$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: vJwb83c9YRHQC7rplyIqteACP8tS+trwP09tjZi/n2Q= Subject key identifier: 7F:16:8F:D4:B4:67:36:C7:58:F9:69:C4:E4:B6:E7:50:FF:20:3D:4D Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 043D Signing time: Fri 17 Apr 2026 00:10:37 +0000 Manifest this update: Fri 17 Apr 2026 00:10:36 +0000 Manifest next update: Fri 24 Apr 2026 00:10:36 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: DlLWyhK5i6P48pSib+M1WEQXeWYCmG6tkLmhLGVwk74=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: N5pLAxbLKv/PfC6YhIk0Oi5t9BhybE4dFuDmSAT9hEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Apr 17 00:10:36 2026 GMT Not After : Apr 24 00:10:36 2026 GMT Subject: CN=69e17a7d-69bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:b0:81:23:ae:da:54:84:87:41:ce:67:4b: a6:7b:03:1a:3c:b2:01:a1:ae:4e:f1:35:63:08:da: 7b:e9:88:8a:44:50:5f:45:ab:36:3d:87:21:ff:cf: 08:8c:d5:55:69:53:7b:43:fe:d4:86:57:22:8f:64: c2:57:a5:50:03:ba:1a:32:9e:87:db:94:1c:a0:79: 37:88:a2:2f:ee:f3:b7:e5:12:f2:71:8f:31:aa:a1: 30:72:3b:f5:78:0a:1c:1d:ec:91:8e:56:5b:5c:a1: 43:ef:11:48:83:67:b1:63:64:24:83:65:d0:fb:4c: dd:99:0a:e9:cb:02:c0:9a:49:3b:b8:37:ae:e6:80: db:c7:37:c0:6b:2e:67:59:a7:7e:58:96:6d:fe:7f: bc:18:77:2f:6e:8e:4d:b4:dc:a5:d6:04:65:5d:d2: 60:5e:4c:86:fc:f7:35:74:91:f9:9c:fd:96:e1:8a: f3:be:29:81:0c:ab:ac:f4:d1:af:f0:ee:26:f8:76: b5:f0:6e:b5:98:b2:ed:23:b9:36:bd:e9:3e:97:47: 05:ff:32:e5:b0:ce:df:d8:01:03:a1:d7:11:87:d0: 6d:de:6e:42:c4:cb:c7:44:71:13:c5:26:1a:db:09: 6b:09:79:45:e4:8e:0c:96:5d:93:6f:fd:c5:52:0c: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:16:8F:D4:B4:67:36:C7:58:F9:69:C4:E4:B6:E7:50:FF:20:3D:4D X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:15:a8:5c:4f:70:8a:86:d8:14:b8:85:fb:46:24:4c:29:e8: da:ec:62:53:6f:a5:f8:e0:61:33:5a:fd:99:a5:a0:6d:75:ba: f6:66:8c:62:97:56:bc:35:f2:e5:71:4b:63:6a:18:c9:a9:fe: d1:32:d4:0f:f5:ff:99:5e:63:69:ca:b0:43:a8:8b:5c:59:9f: 99:77:df:64:61:fa:a3:e7:5c:14:26:8a:01:bf:f4:ed:fa:a5: 11:fe:5f:64:7d:94:60:62:bf:a2:8e:1f:c2:c2:fe:72:12:60: cc:4d:a8:b3:a2:6a:57:b5:e0:c1:cb:7d:8e:b2:29:8e:65:df: 3e:af:e7:ed:78:ad:b8:2d:30:bf:34:64:44:e6:cd:51:f1:10: 3a:2d:40:6f:81:6b:82:e4:11:f6:b3:af:28:6c:5b:ed:58:26: 93:1a:88:44:4c:19:aa:9d:fb:5c:fb:c4:f9:f1:15:e3:f7:76: b6:3b:bf:84:bb:6a:48:57:3b:33:61:ec:d3:78:1f:05:c9:6a: 33:d8:31:07:84:ae:7f:43:2e:1d:b7:de:eb:5f:72:d5:71:48: 8a:e7:41:ab:2b:f6:d6:d4:65:f3:47:da:22:95:e0:9e:c2:82: 59:a9:d6:f0:70:53:bc:43:81:81:66:4c:34:88:a1:db:ef:a3: 59:0c:1d:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjYwNDE3MDAxMDM2WhcNMjYwNDI0MDAxMDM2WjAYMRYwFAYD VQQDEw02OWUxN2E3ZC02OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ2wgSOu2lSEh0HOZ0umewMaPLIBoa5O8TVjCNp76YiKRFBfRas2PYch/88I jNVVaVN7Q/7Uhlcij2TCV6VQA7oaMp6H25QcoHk3iKIv7vO35RLycY8xqqEwcjv1 eAocHeyRjlZbXKFD7xFIg2exY2Qkg2XQ+0zdmQrpywLAmkk7uDeu5oDbxzfAay5n Wad+WJZt/n+8GHcvbo5NtNyl1gRlXdJgXkyG/Pc1dJH5nP2W4YrzvimBDKus9NGv 8O4m+Ha18G61mLLtI7k2vek+l0cF/zLlsM7f2AEDodcRh9Bt3m5CxMvHRHETxSYa 2wlrCXlF5I4Mll2Tb/3FUgya6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8Wj9S0 ZzbHWPlpxOS251D/ID1NMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxWoXE9wiobYFLiF+0YkTCno2uxiU2+l+OBhM1r9maWgbXW69maMYpdWvDXy 5XFLY2oYyan+0TLUD/X/mV5jacqwQ6iLXFmfmXffZGH6o+dcFCaKAb/07fqlEf5f ZH2UYGK/oo4fwsL+chJgzE2os6JqV7Xgwct9jrIpjmXfPq/n7XituC0wvzRkRObN UfEQOi1Ab4FrguQR9rOvKGxb7VgmkxqIREwZqp37XPvE+fEV4/d2tju/hLtqSFc7 M2Hs03gfBclqM9gxB4Suf0MuHbfe619y1XFIiudBqyv21tRl80faIpXgnsKCWanW 8HBTvEOBgWZMNIih2++jWQwddA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:08:22 2026 by rpki-client