$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: GfikfahAIw1yy3zjxnUUoumvTZTzv0LFA47eBXB5TII= Subject key identifier: D2:8B:EE:75:50:71:8E:13:B2:E3:B1:59:14:E2:31:2B:58:DB:01:67 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 0204 Signing time: Fri 17 Apr 2026 02:55:43 +0000 Manifest this update: Fri 17 Apr 2026 02:55:43 +0000 Manifest next update: Fri 24 Apr 2026 02:55:43 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: IlqFgSCwdyUXEFXui5eA4cPdCTnzQux345vteW7SRdE=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Apr 17 02:55:43 2026 GMT Not After : Apr 24 02:55:43 2026 GMT Subject: CN=69e1a12f-440c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:fa:24:13:7a:8c:42:c8:34:f6:c2:fc:4b: 9d:eb:ea:cd:d2:b0:d3:dc:14:b5:69:b2:ef:c4:47: 4c:84:e1:25:81:3a:48:2b:81:fd:c3:ee:e1:9e:ea: 67:10:cb:fc:79:82:83:55:6c:05:36:89:98:59:52: c1:2e:a1:46:86:1a:b9:e0:54:7f:2c:53:57:0c:27: 94:4d:df:a8:dd:46:ce:9e:ba:19:7f:c6:82:05:a2: 4e:8f:74:54:f9:10:ee:48:ec:9b:74:7d:d1:d8:72: e0:0c:6e:c5:19:ad:00:48:72:cf:f0:16:46:e1:05: 8b:72:9a:0b:6d:94:ff:8d:d6:c4:53:9c:00:5b:62: 39:8b:3a:47:85:51:e5:eb:25:37:16:a2:e2:ed:c3: 06:36:90:11:05:c2:79:0d:49:97:a5:23:56:3d:6d: 5c:5e:e5:80:0f:f7:9d:f1:c2:00:d6:63:2e:d1:03: f9:98:43:00:30:db:c0:18:cf:ad:cb:5c:be:64:01: 87:24:45:7b:b6:52:9e:eb:54:b3:02:5e:3e:59:ad: 9d:90:d3:2b:39:5d:6a:90:7e:f3:38:ae:5e:83:9f: ec:43:22:2b:ad:6c:4e:27:57:a9:ee:94:6f:50:c4: ca:f0:ba:16:19:84:50:ed:ef:ed:1a:49:2a:6a:02: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:EE:75:50:71:8E:13:B2:E3:B1:59:14:E2:31:2B:58:DB:01:67 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:66:dd:f9:e1:d4:0e:4b:80:d2:0d:d4:5a:2a:22:6a:3a: 05:57:f4:14:19:ff:6d:10:e7:b9:19:57:2a:b2:c0:f0:b6:14: 3f:28:f0:3d:5b:81:17:c6:35:9b:44:36:9c:f2:02:4a:a6:ff: 95:1b:c3:8c:6d:e3:f0:40:ee:b9:66:ad:f8:c7:9c:40:c8:ea: 9a:47:38:ae:59:6c:5f:0a:4a:4f:d9:76:7e:36:f6:89:ee:34: ea:71:64:b4:10:52:55:68:ce:6d:75:4e:ea:bc:36:80:1e:fb: ca:db:1c:ae:ce:42:50:ba:da:7b:84:dd:f5:21:da:ad:f9:83: fc:03:ba:a8:f5:9e:0a:b7:27:d1:d0:c4:2e:e4:d2:05:8e:6f: d2:c6:26:3c:fc:8c:8c:e2:cc:72:8f:54:b3:bf:01:3f:54:54: d9:1f:69:47:45:14:de:4f:8c:5e:7c:f8:ab:75:91:dd:c9:7c: 36:68:5e:aa:c9:73:58:02:02:1e:9b:e2:fa:c6:74:3a:3c:73: c1:8f:c9:01:ae:28:ba:ad:20:fd:0b:1d:3e:10:20:b8:36:0f: 94:a9:3b:75:47:1c:82:1a:a2:ea:e1:21:89:ca:20:ef:71:58: 84:6e:25:40:0e:7e:d1:8a:d4:2e:dd:61:56:53:e3:f7:0f:8c: 4b:4e:ab:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYwNDE3MDI1NTQzWhcNMjYwNDI0MDI1NTQzWjAYMRYwFAYD VQQDEw02OWUxYTEyZi00NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmm/6JBN6jELINPbC/Eud6+rN0rDT3BS1abLvxEdMhOElgTpIK4H9w+7hnupn EMv8eYKDVWwFNomYWVLBLqFGhhq54FR/LFNXDCeUTd+o3UbOnroZf8aCBaJOj3RU +RDuSOybdH3R2HLgDG7FGa0ASHLP8BZG4QWLcpoLbZT/jdbEU5wAW2I5izpHhVHl 6yU3FqLi7cMGNpARBcJ5DUmXpSNWPW1cXuWAD/ed8cIA1mMu0QP5mEMAMNvAGM+t y1y+ZAGHJEV7tlKe61SzAl4+Wa2dkNMrOV1qkH7zOK5eg5/sQyIrrWxOJ1ep7pRv UMTK8LoWGYRQ7e/tGkkqagJhZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKL7nVQ cY4TsuOxWRTiMStY2wFnMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFY9m3fnh1A5LgNIN1FoqImo6BVf0FBn/bRDnuRlXKrLA8LYUPyjwPVuBF8Y1 m0Q2nPICSqb/lRvDjG3j8EDuuWat+MecQMjqmkc4rllsXwpKT9l2fjb2ie406nFk tBBSVWjObXVO6rw2gB77ytscrs5CULrae4Td9SHarfmD/AO6qPWeCrcn0dDELuTS BY5v0sYmPPyMjOLMco9Us78BP1RU2R9pR0UU3k+MXnz4q3WR3cl8NmheqslzWAIC Hpvi+sZ0OjxzwY/JAa4ouq0g/QsdPhAguDYPlKk7dUccghqi6uEhicog73FYhG4l QA5+0YrULt1hVlPj9w+MS06rsQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:41 2026 by rpki-client