$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: mtfhnROFhlmmk/1lckCSE7hy3lnU/xePEoDESppE1Ok= Subject key identifier: B6:B1:A3:0F:DA:1B:B5:79:F7:6B:9C:A8:72:5E:7E:45:A0:92:EC:FB Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 0686 Signing time: Thu 16 Apr 2026 22:24:15 +0000 Manifest this update: Thu 16 Apr 2026 22:24:15 +0000 Manifest next update: Thu 23 Apr 2026 22:24:15 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: cC6XBsDR2QSqGH1UwEB/iMBJrS2FfqgE69JW+OlsIsg=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: WUXJJ8dA0rIPvSiYS0+Cpa5v7JDaDBTiBjA7j+6k8hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Apr 16 22:24:15 2026 GMT Not After : Apr 23 22:24:15 2026 GMT Subject: CN=69e1618f-eee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:0e:f2:bf:3d:31:a9:7c:60:68:a6:e0:4b: b8:34:f7:32:c0:80:5d:32:6b:da:0a:aa:44:13:dc: f1:48:28:03:f6:d5:9d:35:c9:c1:3b:aa:8c:bc:13: d4:1a:89:93:f1:e0:e9:d8:6a:7b:3d:3f:52:5f:d5: cf:b3:50:a6:d0:a8:54:02:35:7a:4d:d8:1f:be:f3: 83:4b:4d:eb:22:ae:cf:6f:e1:94:0e:8a:72:ad:97: 52:30:b5:e9:9d:8c:33:01:cd:b2:92:c3:af:54:5b: cb:31:c8:d3:ea:c6:5d:b0:4c:dd:8a:d9:2e:b2:23: 48:f0:a7:6c:73:49:22:33:6b:04:d6:b6:87:98:40: 7f:09:32:b3:c8:24:91:df:24:28:9a:30:2b:80:81: 8b:17:6b:f2:94:61:5a:dc:99:f7:ec:ae:03:32:1b: 8c:4c:1c:89:17:73:fa:19:55:c0:81:69:30:61:ef: d7:1f:6f:11:e5:87:9f:33:bf:8c:60:db:ba:b8:56: d6:c3:f9:8a:5a:50:cd:99:b6:ee:7a:e6:cb:33:92: 21:34:d5:6f:0e:f1:1d:63:c2:13:c0:7b:8b:55:63: 3f:d2:b9:5c:47:8f:aa:97:65:8a:05:04:f3:58:8f: 97:a8:83:3d:ca:36:81:4f:d7:62:df:bc:8e:8d:2f: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:A3:0F:DA:1B:B5:79:F7:6B:9C:A8:72:5E:7E:45:A0:92:EC:FB X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bc:71:f1:9b:5a:8c:18:60:9d:ac:81:79:53:58:13:10:a0: 99:ab:1b:2d:07:92:98:94:8b:61:36:92:ce:0f:ae:eb:01:53: c8:57:e6:da:cf:91:48:1a:f2:1f:96:de:e2:7c:f1:66:99:e3: a4:bd:31:ab:04:9a:e9:16:e8:b1:b8:82:81:a8:86:49:a9:17: 14:72:17:4a:ff:d9:67:72:1d:90:ea:dc:70:26:d6:8b:25:7e: 1e:35:6f:0b:9d:9e:25:1c:9f:b9:4e:97:e4:2e:b1:99:76:90: d1:cd:e2:e5:7c:80:46:ca:b6:2a:9d:8c:18:4c:d9:2b:0e:2e: b2:1c:74:83:29:4f:11:6a:45:f1:73:38:69:f6:6f:b6:13:f3: d6:8a:88:28:a9:b3:17:7b:d9:59:42:7b:a8:28:ba:c9:68:47: 99:da:2c:42:d5:9a:92:28:e3:7b:33:f5:c1:85:6d:a5:1a:55: e1:79:43:16:11:3d:71:10:66:bf:50:50:82:c2:0d:9f:c8:cd: d4:f4:38:dd:23:8f:78:cf:72:e7:52:f6:14:f0:fb:eb:bc:87: b0:f2:0c:8f:50:8a:b8:32:dc:5a:d0:a9:29:ba:ed:de:7c:49: 83:6a:4c:2e:9c:a5:4d:a8:c3:bb:21:3a:21:28:c9:4a:02:bb: 44:9b:dd:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjYwNDE2MjIyNDE1WhcNMjYwNDIzMjIyNDE1WjAYMRYwFAYD VQQDEw02OWUxNjE4Zi1lZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiqMO8r89Mal8YGim4Eu4NPcywIBdMmvaCqpEE9zxSCgD9tWdNcnBO6qMvBPU GomT8eDp2Gp7PT9SX9XPs1Cm0KhUAjV6TdgfvvODS03rIq7Pb+GUDopyrZdSMLXp nYwzAc2yksOvVFvLMcjT6sZdsEzditkusiNI8Kdsc0kiM2sE1raHmEB/CTKzyCSR 3yQomjArgIGLF2vylGFa3Jn37K4DMhuMTByJF3P6GVXAgWkwYe/XH28R5YefM7+M YNu6uFbWw/mKWlDNmbbueubLM5IhNNVvDvEdY8ITwHuLVWM/0rlcR4+ql2WKBQTz WI+XqIM9yjaBT9di37yOjS+O0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaxow/a G7V592ucqHJefkWgkuz7MB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLxx8ZtajBhgnayBeVNYExCgmasbLQeSmJSLYTaSzg+u6wFTyFfm2s+RSBry H5be4nzxZpnjpL0xqwSa6RbosbiCgaiGSakXFHIXSv/ZZ3IdkOrccCbWiyV+HjVv C52eJRyfuU6X5C6xmXaQ0c3i5XyARsq2Kp2MGEzZKw4ushx0gylPEWpF8XM4afZv thPz1oqIKKmzF3vZWUJ7qCi6yWhHmdosQtWakijjezP1wYVtpRpV4XlDFhE9cRBm v1BQgsINn8jN1PQ43SOPeM9y51L2FPD767yHsPIMj1CKuDLcWtCpKbrt3nxJg2pM LpylTajDuyE6ISjJSgK7RJvdTQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:21:22 2026 by rpki-client