$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: 1sdVBiB07bIjgUoebb4uHgHSXMUnyKNW+ugbKXV1VYs= Subject key identifier: A5:54:11:53:91:A3:67:ED:A4:74:5A:6D:D3:B7:0D:27:34:20:5D:E0 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 0133 Signing time: Fri 17 Apr 2026 05:11:18 +0000 Manifest this update: Fri 17 Apr 2026 05:11:17 +0000 Manifest next update: Fri 24 Apr 2026 05:11:17 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: MkeRm8KLTX+mnJkID48dxeiWFc0KPV8Gu0RCclRSky4=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: db0T6je7EzXg8TXl/6K3AERU82KHSYVQ7I7q4aY89M8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Apr 17 05:11:17 2026 GMT Not After : Apr 24 05:11:17 2026 GMT Subject: CN=69e1c0f6-5b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:e1:0e:7c:8b:cd:0d:d0:da:9f:c3:51:89: a1:79:53:4d:9c:1a:43:4a:a9:a1:f7:28:ea:d1:5c: fc:2d:f4:8e:9d:54:27:99:25:d5:42:b6:40:f7:cb: 0d:bc:68:2f:09:1f:af:43:e0:47:7e:8d:eb:69:58: 7c:15:56:86:fd:fd:d4:51:db:b3:49:1d:85:53:47: ed:3d:44:4d:8b:d5:4f:e8:c2:b0:68:40:a6:7e:d2: 59:c2:c9:1d:b6:8e:ac:69:23:eb:54:bf:89:39:db: 5f:f7:1a:a9:05:b6:c6:05:37:64:c7:4f:23:5a:82: ac:84:10:b1:1f:c2:44:58:e6:a7:2a:3c:68:90:24: 3a:d4:c5:5c:c6:a9:95:cd:f1:5c:53:07:56:55:fd: 1b:cd:5c:a4:d1:eb:28:1d:50:f2:20:63:ee:13:2d: a0:a8:72:d9:ce:6a:6c:fb:44:72:9e:4c:c4:c9:a6: 5c:d1:2c:c0:94:7d:1a:8d:4d:a5:8d:6f:bc:4e:36: f3:f0:f1:a0:60:22:59:ba:34:bc:f1:ee:6a:73:4e: 13:4f:6f:3f:a0:1a:e5:92:6f:3c:dc:a0:24:3f:69: 19:42:2e:90:ed:21:0e:f5:d1:96:3b:68:ed:dc:45: f6:da:27:ae:8c:a6:b4:ac:ed:af:b8:cc:15:b8:8a: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:54:11:53:91:A3:67:ED:A4:74:5A:6D:D3:B7:0D:27:34:20:5D:E0 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:96:80:24:47:3a:bd:e7:2d:67:9d:4f:e7:a6:11:e5:b8:60: 6e:e6:3b:dd:1d:66:82:d6:bd:95:a2:6c:10:59:7f:5a:ce:42: 3c:c9:db:8f:ea:70:89:3e:6e:b0:30:a5:8e:c4:93:29:59:a5: 07:f7:1a:1d:d7:0f:6e:08:d3:77:32:c0:39:d9:2e:9d:63:79: 5a:1c:8b:7f:b7:dd:d1:39:82:6d:fe:bb:0b:88:0c:49:38:7e: bc:9d:ac:a8:eb:fd:3f:66:e6:98:57:d7:72:09:f7:2e:ba:8a: df:23:07:00:67:49:4b:89:11:fb:47:f5:12:50:55:48:ab:eb: 57:cc:b8:11:61:47:8f:14:8f:c2:15:c9:c2:82:f4:8d:08:cb: f2:db:5d:43:1e:0a:22:3a:87:c4:5e:af:86:61:8b:75:a1:10: f0:dc:d8:e1:29:5f:42:00:78:10:b9:9c:7c:00:2e:0f:89:b6: 37:98:8a:ba:85:9c:5b:76:a1:9b:51:44:4c:1b:90:8c:91:c9: 58:2d:25:ea:ab:70:33:76:94:a6:b0:9f:bd:2d:53:f8:15:6b: 59:13:db:ed:1c:22:a9:58:24:9e:4f:e5:84:f2:a2:c7:e5:39: 72:b8:f8:e3:04:57:11:ae:dc:1a:70:c9:16:3f:00:67:c5:ea: 1c:0f:8f:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjYwNDE3MDUxMTE3WhcNMjYwNDI0MDUxMTE3WjAYMRYwFAYD VQQDEw02OWUxYzBmNi01YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApj7hDnyLzQ3Q2p/DUYmheVNNnBpDSqmh9yjq0Vz8LfSOnVQnmSXVQrZA98sN vGgvCR+vQ+BHfo3raVh8FVaG/f3UUduzSR2FU0ftPURNi9VP6MKwaECmftJZwskd to6saSPrVL+JOdtf9xqpBbbGBTdkx08jWoKshBCxH8JEWOanKjxokCQ61MVcxqmV zfFcUwdWVf0bzVyk0esoHVDyIGPuEy2gqHLZzmps+0RynkzEyaZc0SzAlH0ajU2l jW+8Tjbz8PGgYCJZujS88e5qc04TT28/oBrlkm883KAkP2kZQi6Q7SEO9dGWO2jt 3EX22ieujKa0rO2vuMwVuIrQ5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVUEVOR o2ftpHRabdO3DSc0IF3gMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARJaAJEc6vectZ51P56YR5bhgbuY73R1mgta9laJsEFl/Ws5CPMnbj+pwiT5u sDCljsSTKVmlB/caHdcPbgjTdzLAOdkunWN5WhyLf7fd0TmCbf67C4gMSTh+vJ2s qOv9P2bmmFfXcgn3LrqK3yMHAGdJS4kR+0f1ElBVSKvrV8y4EWFHjxSPwhXJwoL0 jQjL8ttdQx4KIjqHxF6vhmGLdaEQ8NzY4SlfQgB4ELmcfAAuD4m2N5iKuoWcW3ah m1FETBuQjJHJWC0l6qtwM3aUprCfvS1T+BVrWRPb7RwiqVgknk/lhPKix+U5crj4 4wRXEa7cGnDJFj8AZ8XqHA+PfA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:16 2026 by rpki-client