$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: 16eXlGYEDDxEkcbys8GgsIRM+vuur3df2cAvb6krE3k= Subject key identifier: 69:C6:56:8E:55:B2:A0:C5:2E:5B:DF:35:68:8A:A7:1A:0D:E2:7D:91 Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 01D2 Signing time: Fri 17 Apr 2026 03:22:56 +0000 Manifest this update: Fri 17 Apr 2026 03:22:55 +0000 Manifest next update: Fri 24 Apr 2026 03:22:55 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: Lk4QmBUN/X8o3iy8AmD8P0aO5Zh3vADarQwDYRCQw+0=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: vSlu+TQyxpav2ADnDaaL7eQcjqlvG5DFjhy5XTFprbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Apr 17 03:22:55 2026 GMT Not After : Apr 24 03:22:55 2026 GMT Subject: CN=69e1a790-2f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:4a:ea:33:18:3f:7d:d2:16:49:0f:c0:5a: 68:4e:29:fd:6c:23:70:eb:bd:47:7e:6b:83:a0:64: cc:d5:23:6c:53:3c:f3:2f:b6:84:d3:4e:f3:05:33: a1:51:18:66:02:45:69:c3:91:bf:f7:9a:7d:5e:f3: 07:ff:98:49:c7:4a:66:39:ad:f6:b5:5f:58:63:5e: a4:f4:d0:cf:ba:fa:7a:82:7b:83:92:61:1e:da:57: 4b:a3:45:77:45:0a:68:5d:f1:9a:c1:2e:88:33:56: 2c:29:71:b4:d0:8d:23:10:1c:c6:2d:79:7c:12:ff: 75:75:30:d7:f7:1d:e4:14:b7:fe:be:1c:32:5b:e6: 94:7e:8f:c1:f2:d7:07:6e:27:d8:c4:c7:f9:04:56: 48:dc:28:41:d7:31:b4:c3:e1:fa:22:49:8e:b4:05: bc:37:12:2d:f5:49:18:ac:c0:e0:80:62:26:f3:8c: 46:26:63:89:bb:6f:16:4f:5f:df:bb:33:42:9e:b7: b8:00:be:74:ae:5e:1a:b3:df:39:38:2f:08:ce:18: c8:3c:63:e9:90:65:0b:11:15:fb:f0:fd:a0:61:87: 15:00:a4:8e:b2:01:a5:ce:2d:2c:02:03:7d:d1:27: 4c:2d:e7:66:dc:2b:b4:e8:7f:3c:41:87:1c:31:04: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:56:8E:55:B2:A0:C5:2E:5B:DF:35:68:8A:A7:1A:0D:E2:7D:91 X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:42:23:39:8a:ad:8b:1b:bb:e4:39:e7:b6:01:25:84:bc:ad: f0:4c:ad:4a:eb:11:15:87:f3:76:b4:12:5f:0d:78:c2:a2:18: 52:eb:97:a2:46:5d:a6:5a:b3:11:d3:14:9a:15:26:62:bc:c0: bf:d7:2c:b9:3a:c1:2a:50:37:1b:cb:ea:46:fd:95:58:91:02: cd:0d:e6:d1:47:1e:4f:da:0c:1b:68:9e:c9:22:d3:cb:82:63: 7e:0f:b2:71:f8:46:d4:20:c3:41:6d:2e:e4:e4:75:9e:39:da: 10:b1:a2:50:7e:c3:db:5a:b1:31:7f:58:b4:73:2f:de:22:37: 82:ef:05:dc:4e:67:c9:f3:e7:18:c1:23:a1:52:95:17:25:11: b4:3e:00:ac:50:5b:96:64:81:60:25:a4:e2:40:99:b9:3c:ac: b1:41:58:c0:19:15:d8:2f:ce:23:4b:d8:ff:d9:6e:f6:d4:da: da:c3:55:a0:13:4a:ae:c7:70:99:6a:6f:ff:96:5b:e9:ef:c9: e7:52:13:67:d9:4f:7f:61:93:4d:89:d2:46:00:86:52:6c:39: 1a:6f:d7:8b:44:f9:af:6c:e2:87:36:77:4e:6c:41:fc:23:15: 72:c4:1b:21:e4:52:c8:94:00:d1:7a:eb:e3:7a:c3:13:89:cd: 44:e3:02:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjYwNDE3MDMyMjU1WhcNMjYwNDI0MDMyMjU1WjAYMRYwFAYD VQQDEw02OWUxYTc5MC0yZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiBK6jMYP33SFkkPwFpoTin9bCNw671HfmuDoGTM1SNsUzzzL7aE007zBTOh URhmAkVpw5G/95p9XvMH/5hJx0pmOa32tV9YY16k9NDPuvp6gnuDkmEe2ldLo0V3 RQpoXfGawS6IM1YsKXG00I0jEBzGLXl8Ev91dTDX9x3kFLf+vhwyW+aUfo/B8tcH bifYxMf5BFZI3ChB1zG0w+H6IkmOtAW8NxIt9UkYrMDggGIm84xGJmOJu28WT1/f uzNCnre4AL50rl4as985OC8IzhjIPGPpkGULERX78P2gYYcVAKSOsgGlzi0sAgN9 0SdMLedm3Cu06H88QYccMQSYzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnGVo5V sqDFLlvfNWiKpxoN4n2RMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUIjOYqtixu75DnntgElhLyt8EytSusRFYfzdrQSXw14wqIYUuuXokZdplqz EdMUmhUmYrzAv9csuTrBKlA3G8vqRv2VWJECzQ3m0UceT9oMG2ieySLTy4Jjfg+y cfhG1CDDQW0u5OR1njnaELGiUH7D21qxMX9YtHMv3iI3gu8F3E5nyfPnGMEjoVKV FyURtD4ArFBblmSBYCWk4kCZuTyssUFYwBkV2C/OI0vY/9lu9tTa2sNVoBNKrsdw mWpv/5Zb6e/J51ITZ9lPf2GTTYnSRgCGUmw5Gm/Xi0T5r2zihzZ3TmxB/CMVcsQb IeRSyJQA0Xrr43rDE4nNROMCzw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:54:09 2026 by rpki-client