$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json) Hash identifier: 5tTEQin5NxxF2WtjavzFZvXymQqqBdFYVKJBDOtkiPs= Subject key identifier: B8:D0:C6:9B:34:94:71:EC:F7:EF:5E:77:04:A2:43:69:66:0C:2B:B4 Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft Manifest number: CB Signing time: Fri 17 Apr 2026 06:33:58 +0000 Manifest this update: Fri 17 Apr 2026 06:33:57 +0000 Manifest next update: Fri 24 Apr 2026 06:33:57 +0000 Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: orRsliyyueSsLLzZfQhccr4GGkZvMqYDUjxt0LtDnsY=) 2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: 4Lyw/AU+Wk60oVjtMsai5M/XpQ4x8ZuW3TaDGBXdpZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Validity Not Before: Apr 17 06:33:57 2026 GMT Not After : Apr 24 06:33:57 2026 GMT Subject: CN=69e1d456-dd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:b3:65:61:9c:e8:be:f7:74:0e:51:bf:16: 28:ae:10:13:2d:8f:43:69:3a:12:4d:23:20:d0:2a: 55:5c:44:36:21:1a:9d:4f:69:c0:fe:ef:2f:58:a8: 83:0c:3a:70:38:ed:90:2e:63:f9:46:c2:d9:65:f1: 3a:7e:1c:70:dc:3f:c4:dc:74:20:58:26:d0:87:7b: 4e:bf:8e:d9:63:11:06:a3:dc:3a:29:ce:13:19:2c: a1:01:57:e5:41:7a:81:75:c6:2c:8d:e7:f4:1f:48: bd:3f:b6:5f:f7:71:fd:5f:63:f4:dc:f1:35:42:b9: 1b:82:7d:29:f2:3b:33:c8:fe:82:9f:f0:56:59:45: 83:d2:8e:8e:37:07:b8:7e:9c:62:88:0f:d7:be:35: 5f:dc:06:71:19:15:3a:91:c8:8f:a1:a4:48:6b:03: 14:2e:7b:67:08:d2:2a:61:73:fb:d3:bf:a7:37:3d: 07:f7:ab:0a:34:b1:40:c2:82:d8:18:9e:92:37:69: 7f:38:35:15:88:8f:fc:d7:16:a5:69:16:b7:89:21: 2b:b3:93:df:ac:57:b1:36:8f:bf:83:f9:19:0c:24: 6e:64:be:bf:40:bd:ea:5e:60:7c:e6:47:af:3b:f5: fa:08:e2:19:70:41:f5:42:42:86:a3:7a:56:4b:ef: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D0:C6:9B:34:94:71:EC:F7:EF:5E:77:04:A2:43:69:66:0C:2B:B4 X509v3 Authority Key Identifier: keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:5b:ba:13:7e:96:73:d3:1b:44:83:97:35:81:24:90:b0:e4: dc:2e:35:38:56:b0:47:5b:b7:57:a1:6e:b2:a1:42:40:1f:87: 42:52:67:ad:03:95:4f:94:b6:5f:6b:d3:ec:68:4b:15:31:98: d2:ed:8b:82:07:d0:be:21:a4:b3:54:e6:f6:da:b7:63:9f:c9: 75:f7:42:e7:72:d9:e9:26:3d:f8:53:de:bb:3c:1e:21:9b:b8: 83:30:30:71:84:73:ed:47:37:74:ea:46:68:bb:3c:d1:39:ec: 60:8b:81:03:4c:1b:d0:68:90:f3:e2:0b:ff:43:9d:01:d3:3d: f6:65:a1:8a:d8:7e:47:b6:2b:c0:9a:ca:1d:c8:1e:c2:fa:95: 57:4a:72:2a:ff:de:7b:ae:f3:66:9a:db:f9:fe:d7:36:7c:6e: 5d:2d:d1:ec:a2:ad:dc:99:d7:cd:86:e3:8c:71:09:2c:88:bc: 30:3c:ea:49:a5:dd:bb:ed:3f:34:eb:bb:d7:8e:c8:78:09:72: c7:9d:a0:8a:93:06:28:99:84:83:ae:0b:cc:1e:e1:49:f8:80: f4:1e:15:9e:3d:8f:81:30:35:be:0c:36:f1:a5:26:e3:35:10: 8f:32:d8:42:69:fa:77:85:5d:5f:85:89:5a:c6:04:a7:a6:8d: fd:33:ad:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBODIxMTAvBgNVBAUTKDVBQkVDRDhFQUFEMzdFQTU3QUVCOTM5RjJDMEIxNDI5 NzQ4NDFGOEEwHhcNMjYwNDE3MDYzMzU3WhcNMjYwNDI0MDYzMzU3WjAYMRYwFAYD VQQDEw02OWUxZDQ1Ni1kZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhgSzZWGc6L73dA5RvxYorhATLY9DaToSTSMg0CpVXEQ2IRqdT2nA/u8vWKiD DDpwOO2QLmP5RsLZZfE6fhxw3D/E3HQgWCbQh3tOv47ZYxEGo9w6Kc4TGSyhAVfl QXqBdcYsjef0H0i9P7Zf93H9X2P03PE1Qrkbgn0p8jszyP6Cn/BWWUWD0o6ONwe4 fpxiiA/XvjVf3AZxGRU6kciPoaRIawMULntnCNIqYXP707+nNz0H96sKNLFAwoLY GJ6SN2l/ODUViI/81xalaRa3iSErs5PfrFexNo+/g/kZDCRuZL6/QL3qXmB85kev O/X6COIZcEH1QkKGo3pWS+/BpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjQxps0 lHHs9+9edwSiQ2lmDCu0MB8GA1UdIwQYMBaAFFq+zY6q036leuuTnywLFCl0hB+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE4Mi9CQjk4QTQ1RTA5 MDgxMUYwQTQ5M0U5MjJDNEY5QUUwMi9XcjdOanFyVGZxVjY2NU9mTEFzVUtYU0VI NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dyN05qcXJUZnFWNjY1T2ZMQXNVS1hTRUg0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE4Mi9CQjk4QTQ1RTA5MDgxMUYwQTQ5M0U5MjJDNEY5QUUwMi9XcjdOanFyVGZx VjY2NU9mTEFzVUtYU0VING8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKVu6E36Wc9MbRIOXNYEkkLDk3C41OFawR1u3V6FusqFCQB+HQlJnrQOVT5S2 X2vT7GhLFTGY0u2LggfQviGks1Tm9tq3Y5/JdfdC53LZ6SY9+FPeuzweIZu4gzAw cYRz7Uc3dOpGaLs80TnsYIuBA0wb0GiQ8+IL/0OdAdM99mWhith+R7YrwJrKHcge wvqVV0pyKv/ee67zZprb+f7XNnxuXS3R7KKt3JnXzYbjjHEJLIi8MDzqSaXdu+0/ NOu7147IeAlyx52gipMGKJmEg64LzB7hSfiA9B4Vnj2PgTA1vgw28aUm4zUQjzLY Qmn6d4VdX4WJWsYEp6aN/TOthw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:38:17 2026 by rpki-client