$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: ZNu4ct7FEMKJiF6EMr5+QzLaqInz8eDIdl4kXjvpTo8= Subject key identifier: 7D:4B:CB:3C:A7:7B:E8:05:86:F9:7A:1B:75:22:67:D9:85:34:5C:35 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 0485 Signing time: Fri 17 Apr 2026 00:02:06 +0000 Manifest this update: Fri 17 Apr 2026 00:02:05 +0000 Manifest next update: Fri 24 Apr 2026 00:02:05 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: 95bAdGY9NRAsFzMw5WNw5Gm1kQPM8zAIQZ5f+ZNt7KY=) 2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: +qNb2bGAuClTAyzcfKR7pzoXXTJGSIuKXBMLxWCq3Yg=) 3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: AJrvk8IGvjnP3VJvC5dJezoK0caBMbNlEK+q3lO+374=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: Apr 17 00:02:05 2026 GMT Not After : Apr 24 00:02:05 2026 GMT Subject: CN=69e1787e-70ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:01:ea:09:b9:5a:b3:1f:01:2e:de:03:00: db:45:68:85:dd:10:2c:f1:83:3a:27:c6:a0:dc:82: cc:4d:40:61:a8:f8:9d:61:26:29:98:a6:2a:c5:e7: cc:9f:d8:6c:68:8b:fb:58:85:c0:d2:d9:82:57:be: 22:34:bd:9b:63:48:61:7b:b6:80:9a:bd:ab:23:57: 2d:6f:7a:6d:fa:b2:80:49:15:6a:3c:39:0b:f2:09: 73:4d:59:2e:c6:d3:3f:f1:c6:a3:4d:63:b7:76:86: b3:96:06:d0:60:64:d5:87:62:53:5f:74:a0:86:ce: 68:56:b7:9b:9c:61:79:09:58:a3:23:be:ef:71:16: 0f:0b:ee:54:be:3f:d5:2c:85:b8:42:36:17:8e:31: 7f:f3:2b:fc:ed:f7:e0:28:66:b0:ad:7d:b4:86:ec: e2:7c:62:48:1e:18:84:c5:56:a9:28:cf:6a:df:7b: dd:80:7b:7d:5f:c5:0a:ab:6a:14:4f:db:e1:6b:f7: e6:69:fc:48:14:05:0f:3d:52:65:79:4e:78:9c:06: a4:6a:66:0f:3d:75:bd:4d:05:45:86:c9:14:7c:b4: ad:d2:fd:1b:01:07:16:91:47:20:4f:a8:71:f8:41: c3:43:1f:4e:4d:1c:c9:0d:14:f9:6a:71:b6:72:50: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4B:CB:3C:A7:7B:E8:05:86:F9:7A:1B:75:22:67:D9:85:34:5C:35 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:88:59:25:bf:df:9d:e1:a2:e3:dd:8d:df:94:46:16:5e:95: d2:3c:d2:1d:0f:02:d0:f8:76:62:74:44:96:80:6d:fe:fd:e5: 31:b0:53:29:8a:c7:70:df:ae:00:5a:f2:ba:10:1f:1e:c0:44: 24:33:80:90:6c:6f:b5:1c:ba:3b:af:01:36:de:a2:13:36:06: 8b:7d:83:6a:54:b6:ed:84:77:a9:5d:c7:e9:d4:04:b8:bc:0c: f4:62:ca:a0:5c:5a:67:04:a8:bc:ed:c0:f5:3e:2e:82:54:7d: e2:fa:74:2f:7b:52:0a:9e:39:41:e6:4f:74:e5:ee:0d:d7:df: c9:c7:b0:e7:91:37:7a:e2:8a:bb:c4:5d:05:a2:e5:0e:bd:16: 9c:cd:bf:ad:4c:e2:19:2e:9d:26:d9:fb:d5:3d:bd:b2:a0:87: 2f:9d:57:6d:89:1f:97:21:4c:98:fe:f8:9d:db:42:1a:6d:41: b1:51:66:bd:68:38:b7:6b:6c:33:3c:bf:c8:8f:e1:03:3d:81: 4a:66:8a:51:28:c4:78:f2:f1:1a:c2:78:3a:02:0d:86:bf:16: 8b:c2:49:8c:20:85:f8:7f:7d:fd:e2:58:b6:6f:35:9d:4e:d5: f1:66:54:24:d7:b4:2f:3b:9c:7e:74:f1:08:39:34:10:cc:bf: 5d:f2:0b:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjYwNDE3MDAwMjA1WhcNMjYwNDI0MDAwMjA1WjAYMRYwFAYD VQQDEw02OWUxNzg3ZS03MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl8B6gm5WrMfAS7eAwDbRWiF3RAs8YM6J8ag3ILMTUBhqPidYSYpmKYqxefM n9hsaIv7WIXA0tmCV74iNL2bY0hhe7aAmr2rI1ctb3pt+rKASRVqPDkL8glzTVku xtM/8cajTWO3doazlgbQYGTVh2JTX3Sghs5oVrebnGF5CVijI77vcRYPC+5Uvj/V LIW4QjYXjjF/8yv87ffgKGawrX20huzifGJIHhiExVapKM9q33vdgHt9X8UKq2oU T9vha/fmafxIFAUPPVJleU54nAakamYPPXW9TQVFhskUfLSt0v0bAQcWkUcgT6hx +EHDQx9OTRzJDRT5anG2clDSZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1Lyzyn e+gFhvl6G3UiZ9mFNFw1MB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJohZJb/fneGi492N35RGFl6V0jzSHQ8C0Ph2YnREloBt/v3lMbBTKYrHcN+u AFryuhAfHsBEJDOAkGxvtRy6O68BNt6iEzYGi32DalS27YR3qV3H6dQEuLwM9GLK oFxaZwSovO3A9T4uglR94vp0L3tSCp45QeZPdOXuDdffycew55E3euKKu8RdBaLl Dr0WnM2/rUziGS6dJtn71T29sqCHL51XbYkflyFMmP74ndtCGm1BsVFmvWg4t2ts Mzy/yI/hAz2BSmaKUSjEePLxGsJ4OgINhr8Wi8JJjCCF+H99/eJYtm81nU7V8WZU JNe0LzucfnTxCDk0EMy/XfILnA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:28 2026 by rpki-client