$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: wGsR8TEl3lqYS3i2cTiqE13yNEPkWNEXxTi5RxGEA0E= Subject key identifier: 13:86:46:BD:F3:5B:50:FE:F2:63:DA:2D:62:34:EF:07:FC:56:55:0B Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0922 Signing time: Thu 16 Apr 2026 20:09:39 +0000 Manifest this update: Thu 16 Apr 2026 20:09:39 +0000 Manifest next update: Thu 23 Apr 2026 20:09:39 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: HGgg+5yrXUnhNUIB3IxvPt5+JNMTs8urMcL/4vpbatM=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: /9OAZib6ORGUsj/nBJu2BYzp5KOlwzvHRnmf3XojSfQ=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: l+N4J4zxNWyxlfAH9ke4Lwu5X6TI6u4/SfyZolyoLUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Apr 16 20:09:39 2026 GMT Not After : Apr 23 20:09:39 2026 GMT Subject: CN=69e14203-2d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:0c:58:34:3b:9b:c1:93:c4:16:bc:b5:c9: 85:a4:80:45:0b:d0:e6:97:05:15:f8:02:77:de:8c: c4:93:2d:fa:3d:16:4a:a3:dc:92:6b:2b:31:98:cb: c0:01:1c:01:2d:61:4b:92:2a:ec:71:0a:53:a2:c1: 1b:c9:61:3c:ab:92:4c:da:af:af:a5:29:1d:2d:46: c6:0d:50:f7:6c:f7:d4:e8:a7:10:b8:d5:f5:ee:36: a2:43:5e:b5:19:53:74:3f:3d:d3:fc:a1:40:8e:af: 04:aa:f8:33:ac:a4:e0:4d:73:be:0d:87:1c:3d:18: e5:f6:4b:a3:1b:9d:53:6c:94:7b:c7:ef:0e:ab:4c: 4a:68:39:6e:b7:e1:06:73:c7:06:2e:4d:1e:76:a0: 13:48:37:b2:ca:bf:95:88:e0:44:a6:03:54:54:5a: bb:fe:f5:a8:65:85:50:0c:a4:c1:be:e4:20:06:a0: b9:4c:3e:53:2c:f3:77:f1:4e:c5:dc:6f:b1:bc:d0: 22:3f:3a:d8:3f:8b:ac:0e:ec:68:59:79:33:f3:6f: 49:43:e0:a7:0e:c9:c1:74:1c:b0:1b:08:49:13:57: 1e:34:d2:9e:04:75:d5:8f:32:e0:bf:1f:32:c9:68: c1:e9:af:67:c7:db:a8:c1:78:e5:32:fe:74:58:54: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:86:46:BD:F3:5B:50:FE:F2:63:DA:2D:62:34:EF:07:FC:56:55:0B X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9f:6c:d1:24:8c:16:98:1c:bb:d0:14:22:b1:0f:9c:16:a3: 75:50:38:3e:f9:68:00:c5:2c:24:99:04:1c:27:0b:06:bd:a7: a4:32:f4:30:4c:ca:ff:18:78:a9:5e:ef:b0:ef:83:68:4f:e6: b7:fd:2e:0c:e7:d6:e1:5f:86:45:b1:2d:4e:03:10:2b:21:68: 52:91:b8:bf:41:e1:3c:0f:58:91:f6:bd:d1:c7:81:3e:a5:64: e1:d8:b8:16:5e:3d:5e:01:fa:3c:f0:1b:88:49:a6:37:b0:d3: 9e:25:83:4c:28:3e:1c:6c:78:5d:38:ec:cf:ef:63:39:3e:9b: 4a:3c:ef:d3:5b:ba:56:8b:c4:f2:76:6e:5b:a3:ea:51:6b:13: de:71:34:7a:c7:78:e5:ad:f3:6a:0b:c0:09:42:c0:69:f0:fa: f5:37:4e:db:94:c2:7f:6b:b3:eb:74:ec:df:41:03:ec:fc:38: a0:05:84:05:4a:89:82:14:05:8e:e7:1b:7a:94:df:83:e8:6b: 40:f0:10:72:75:85:bd:9a:1c:75:d6:1f:be:d6:4c:58:6f:31: b4:d4:c0:d4:1f:b5:d1:5b:d1:be:0b:6b:fd:1f:62:de:49:4e: 49:72:9a:02:d8:f4:e6:be:f5:f5:a3:a4:e2:90:f4:b9:41:d6: 76:0c:bd:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjYwNDE2MjAwOTM5WhcNMjYwNDIzMjAwOTM5WjAYMRYwFAYD VQQDEw02OWUxNDIwMy0yZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbsMWDQ7m8GTxBa8tcmFpIBFC9DmlwUV+AJ33ozEky36PRZKo9ySaysxmMvA ARwBLWFLkirscQpTosEbyWE8q5JM2q+vpSkdLUbGDVD3bPfU6KcQuNX17jaiQ161 GVN0Pz3T/KFAjq8EqvgzrKTgTXO+DYccPRjl9kujG51TbJR7x+8Oq0xKaDlut+EG c8cGLk0edqATSDeyyr+ViOBEpgNUVFq7/vWoZYVQDKTBvuQgBqC5TD5TLPN38U7F 3G+xvNAiPzrYP4usDuxoWXkz829JQ+CnDsnBdBywGwhJE1ceNNKeBHXVjzLgvx8y yWjB6a9nx9uowXjlMv50WFTMjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOGRr3z W1D+8mPaLWI07wf8VlULMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZ9s0SSMFpgcu9AUIrEPnBajdVA4PvloAMUsJJkEHCcLBr2npDL0MEzK/xh4 qV7vsO+DaE/mt/0uDOfW4V+GRbEtTgMQKyFoUpG4v0HhPA9Ykfa90ceBPqVk4di4 Fl49XgH6PPAbiEmmN7DTniWDTCg+HGx4XTjsz+9jOT6bSjzv01u6VovE8nZuW6Pq UWsT3nE0esd45a3zagvACULAafD69TdO25TCf2uz63Ts30ED7Pw4oAWEBUqJghQF jucbepTfg+hrQPAQcnWFvZocddYfvtZMWG8xtNTA1B+10VvRvgtr/R9i3klOSXKa Atj05r719aOk4pD0uUHWdgy9WA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:52:47 2026 by rpki-client