$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: ZLQXjxUQKX9ZiytKpZQsiUDSg+4LaOif7hjQJ7w8Vjk= Subject key identifier: D4:B8:1C:E6:89:14:D7:A6:3A:8F:EC:56:B5:3C:5B:15:3E:D0:72:46 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 0252 Signing time: Fri 17 Apr 2026 02:04:46 +0000 Manifest this update: Fri 17 Apr 2026 02:04:45 +0000 Manifest next update: Fri 24 Apr 2026 02:04:45 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: c5UusVG8fb7xkWX4q+ddmV+MqkDPc4LFgv2nDCWPSSM=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 8Y4nrhPY6RsS1NE1gpg04ierg266aCYEgZiZ3ft65yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Apr 17 02:04:45 2026 GMT Not After : Apr 24 02:04:45 2026 GMT Subject: CN=69e1953e-0ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:b0:b5:23:3c:de:95:4f:ed:ae:22:33:8c: 6a:ec:aa:05:09:06:43:ec:3e:ac:5b:03:c1:e4:8b: 73:00:85:6b:73:94:ae:01:dc:f2:36:4d:96:39:61: 1e:50:92:32:c8:66:47:71:6a:ad:b2:95:75:8b:d1: fe:be:e1:d3:f3:1d:33:49:d9:43:79:99:5f:32:05: b8:bb:75:fe:d1:bd:b0:ac:a3:22:0b:a3:a7:38:e1: 5e:c7:3e:86:c1:71:da:3b:5a:d0:80:7d:44:2a:64: e5:36:58:ed:77:18:48:08:f4:f2:f7:83:53:28:c5: 64:5a:ea:22:71:fe:e6:ef:28:06:7b:27:17:44:f8: 98:ab:02:e7:0a:7e:b5:96:a5:fb:96:1b:62:31:2d: 48:47:63:76:d1:11:1f:6e:56:a2:39:26:3f:b1:0f: 2a:0f:18:9d:c3:e2:3c:72:c8:bc:26:2a:3c:fc:fb: 4a:3c:47:4b:e6:80:14:07:1d:a3:5a:07:71:9c:63: 4e:de:63:7b:f0:35:98:33:c9:44:8e:e4:ed:79:bb: c9:a1:61:4e:6e:4d:1c:57:0f:b7:7b:83:a2:f9:c8: b2:44:52:f9:e9:ff:5c:99:b7:08:36:75:fe:9b:f7: bd:d6:87:c7:2f:fc:50:e2:3b:80:5b:62:27:1b:9e: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B8:1C:E6:89:14:D7:A6:3A:8F:EC:56:B5:3C:5B:15:3E:D0:72:46 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:57:71:38:0a:fe:a8:3d:7c:23:2e:a9:c3:51:e2:7f:a5:7c: ed:2d:92:a2:be:9b:5a:46:89:25:26:52:dd:bc:a7:7b:7a:c3: 44:b8:3c:47:42:2f:f9:e8:a0:d3:4d:ea:60:18:82:7d:8a:40: cb:27:72:83:52:56:4d:b7:92:f8:5e:56:2e:9c:dd:11:2e:d9: c8:4a:b5:11:24:8b:79:6b:8c:19:be:1e:42:58:90:43:1b:95: d6:d9:3a:d7:86:b3:3a:70:96:f9:6b:6d:89:1f:55:6b:2d:a8: 7d:26:dc:81:cf:39:82:d3:7f:3e:56:e2:d0:26:40:61:4e:56: 46:e9:52:d8:cb:b8:f5:82:15:46:d5:31:6e:bb:f1:e5:c5:28: 03:64:fc:08:7b:02:8a:c9:c7:e0:57:58:dd:02:7c:ff:3b:ba: 76:09:ec:f2:83:8e:90:45:12:f5:f7:13:ce:7f:ba:ad:39:3c: 55:68:a8:86:9c:f2:f5:7f:fc:39:73:18:d9:38:70:22:36:0a: ce:9b:52:74:52:f4:74:76:40:11:0d:61:25:5b:d3:59:4f:39: 76:d3:ff:12:70:2b:c0:5d:3e:e4:87:65:85:5c:ec:b8:db:0c: a7:13:c9:7a:21:17:4f:0f:c4:09:9e:3e:5c:74:8a:dc:ae:91: cc:25:54:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjYwNDE3MDIwNDQ1WhcNMjYwNDI0MDIwNDQ1WjAYMRYwFAYD VQQDEw02OWUxOTUzZS0wYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDiwtSM83pVP7a4iM4xq7KoFCQZD7D6sWwPB5ItzAIVrc5SuAdzyNk2WOWEe UJIyyGZHcWqtspV1i9H+vuHT8x0zSdlDeZlfMgW4u3X+0b2wrKMiC6OnOOFexz6G wXHaO1rQgH1EKmTlNljtdxhICPTy94NTKMVkWuoicf7m7ygGeycXRPiYqwLnCn61 lqX7lhtiMS1IR2N20REfblaiOSY/sQ8qDxidw+I8csi8Jio8/PtKPEdL5oAUBx2j WgdxnGNO3mN78DWYM8lEjuTtebvJoWFObk0cVw+3e4Oi+ciyRFL56f9cmbcINnX+ m/e91ofHL/xQ4juAW2InG57dsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS4HOaJ FNemOo/sVrU8WxU+0HJGMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQVdxOAr+qD18Iy6pw1Hif6V87S2Sor6bWkaJJSZS3byne3rDRLg8R0Iv+eig 003qYBiCfYpAyydyg1JWTbeS+F5WLpzdES7ZyEq1ESSLeWuMGb4eQliQQxuV1tk6 14azOnCW+WttiR9Vay2ofSbcgc85gtN/Plbi0CZAYU5WRulS2Mu49YIVRtUxbrvx 5cUoA2T8CHsCisnH4FdY3QJ8/zu6dgns8oOOkEUS9fcTzn+6rTk8VWiohpzy9X/8 OXMY2ThwIjYKzptSdFL0dHZAEQ1hJVvTWU85dtP/EnArwF0+5IdlhVzsuNsMpxPJ eiEXTw/ECZ4+XHSK3K6RzCVUUg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:56 2026 by rpki-client