cv0XTj6cXMW77iGu+Q== -----END CERTIFICATE-----Generated at Fri Apr 17 07:24:06 2026 by rpki-client