$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json) Hash identifier: zwRYDtDb9CCB2BjUNRE78Z+q4BxyFzADWGofqCpzGVU= Subject key identifier: 44:FD:9D:8C:37:25:D3:90:11:5B:06:AA:BF:51:97:5D:B4:3D:F5:03 Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft Manifest number: 25 Signing time: Fri 17 Apr 2026 08:32:49 +0000 Manifest this update: Fri 17 Apr 2026 08:32:48 +0000 Manifest next update: Fri 24 Apr 2026 08:32:48 +0000 Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: 7N/7NPIPVtUhncDrZGK+hZ3riH7Mtt6CShOsONuliJ0=) 2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: Apr 17 08:32:48 2026 GMT Not After : Apr 24 08:32:48 2026 GMT Subject: CN=69e1f031-5de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ad:93:05:a5:4c:0b:43:e9:0b:58:5a:43:a9: 20:2a:ee:26:5b:88:e2:bf:e5:eb:bd:28:ca:14:50: 0c:fe:93:d9:d8:c5:c3:98:c6:f3:13:ca:1c:fb:07: 89:47:36:eb:8d:35:27:14:d4:d7:93:2f:bf:7c:b2: ad:cb:e2:c0:bd:c4:a9:82:37:d0:6a:07:dd:ff:35: a5:8b:33:67:35:fb:76:f7:15:65:58:6b:da:5c:11: 47:5d:55:1d:84:e0:38:f9:61:9c:64:16:8a:b5:85: a1:a9:35:ad:67:52:49:9a:0e:d8:ed:b1:a1:6d:22: ba:6e:68:a6:63:b9:3d:c5:57:82:c2:3c:04:bc:29: b9:1b:6c:50:b9:eb:b8:8f:b4:8e:28:0c:51:92:c9: 41:b0:f8:6e:56:de:9a:c9:be:f3:1c:ea:67:b8:b9: a5:27:f8:8e:2b:5c:f0:ca:ea:2d:2b:e4:35:fd:e4: 41:1a:b6:d2:f9:a0:bb:54:e3:20:18:aa:bb:4b:f7: 58:93:fa:75:93:12:0a:7e:33:70:ba:10:b2:3f:66: 0e:82:e6:af:9d:30:63:90:69:01:d5:23:cd:8c:00: 5a:a9:c0:1f:31:88:99:3e:45:2c:60:3e:94:23:c6: 08:da:1d:cc:95:84:ac:dd:65:c1:0e:bf:48:a8:4d: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:9D:8C:37:25:D3:90:11:5B:06:AA:BF:51:97:5D:B4:3D:F5:03 X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6a:67:d8:27:35:ca:e1:ad:ef:2e:cb:b7:cc:f1:00:5e:a8: 2e:eb:14:f5:84:8e:06:6a:9f:31:a1:53:86:7f:d5:15:ab:1b: 8a:ba:a3:8a:f3:ea:b0:62:2a:66:fc:cf:9f:03:41:f3:76:88: 92:95:be:63:15:5d:b1:1f:12:66:44:9a:03:e4:7b:4f:32:f3: 17:a6:66:e6:a9:84:cc:df:64:d7:f7:b3:d4:e5:53:f9:5a:a6: ec:83:cf:d0:1a:18:c8:c9:8c:89:52:e3:41:5e:e4:49:8f:f0: 3c:91:b7:45:c3:f3:01:94:fa:98:59:65:54:f5:16:11:f3:c4: f5:b0:8f:22:77:e4:60:0d:85:51:d2:5e:d6:91:f7:65:03:46: f8:1e:04:9c:37:3f:d9:86:1e:19:34:aa:92:0d:e0:66:41:06: ee:aa:7e:af:15:2a:d6:1e:a3:16:4d:42:9f:d9:c9:df:75:a4: e2:bd:bc:fc:59:9b:70:63:2f:78:31:0d:4b:51:3e:7f:d1:20: 7f:4b:ce:7f:e1:a2:15:10:cd:c6:75:fe:38:52:27:12:20:5f: 23:11:8e:3e:ba:ff:87:c6:bb:b5:ea:f1:0c:8d:a4:b8:ba:81: 62:f1:d0:c0:10:94:ef:65:03:b8:74:ca:55:dd:b8:21:ce:f9: f4:14:d8:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjA0MTcwODMyNDhaFw0yNjA0MjQwODMyNDhaMBgxFjAUBgNV BAMTDTY5ZTFmMDMxLTVkZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSrZMFpUwLQ+kLWFpDqSAq7iZbiOK/5eu9KMoUUAz+k9nYxcOYxvMTyhz7B4lH NuuNNScU1NeTL798sq3L4sC9xKmCN9BqB93/NaWLM2c1+3b3FWVYa9pcEUddVR2E 4Dj5YZxkFoq1haGpNa1nUkmaDtjtsaFtIrpuaKZjuT3FV4LCPAS8KbkbbFC567iP tI4oDFGSyUGw+G5W3prJvvMc6me4uaUn+I4rXPDK6i0r5DX95EEattL5oLtU4yAY qrtL91iT+nWTEgp+M3C6ELI/Zg6C5q+dMGOQaQHVI82MAFqpwB8xiJk+RSxgPpQj xgjaHcyVhKzdZcEOv0ioTfHZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURP2djDcl 05ARWwaqv1GXXbQ99QMwHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NkIxL0Y0QTkxNTdBMDg4QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRv WVJCb3FjT0JSU3NsOFFFMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsamfYJzXK4a3vLsu3zPEAXqgu6xT1hI4Gap8xoVOGf9UVqxuKuqOK8+qwYipm /M+fA0HzdoiSlb5jFV2xHxJmRJoD5HtPMvMXpmbmqYTM32TX97PU5VP5Wqbsg8/Q GhjIyYyJUuNBXuRJj/A8kbdFw/MBlPqYWWVU9RYR88T1sI8id+RgDYVR0l7Wkfdl A0b4HgScNz/Zhh4ZNKqSDeBmQQbuqn6vFSrWHqMWTUKf2cnfdaTivbz8WZtwYy94 MQ1LUT5/0SB/S85/4aIVEM3Gdf44UicSIF8jEY4+uv+Hxru16vEMjaS4uoFi8dDA EJTvZQO4dMpV3bghzvn0FNjM -----END CERTIFICATE-----Generated at Fri Apr 17 19:08:22 2026 by rpki-client