$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json) Hash identifier: tLbZmRGCW5oqfGttC/5xLkuoe/tike6mFFI1WBYdukU= Subject key identifier: 63:20:A2:6F:D4:80:41:7D:9D:39:35:F9:8D:FF:97:5B:94:AD:F4:B5 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft Manifest number: 0651 Signing time: Thu 16 Apr 2026 22:35:39 +0000 Manifest this update: Thu 16 Apr 2026 22:35:38 +0000 Manifest next update: Thu 23 Apr 2026 22:35:38 +0000 Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: KetSsFz1VyDeL7tk5MknpRcyJmeHV+7to/rzx6UA6d4=) 2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: DIxhiXc0lWrP1HFp4dV9JN6j/Zz8GVR/zOlWSXrjAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: Apr 16 22:35:38 2026 GMT Not After : Apr 23 22:35:38 2026 GMT Subject: CN=69e1643a-0aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:9d:0d:fa:42:60:35:4e:82:81:a7:2f:2a: 77:a0:56:8b:f3:22:ff:68:f7:fa:1a:05:13:4b:1f: ad:29:92:ad:a4:a9:9a:0d:47:dd:c2:f2:7d:33:d9: 7d:53:57:45:5d:0f:7e:3f:09:e0:73:ca:dd:55:67: 59:17:71:5f:8c:12:8b:d2:f1:63:31:29:18:9d:c4: c3:78:61:cd:dc:cc:41:b1:cf:68:fe:9b:bb:67:96: a9:04:19:38:85:2e:15:2a:6c:79:86:9e:72:d8:31: aa:40:18:ba:7f:1d:c2:f2:0e:47:fc:cc:6c:eb:75: 08:b1:90:9d:61:c1:11:32:24:74:d7:89:cb:a3:48: 09:b1:47:b6:20:2d:e8:1c:1f:b5:49:b6:04:7f:6e: 96:ae:ce:9a:1e:d4:3f:c0:fa:07:bf:ed:5f:d8:76: 26:8e:9d:5c:3e:73:4c:59:ef:81:e4:bf:b0:45:77: 4d:01:9d:0c:fa:7a:ff:17:51:11:b2:b6:28:a1:2a: 20:1d:6e:12:7f:40:17:b1:95:2b:97:de:d3:db:f4: 55:e5:bf:dc:3c:e5:30:14:63:a7:2c:4d:18:0b:e8: be:47:76:7e:dc:6b:1d:5f:41:fa:9a:8d:7f:49:70: 8c:a9:07:a6:c3:e7:c8:74:ea:13:f8:3f:43:82:73: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:20:A2:6F:D4:80:41:7D:9D:39:35:F9:8D:FF:97:5B:94:AD:F4:B5 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a5:3a:36:7f:c4:79:4d:3e:a4:26:a8:18:39:b3:54:c8:9a: 45:8a:ee:8c:66:e1:ed:30:01:cd:86:96:8f:c6:d7:5a:01:99: db:f0:20:ab:ad:50:9b:51:06:c2:07:9b:5f:c5:f0:72:fd:34: 3c:42:63:f0:c2:c3:a2:9e:0b:4d:6e:cc:6e:97:81:0e:43:f1: 23:f9:58:e2:3b:d2:92:cc:ef:d6:ef:90:85:61:5e:db:db:1e: 2b:b0:9d:cd:8b:96:6b:cf:80:97:ec:59:96:cc:b7:bd:c7:d8: b3:8e:07:62:1f:61:26:2d:1a:7a:38:07:c0:f4:a4:b2:78:1f: 74:7c:ae:56:4c:bd:d5:39:50:e0:d1:93:f1:2a:66:a3:67:2d: d1:1a:c8:07:0c:c7:cf:13:0c:ca:f6:bf:c0:5f:c3:02:32:55: 5d:ff:03:33:0d:a4:d9:24:11:01:23:2e:38:eb:88:44:17:9f: ca:f5:e9:59:02:e4:db:9a:92:cc:bc:3b:63:61:93:6e:1a:5f: d1:a7:ac:37:97:4f:5b:b9:97:c9:31:31:3f:01:29:27:16:f6: 0e:af:2c:02:40:80:6f:56:cb:1e:b6:14:2e:a0:6d:92:9b:5c: b7:84:35:40:08:85:93:34:9f:a1:12:34:e0:d5:34:26:c2:cc: 8f:a8:1f:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjYwNDE2MjIzNTM4WhcNMjYwNDIzMjIzNTM4WjAYMRYwFAYD VQQDEw02OWUxNjQzYS0wYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ2dDfpCYDVOgoGnLyp3oFaL8yL/aPf6GgUTSx+tKZKtpKmaDUfdwvJ9M9l9 U1dFXQ9+Pwngc8rdVWdZF3FfjBKL0vFjMSkYncTDeGHN3MxBsc9o/pu7Z5apBBk4 hS4VKmx5hp5y2DGqQBi6fx3C8g5H/Mxs63UIsZCdYcERMiR014nLo0gJsUe2IC3o HB+1SbYEf26Wrs6aHtQ/wPoHv+1f2HYmjp1cPnNMWe+B5L+wRXdNAZ0M+nr/F1ER srYooSogHW4Sf0AXsZUrl97T2/RV5b/cPOUwFGOnLE0YC+i+R3Z+3GsdX0H6mo1/ SXCMqQemw+fIdOoT+D9DgnMf+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMgom/U gEF9nTk1+Y3/l1uUrfS1MB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1 dld2clJJYXRSblFHWHhSMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqU6Nn/EeU0+pCaoGDmzVMiaRYrujGbh7TABzYaWj8bXWgGZ2/Agq61Qm1EG wgebX8Xwcv00PEJj8MLDop4LTW7MbpeBDkPxI/lY4jvSkszv1u+QhWFe29seK7Cd zYuWa8+Al+xZlsy3vcfYs44HYh9hJi0aejgHwPSksngfdHyuVky91TlQ4NGT8Spm o2ct0RrIBwzHzxMMyva/wF/DAjJVXf8DMw2k2SQRASMuOOuIRBefyvXpWQLk25qS zLw7Y2GTbhpf0aesN5dPW7mXyTExPwEpJxb2Dq8sAkCAb1bLHrYULqBtkptct4Q1 QAiFkzSfoRI04NU0JsLMj6gfPA== -----END CERTIFICATE-----Generated at Sat Apr 18 08:54:17 2026 by rpki-client