$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json) Hash identifier: DYFMpr/u9//Mj8Lyw2GAOC6qF4MKMP+hPjfjTz1tsLQ= Subject key identifier: 70:8F:BA:62:7F:15:3D:8B:B5:5A:4D:C9:BF:D2:99:34:0E:9C:0C:BB Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft Manifest number: 85 Signing time: Fri 17 Apr 2026 07:22:31 +0000 Manifest this update: Fri 17 Apr 2026 07:22:31 +0000 Manifest next update: Fri 24 Apr 2026 07:22:31 +0000 Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: IN35Zr2xPcp7wxsxd4pn8YA+oMobLzJz91KwQUHQCog=) 2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Validity Not Before: Apr 17 07:22:31 2026 GMT Not After : Apr 24 07:22:31 2026 GMT Subject: CN=69e1dfb7-9c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:cc:f8:9a:5d:9e:47:97:39:46:01:97:62: 77:af:89:ec:16:11:61:21:8a:d6:94:41:d4:ec:0a: eb:17:6e:66:d2:46:d4:af:db:73:df:2b:a7:29:47: eb:f1:49:33:fc:64:79:9e:74:c9:64:0e:6d:f0:47: 5d:96:cb:68:65:a7:b0:9e:15:f8:b0:b4:1d:44:7d: b9:e6:75:50:3e:39:dd:5e:58:22:5a:93:91:a3:01: 4a:14:82:5a:7a:71:b6:ed:c7:22:c8:76:2f:7a:87: af:69:1c:8c:97:5b:83:03:51:b3:d4:97:4e:27:c4: e1:d7:b0:5a:c8:8f:dc:80:6d:30:0c:0a:3c:5f:35: e5:a2:1f:80:21:59:3f:59:b1:49:ad:17:2c:96:55: fa:da:26:24:e8:81:73:cd:7c:5a:b6:43:18:66:14: 6f:c6:b3:7c:c5:55:e9:3d:0d:e3:87:26:fd:a8:dd: 88:48:4d:8f:f4:fc:1d:61:3b:4d:5b:6f:a2:cf:6f: 92:a9:78:fd:df:6d:14:5e:31:9f:04:ec:d9:95:b9: fd:a8:d4:01:5f:b4:b8:74:78:c9:57:43:a9:84:4e: 69:db:af:84:aa:17:a4:70:6f:ae:77:af:80:02:ed: 08:b0:e6:8b:d9:2c:80:cd:56:8c:e8:46:88:ff:b3: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8F:BA:62:7F:15:3D:8B:B5:5A:4D:C9:BF:D2:99:34:0E:9C:0C:BB X509v3 Authority Key Identifier: keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:f2:2d:f8:57:3d:75:75:29:4b:93:c8:a8:e8:a3:a3:1e: 9f:b9:4b:21:11:4a:a8:d9:7d:68:27:e6:a6:14:f4:26:81:39: 52:d0:d9:4e:0f:79:bd:3b:33:cc:89:5c:af:57:d2:bb:25:9c: 37:ad:af:7d:80:78:8e:f5:3f:86:b2:a0:23:12:02:c0:2f:5e: 2c:e7:eb:ff:da:b4:7b:96:6b:07:96:01:9a:e6:a9:e2:e3:cc: dc:39:01:81:c8:df:61:c1:6f:d0:34:de:85:a7:30:16:66:84: 19:d6:ef:e2:e4:ea:bf:a5:9b:3d:98:c3:9a:87:14:87:fa:00: c1:dd:18:08:fe:a3:83:2e:3e:e1:df:82:ef:db:28:0e:26:d1: 7d:ec:9f:91:97:d5:63:e8:74:52:6d:32:bc:61:a4:b4:30:db: 4f:21:28:76:0f:e3:03:02:94:1d:a3:95:d4:bb:b5:bf:24:2b: c9:9b:20:cc:93:34:4e:b4:65:c0:43:7c:e3:4f:9f:ef:06:42: eb:a1:c0:ea:f5:03:7b:1e:f5:34:e6:bc:00:e4:19:69:36:52: 0b:ab:8a:ab:c7:c7:31:52:29:71:33:94:bc:24:5a:93:89:af: 12:92:07:ed:59:46:13:21:09:79:75:89:f8:bb:c3:94:c8:8c: e0:f7:bc:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZBQkUxMTAvBgNVBAUTKDZCMjJGOTA3OTEwNUE0REVCQ0IwOUNDMUI5MDA5NjA4 NUM2NjJENDQwHhcNMjYwNDE3MDcyMjMxWhcNMjYwNDI0MDcyMjMxWjAYMRYwFAYD VQQDEw02OWUxZGZiNy05YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tzM+JpdnkeXOUYBl2J3r4nsFhFhIYrWlEHU7ArrF25m0kbUr9tz3yunKUfr 8Ukz/GR5nnTJZA5t8EddlstoZaewnhX4sLQdRH255nVQPjndXlgiWpORowFKFIJa enG27cciyHYveoevaRyMl1uDA1Gz1JdOJ8Th17BayI/cgG0wDAo8XzXloh+AIVk/ WbFJrRcsllX62iYk6IFzzXxatkMYZhRvxrN8xVXpPQ3jhyb9qN2ISE2P9PwdYTtN W2+iz2+SqXj9320UXjGfBOzZlbn9qNQBX7S4dHjJV0OphE5p26+EqhekcG+ud6+A Au0IsOaL2SyAzVaM6EaI/7Op+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCPumJ/ FT2LtVpNyb/SmTQOnAy7MB8GA1UdIwQYMBaAFGsi+QeRBaTevLCcwbkAlghcZi1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkFCRS8xNUY1QzEwQzc0 M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBONjhzSnpCdVFDV0NGeG1M VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkFCRS8xNUY1QzEwQzc0M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBO NjhzSnpCdVFDV0NGeG1MVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqDyLfhXPXV1KUuTyKjoo6Men7lLIRFKqNl9aCfmphT0JoE5UtDZTg95vTsz zIlcr1fSuyWcN62vfYB4jvU/hrKgIxICwC9eLOfr/9q0e5ZrB5YBmuap4uPM3DkB gcjfYcFv0DTehacwFmaEGdbv4uTqv6WbPZjDmocUh/oAwd0YCP6jgy4+4d+C79so DibRfeyfkZfVY+h0Um0yvGGktDDbTyEodg/jAwKUHaOV1Lu1vyQryZsgzJM0TrRl wEN840+f7wZC66HA6vUDex71NOa8AOQZaTZSC6uKq8fHMVIpcTOUvCRak4mvEpIH 7VlGEyEJeXWJ+LvDlMiM4Pe8sw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:28:19 2026 by rpki-client