$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: AQcdDs0tKB2BAPnkj1a3aT0M7OCwSViYn2AwN6vuT3Q= Subject key identifier: 4F:E0:8D:48:35:4F:B7:B7:DF:2A:64:4C:8A:AE:82:D3:57:B3:5C:05 Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 01DD Signing time: Fri 17 Apr 2026 03:15:35 +0000 Manifest this update: Fri 17 Apr 2026 03:15:34 +0000 Manifest next update: Fri 24 Apr 2026 03:15:34 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: mTHhOBrNg2d5noR1ghyX3/VZhtx/e9A0Kw+DJjgcZ8I=) 2: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=) 3: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: Apr 17 03:15:34 2026 GMT Not After : Apr 24 03:15:34 2026 GMT Subject: CN=69e1a5d6-9171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b4:81:fa:a7:5b:e0:c9:29:36:a1:c8:0e:e0: 0e:c8:f4:17:12:e0:a4:84:0a:60:b3:b0:bb:fe:ef: 6b:56:bb:04:cd:1a:0d:71:3d:7e:fd:13:f5:b3:38: 87:26:65:b9:eb:ef:96:cc:e4:54:18:c5:da:76:83: 37:44:23:58:b8:0a:ba:ba:01:80:43:c3:b8:3b:a0: e1:a9:a7:b2:8d:7c:bd:08:09:44:b0:99:70:64:31: 8f:bf:a0:e4:f4:cd:10:df:ae:90:99:ce:d5:8e:83: 23:8c:f5:7b:f3:b5:e8:3d:b8:00:1c:6d:10:d6:5e: 59:3a:ca:77:c0:9c:2a:05:18:39:62:64:b2:bf:fd: 7b:10:8c:21:03:6c:90:15:b5:4b:e6:af:10:b5:ac: c0:a0:78:04:ce:d3:4d:90:69:03:e5:45:da:94:7e: 46:9f:bb:20:1f:00:5b:05:3c:e9:5b:e7:15:2a:d3: ff:f1:49:27:df:ad:50:bb:c5:e0:e8:d4:a3:19:64: 9c:eb:7e:09:1d:72:3e:d3:65:97:40:74:42:17:9a: 35:66:28:42:f1:dc:f1:f3:98:27:7b:58:85:f7:15: b8:08:a5:bf:9d:d9:e2:1c:fd:0b:57:c7:ec:87:92: 86:55:90:bc:d4:48:ab:7d:5e:4c:94:9c:27:a2:f3: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E0:8D:48:35:4F:B7:B7:DF:2A:64:4C:8A:AE:82:D3:57:B3:5C:05 X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:75:2d:83:a7:db:c7:66:6c:90:67:91:03:66:a8:12:06:a2: 78:37:5b:d6:3b:bd:aa:22:4b:1c:1d:a2:6b:79:9b:ed:99:58: c8:e2:80:4e:f0:df:a1:7f:ba:6e:1b:a9:86:45:38:f2:05:fd: ed:ad:94:71:9c:e8:d5:a7:ce:8b:22:3e:7f:43:5f:d5:40:34: 27:0c:4c:4a:7f:64:88:cb:58:8d:47:63:08:9d:ad:f6:bd:fe: 02:7f:a5:65:7b:0e:25:e8:3b:fd:48:42:b2:24:b0:cb:6b:f5: dd:42:a9:47:e5:e3:aa:81:49:0c:c2:34:47:12:27:a0:fb:f7: 8d:34:b3:09:22:7c:01:83:e8:68:41:3a:c4:fe:26:d0:a9:02: 3d:2a:8b:f2:6d:e2:a4:72:f8:fa:a6:bd:45:b0:6f:4d:dd:b6: dd:8e:33:e4:12:30:2e:80:6f:e8:c6:e8:2b:19:fa:a7:a2:95: cb:ab:8a:be:0b:c7:30:b3:42:7e:b9:54:6f:b6:cf:9d:6a:aa: 43:c1:f9:18:1d:d6:2a:20:9f:28:ab:52:06:14:e7:b1:fc:e1: b1:6f:45:05:9b:94:8e:86:55:d0:00:ba:1e:38:c0:ec:ee:7c: 5f:d1:5c:6e:1e:3e:d2:43:73:ec:80:dc:c1:be:c2:84:20:54: 7c:a9:8b:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjYwNDE3MDMxNTM0WhcNMjYwNDI0MDMxNTM0WjAYMRYwFAYD VQQDEw02OWUxYTVkNi05MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LSB+qdb4MkpNqHIDuAOyPQXEuCkhApgs7C7/u9rVrsEzRoNcT1+/RP1sziH JmW56++WzORUGMXadoM3RCNYuAq6ugGAQ8O4O6DhqaeyjXy9CAlEsJlwZDGPv6Dk 9M0Q366Qmc7VjoMjjPV787XoPbgAHG0Q1l5ZOsp3wJwqBRg5YmSyv/17EIwhA2yQ FbVL5q8QtazAoHgEztNNkGkD5UXalH5Gn7sgHwBbBTzpW+cVKtP/8Ukn361Qu8Xg 6NSjGWSc634JHXI+02WXQHRCF5o1ZihC8dzx85gne1iF9xW4CKW/ndniHP0LV8fs h5KGVZC81EirfV5MlJwnovPZ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/gjUg1 T7e33ypkTIqugtNXs1wFMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArXUtg6fbx2ZskGeRA2aoEgaieDdb1ju9qiJLHB2ia3mb7ZlYyOKATvDfoX+6 bhuphkU48gX97a2UcZzo1afOiyI+f0Nf1UA0JwxMSn9kiMtYjUdjCJ2t9r3+An+l ZXsOJeg7/UhCsiSwy2v13UKpR+XjqoFJDMI0RxInoPv3jTSzCSJ8AYPoaEE6xP4m 0KkCPSqL8m3ipHL4+qa9RbBvTd223Y4z5BIwLoBv6MboKxn6p6KVy6uKvgvHMLNC frlUb7bPnWqqQ8H5GB3WKiCfKKtSBhTnsfzhsW9FBZuUjoZV0AC6HjjA7O58X9Fc bh4+0kNz7IDcwb7ChCBUfKmL9w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:49 2026 by rpki-client