$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: APCPoZT9fdJTKpo4Nq+13y2EZiI0zeelL5CFU6yRalM= Subject key identifier: 5E:50:5F:66:AA:F2:CA:4B:D8:55:4D:8A:7B:DE:22:A1:08:A8:08:FB Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 0678 Signing time: Thu 16 Apr 2026 22:27:59 +0000 Manifest this update: Thu 16 Apr 2026 22:27:59 +0000 Manifest next update: Thu 23 Apr 2026 22:27:59 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: 0cQxU+J5GE6SZJXU+y8qenKlOkrQkOefjUjtBoxwCpM=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: y/Z27vWa+YdbKdTa4SvdGhrr8xeEuHl0bs5oHTVC4x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: Apr 16 22:27:59 2026 GMT Not After : Apr 23 22:27:59 2026 GMT Subject: CN=69e1626f-9da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:ca:1b:e4:09:c0:8f:2f:d8:40:db:a7:3e: c4:1c:21:b7:fb:89:ec:5b:c3:4f:9b:c4:e9:01:59: 7f:2b:2f:6b:00:5b:b3:dd:1a:43:e8:48:ab:d3:64: fe:b2:4e:b0:41:fc:99:ce:d4:51:6b:dc:64:6f:6c: f5:8d:8a:cf:00:d9:41:6b:39:a1:7b:d0:ff:e4:72: 09:11:73:58:fa:08:dc:82:d8:22:c1:14:67:cd:2f: cd:bc:a2:f5:77:c5:d7:e1:d5:58:cf:f0:78:ea:31: 18:86:81:bc:68:b7:8c:e8:aa:43:c7:54:d8:3a:4f: 51:4a:49:d0:f0:45:d6:b7:58:8e:79:6f:0b:df:a2: 9f:70:9c:2c:aa:87:d8:11:f3:22:bd:03:30:8f:1d: 32:e1:53:ad:28:e8:af:4a:dd:ff:f3:b5:15:3e:ee: 77:a6:61:b2:ff:88:e9:36:6c:f3:29:e1:f0:dc:cd: ea:70:ef:1d:f9:dc:13:fb:cc:4a:ac:60:88:07:2e: 87:79:83:87:2a:16:3b:d0:f1:c6:8f:2c:aa:3e:bb: 31:e9:f6:59:32:6f:6a:7d:8c:46:7e:7e:aa:15:9b: 30:c0:b3:de:25:ec:3c:94:d8:e0:a6:c5:14:dc:9f: a1:29:82:68:e6:cc:2b:fe:07:eb:2d:2e:12:e1:df: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:50:5F:66:AA:F2:CA:4B:D8:55:4D:8A:7B:DE:22:A1:08:A8:08:FB X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:f5:77:22:70:ad:af:ec:13:21:f9:e3:cf:61:fe:4f:4c: 5f:5c:4c:b7:1a:9d:30:df:18:0f:2d:50:16:61:bf:c0:67:22: 52:f1:3c:9c:34:0b:81:bf:76:b1:6d:2c:88:ca:88:4d:87:54: de:de:33:86:10:d9:67:fd:27:0f:b2:1c:be:e7:5c:89:8a:12: 33:cc:22:60:61:67:e6:a4:d5:45:9d:d3:ba:8d:42:31:a2:e9: a7:2c:c5:77:74:19:d3:18:df:05:ca:f4:a2:d5:26:5c:2c:65: fe:c0:aa:fa:af:3a:e3:8b:0f:6f:e8:fa:c2:04:cf:9c:d9:8e: 49:a0:6c:42:4d:11:c7:ef:b1:c6:50:c2:c8:a9:6f:a0:78:fd: c5:6e:44:8f:68:84:32:b2:69:cf:ed:cc:50:6d:55:e5:c3:08: d5:36:c3:31:c1:8d:79:01:c6:1b:5c:44:13:dc:83:85:f3:d6: ee:5b:75:f4:92:b9:24:4c:f0:e1:c7:95:b4:12:60:df:4d:f3: 8d:95:53:52:b5:b7:57:f9:c9:67:2d:16:74:76:1e:22:c4:c2: 02:cf:bb:1f:dd:82:74:1c:de:8a:5a:96:7a:e7:d5:34:30:8b: 5d:36:aa:e5:c4:d5:1c:75:29:98:7c:31:bd:44:55:8e:9b:bb: e1:1d:bd:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjYwNDE2MjIyNzU5WhcNMjYwNDIzMjIyNzU5WjAYMRYwFAYD VQQDEw02OWUxNjI2Zi05ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMPKG+QJwI8v2EDbpz7EHCG3+4nsW8NPm8TpAVl/Ky9rAFuz3RpD6Eir02T+ sk6wQfyZztRRa9xkb2z1jYrPANlBazmhe9D/5HIJEXNY+gjcgtgiwRRnzS/NvKL1 d8XX4dVYz/B46jEYhoG8aLeM6KpDx1TYOk9RSknQ8EXWt1iOeW8L36KfcJwsqofY EfMivQMwjx0y4VOtKOivSt3/87UVPu53pmGy/4jpNmzzKeHw3M3qcO8d+dwT+8xK rGCIBy6HeYOHKhY70PHGjyyqPrsx6fZZMm9qfYxGfn6qFZswwLPeJew8lNjgpsUU 3J+hKYJo5swr/gfrLS4S4d/McwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5QX2aq 8spL2FVNinveIqEIqAj7MB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMTz1dyJwra/sEyH5489h/k9MX1xMtxqdMN8YDy1QFmG/wGciUvE8nDQLgb92 sW0siMqITYdU3t4zhhDZZ/0nD7IcvudciYoSM8wiYGFn5qTVRZ3Tuo1CMaLppyzF d3QZ0xjfBcr0otUmXCxl/sCq+q8644sPb+j6wgTPnNmOSaBsQk0Rx++xxlDCyKlv oHj9xW5Ej2iEMrJpz+3MUG1V5cMI1TbDMcGNeQHGG1xEE9yDhfPW7lt19JK5JEzw 4ceVtBJg303zjZVTUrW3V/nJZy0WdHYeIsTCAs+7H92CdBzeilqWeufVNDCLXTaq 5cTVHHUpmHwxvURVjpu74R29pw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:48:03 2026 by rpki-client