$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: wP6dVT/5bIa75nW0SyZObp/jybaFY7K5YQTFyaSb/kE= Subject key identifier: 8C:F5:9F:FD:0B:3A:3D:47:42:44:AD:51:C1:50:E6:83:5F:93:F7:1B Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 0102 Signing time: Fri 17 Apr 2026 05:58:25 +0000 Manifest this update: Fri 17 Apr 2026 05:58:25 +0000 Manifest next update: Fri 24 Apr 2026 05:58:25 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: KEea9fhL3iwNLLlaOjCMA66IWtoOD7pOFMI9PHO4tMA=) 2: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=) 3: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Apr 17 05:58:25 2026 GMT Not After : Apr 24 05:58:25 2026 GMT Subject: CN=69e1cc01-0744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:6e:5b:bd:19:bd:de:d6:af:20:88:7d:c4: cd:37:64:83:98:02:81:82:bc:1e:1a:9c:d6:14:8f: bd:ba:4a:55:82:2c:5b:cc:90:94:cd:b1:05:b3:66: 5c:46:29:45:7b:0b:11:fe:22:a1:5f:04:fb:f9:06: 8a:6b:3f:50:54:81:c5:40:85:0c:83:c3:0c:64:4c: 62:19:71:9a:56:52:4b:52:91:05:45:2d:85:60:69: 4c:d1:af:09:b5:55:84:c4:61:de:ce:14:d5:34:e1: b6:8e:d0:66:4f:6a:b0:2c:14:a8:3d:bf:9a:9a:b8: b0:9f:71:5b:a7:80:31:35:2f:bf:23:1e:0b:57:73: 1f:3a:71:ef:26:d3:32:f5:dd:56:68:32:12:98:01: 38:f2:9b:f2:70:bc:a0:28:22:3b:54:f6:fa:32:a9: 63:1b:55:19:1f:28:25:b4:19:b5:be:b1:25:39:ef: 05:5c:a7:0f:89:dc:11:ce:14:4a:d2:62:ee:86:9e: 5c:e4:f9:9a:b1:c4:57:6d:ab:86:04:db:1c:db:db: e6:ff:1d:14:cc:2b:16:6d:d7:f2:56:64:6b:fc:51: 9b:2b:6b:4e:a0:c7:68:38:ec:59:02:31:12:ef:ca: f1:6c:0d:70:05:10:7a:7b:c9:dd:01:ea:30:e1:5d: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F5:9F:FD:0B:3A:3D:47:42:44:AD:51:C1:50:E6:83:5F:93:F7:1B X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:fb:95:ff:90:13:39:b7:f8:6e:0d:46:91:52:79:90:68:16: 72:4e:be:98:cb:ac:ca:f4:35:a8:95:b1:5e:1a:e8:7a:b1:2b: bb:1c:9d:dd:61:0f:21:c2:75:29:6b:0c:2c:1a:6b:31:59:04: d6:9e:4e:47:26:59:40:f5:54:0a:99:bf:94:bf:b4:a5:d3:48: 36:65:44:93:ed:11:b2:71:af:b3:b6:ac:88:8b:d9:83:56:45: d2:3a:2f:7f:91:91:a6:97:6e:b8:69:31:03:a3:ca:aa:3f:96: 8d:b7:58:ed:6f:6a:38:5a:fa:d5:a2:3e:38:df:e2:b3:54:be: 5a:5f:87:08:26:6b:11:ad:34:80:a9:d7:6a:58:63:f1:1f:7f: 80:1c:f0:64:62:a7:84:5d:61:f2:14:2a:b4:07:83:54:6d:1a: e5:51:19:1e:56:b2:13:8e:96:8e:43:83:ec:ce:49:62:76:e9: 38:6f:f7:9e:8c:db:cf:9c:8b:e1:05:6b:0c:85:05:ed:45:2c: 76:e3:cb:0a:0f:eb:04:6c:2d:e1:0c:fe:6c:43:15:71:1b:c8: dc:5c:f9:ed:8f:c2:6c:b4:86:ea:e7:d5:fa:25:0a:95:21:71: 58:4d:ee:99:65:80:6b:e5:ff:a5:f0:8b:91:f2:3b:82:ff:9b: 3a:ad:6d:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwNDE3MDU1ODI1WhcNMjYwNDI0MDU1ODI1WjAYMRYwFAYD VQQDEw02OWUxY2MwMS0wNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAme1uW70Zvd7WryCIfcTNN2SDmAKBgrweGpzWFI+9ukpVgixbzJCUzbEFs2Zc RilFewsR/iKhXwT7+QaKaz9QVIHFQIUMg8MMZExiGXGaVlJLUpEFRS2FYGlM0a8J tVWExGHezhTVNOG2jtBmT2qwLBSoPb+amriwn3Fbp4AxNS+/Ix4LV3MfOnHvJtMy 9d1WaDISmAE48pvycLygKCI7VPb6MqljG1UZHygltBm1vrElOe8FXKcPidwRzhRK 0mLuhp5c5PmascRXbauGBNsc29vm/x0UzCsWbdfyVmRr/FGbK2tOoMdoOOxZAjES 78rxbA1wBRB6e8ndAeow4V0ZdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz1n/0L Oj1HQkStUcFQ5oNfk/cbMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ/uV/5ATObf4bg1GkVJ5kGgWck6+mMusyvQ1qJWxXhroerEruxyd3WEPIcJ1 KWsMLBprMVkE1p5ORyZZQPVUCpm/lL+0pdNINmVEk+0RsnGvs7asiIvZg1ZF0jov f5GRppduuGkxA6PKqj+WjbdY7W9qOFr61aI+ON/is1S+Wl+HCCZrEa00gKnXalhj 8R9/gBzwZGKnhF1h8hQqtAeDVG0a5VEZHlayE46WjkOD7M5JYnbpOG/3nozbz5yL 4QVrDIUF7UUsduPLCg/rBGwt4Qz+bEMVcRvI3Fz57Y/CbLSG6ufV+iUKlSFxWE3u mWWAa+X/pfCLkfI7gv+bOq1trw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:09:32 2026 by rpki-client