$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: MCvXYD0rpjo+6l2N/U2pQppFUrzwDE0kpi6gb+VUgn4= Subject key identifier: D9:ED:45:8F:03:F2:BD:92:CB:1C:79:53:36:5B:DC:E5:A5:F8:8C:0D Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0206 Signing time: Fri 17 Apr 2026 02:55:57 +0000 Manifest this update: Fri 17 Apr 2026 02:55:56 +0000 Manifest next update: Fri 24 Apr 2026 02:55:56 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: dZgnX9JAN2hfe9mQtK7kLuoAvNM0s57g5POpoYto0Iw=) 2: E9874B2A16D011EF90793868C4F9AE02.roa (hash: RDszepU6uUEnaTneHbLYTo9ekedmlaHSehV5QBWdDbs=) 3: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: /UOXs33KnAIdS9eZMavjXXvZDkm7O2iN3QjaCdMcSZo=) 4: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: 7QH1OiU8+y0kM0Xbew8STqzznYlr3akTS6fkDWFomuY=) 5: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: YUDn/ImHnu8Aga92avplp7MOrOxQVfmR+LNkM6xYKp8=) 6: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: WlT7lqcgc4c8+rWeXt+Y5JcXRKuZvK0wiGPxDwUbSb0=) 7: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: L4NVil8pbyS/cOY/ej3K8v/jrMsLv9IfqmTy0v9YRG8=) 8: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: Oxk9ItIFF7Cmn++8Qhf8B9/Jba23NXxEuE7o6lYsVNY=) 9: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: XLyiIx6bH4MWL4cXY1N6tcvmekDJmpJls17+hd3FRlA=) 10: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: jqwk3bmRPDf7C3aKoz+TsrX90WbUHOfRvQL1M86whDk=) 11: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: bcg53TLs5nFR2EV4CBcEFe8zIM0whJbmabWS8ZS93/Q=) 12: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: f4OVUhW0bi1lo1n9ZSiR+RCv7DhSrpC0lFB7A/Kd8HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Apr 17 02:55:56 2026 GMT Not After : Apr 24 02:55:56 2026 GMT Subject: CN=69e1a13d-3e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:9e:c7:d0:c8:63:cf:9a:d0:16:ba:97:6f: 86:b3:de:d3:4f:4e:9d:c2:8e:f5:6d:4e:fc:15:b4: c8:7c:63:1f:8d:9e:c1:cd:0a:3d:18:ca:cd:0d:a9: fb:2b:45:f2:57:25:2f:1a:47:f6:0a:0e:9f:b9:df: 81:16:cd:64:6f:14:b9:bd:14:57:57:b1:67:4d:56: b5:44:cd:26:73:7b:6d:d6:af:fa:d0:51:e3:f0:a6: 5b:27:99:65:95:d1:86:2c:33:b7:ef:03:24:6d:bd: 3c:f3:dd:6c:ef:7e:01:e6:d6:62:91:9a:3c:6d:dc: 33:cf:b4:6c:5c:35:1e:9a:8b:44:4a:7f:21:71:92: 93:2e:71:af:ca:0f:26:43:34:c7:08:32:eb:78:ba: 99:9c:56:08:05:74:5a:37:f3:0e:64:b4:cf:15:0e: 5d:17:84:d7:98:bb:e5:4c:75:d6:73:22:a6:da:3a: 02:76:02:f4:05:e8:d9:74:df:42:95:b7:e7:64:cd: 98:65:f3:85:34:48:7b:5d:73:31:ad:46:76:f2:ba: 8b:4c:15:c3:e0:d5:08:6a:24:42:8a:82:1e:f4:c4: 01:1f:1f:04:0d:84:6c:53:ce:5f:59:ce:42:60:26: cd:ea:d0:2b:ce:97:3a:e0:87:e6:55:81:16:c5:e4: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:45:8F:03:F2:BD:92:CB:1C:79:53:36:5B:DC:E5:A5:F8:8C:0D X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:48:ba:77:72:fc:48:98:41:d8:ff:f5:d1:bd:31:5b:1a:0e: da:cb:70:af:d1:ae:67:bd:14:ce:c4:bd:92:9d:d3:56:8a:2d: ad:06:48:de:96:9b:25:e8:dc:6e:30:f5:76:04:15:db:9d:74: e6:cf:ee:3e:ff:2b:d1:00:e0:8d:85:94:da:61:a9:47:02:5f: 4d:ba:f5:34:d3:ec:d6:6c:ad:b7:0c:ee:06:ab:72:81:a7:89: 3d:50:48:2b:40:96:78:94:12:a6:e4:a8:ff:f7:47:67:5f:9b: 1d:9e:5e:cb:e3:27:a7:ea:e0:38:2f:5a:0b:68:2d:40:7c:dd: 43:0e:9c:73:41:d9:f8:e3:36:50:86:32:f2:64:25:1c:30:ef: b4:98:6c:50:04:b0:d4:66:30:49:72:24:fd:b0:c7:de:90:8e: 0e:de:d3:c9:98:10:81:1f:2e:1a:27:77:1c:16:49:bf:f3:66: 2b:fe:87:aa:58:eb:45:fa:01:a2:6d:3d:2f:5b:9d:a7:c7:09: 9c:8d:eb:01:46:80:94:00:b2:4f:87:52:e4:d8:cd:ad:ef:f8: 0a:9d:e7:40:b2:ad:12:92:c4:d5:86:d0:fc:7b:3c:7c:90:f9: 16:bb:03:ad:7e:23:88:d4:cd:80:1d:c2:01:4b:e5:df:a5:b9: 61:c1:2e:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjYwNDE3MDI1NTU2WhcNMjYwNDI0MDI1NTU2WjAYMRYwFAYD VQQDEw02OWUxYTEzZC0zZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkCex9DIY8+a0Ba6l2+Gs97TT06dwo71bU78FbTIfGMfjZ7BzQo9GMrNDan7 K0XyVyUvGkf2Cg6fud+BFs1kbxS5vRRXV7FnTVa1RM0mc3tt1q/60FHj8KZbJ5ll ldGGLDO37wMkbb08891s734B5tZikZo8bdwzz7RsXDUemotESn8hcZKTLnGvyg8m QzTHCDLreLqZnFYIBXRaN/MOZLTPFQ5dF4TXmLvlTHXWcyKm2joCdgL0BejZdN9C lbfnZM2YZfOFNEh7XXMxrUZ28rqLTBXD4NUIaiRCioIe9MQBHx8EDYRsU85fWc5C YCbN6tArzpc64IfmVYEWxeQOwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNntRY8D 8r2Syxx5UzZb3OWl+IwNMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4ki6d3L8SJhB2P/10b0xWxoO2stwr9GuZ70UzsS9kp3TVootrQZI3pabJejc bjD1dgQV25105s/uPv8r0QDgjYWU2mGpRwJfTbr1NNPs1myttwzuBqtygaeJPVBI K0CWeJQSpuSo//dHZ1+bHZ5ey+Mnp+rgOC9aC2gtQHzdQw6cc0HZ+OM2UIYy8mQl HDDvtJhsUASw1GYwSXIk/bDH3pCODt7TyZgQgR8uGid3HBZJv/NmK/6HqljrRfoB om09L1udp8cJnI3rAUaAlACyT4dS5NjNre/4Cp3nQLKtEpLE1YbQ/Hs8fJD5FrsD rX4jiNTNgB3CAUvl36W5YcEulw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:34:47 2026 by rpki-client