$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft File: gButjLImQd3t5NvTn0vn9NjK6lU.mft (raw, json) Hash identifier: HyAJPN1gqlAI3dDbyqeXH8WC+ONESXn054H9eRu+JKA= Subject key identifier: EA:B1:AF:E7:D6:A8:B9:3B:F2:0F:7E:BE:31:A0:81:4E:70:0F:AF:21 Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft Manifest number: 02B7 Signing time: Fri 17 Apr 2026 01:21:39 +0000 Manifest this update: Fri 17 Apr 2026 01:21:38 +0000 Manifest next update: Fri 24 Apr 2026 01:21:38 +0000 Files and hashes: 1: gButjLImQd3t5NvTn0vn9NjK6lU.crl (hash: WB5exy5OmgHeii5Q+SgYTFvG4E4ak4mogCWzLeJGw+8=) 2: A5D6438038C011ED8D00366CC4F9AE02.roa (hash: IyTEBSq+h6NoQhhHzczMCk59IciuuwHY1nkOvHooqW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Apr 17 01:21:38 2026 GMT Not After : Apr 24 01:21:38 2026 GMT Subject: CN=69e18b23-6811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:ec:07:07:75:45:ef:68:10:70:ed:81:22: c5:67:0d:48:bb:e4:ed:82:48:f0:ac:e9:1f:f4:7b: 0a:ea:eb:94:4f:62:b1:32:12:a3:69:0b:20:bc:3c: 08:bd:16:ea:de:03:17:3d:24:c2:5b:1f:0b:c9:d6: b9:6d:be:8c:8f:59:a6:ad:b0:a0:cf:b4:9a:33:ce: b7:38:19:52:bd:6b:1d:c0:4c:ad:d9:2e:26:fd:82: ea:75:4c:78:5d:0b:26:78:13:16:99:20:88:67:6c: 99:cf:ed:f9:7b:4e:79:ea:27:64:08:b0:e3:eb:c5: be:bc:f7:44:95:fe:89:ac:e9:d2:bc:28:e8:19:53: 1b:09:c2:19:e9:29:80:fc:3f:2f:76:39:e3:23:38: 0c:4a:6a:8b:57:3e:01:6f:92:0c:e6:90:8b:fe:c6: fb:32:84:a1:08:c6:d8:ec:3d:fc:3b:84:57:b6:38: ed:cc:66:38:c6:c6:63:a1:8c:96:7c:be:af:53:d6: 3c:c1:9d:d5:37:1a:1c:e4:dd:3f:51:ab:76:c2:86: 69:ea:c9:9d:e7:d6:dc:fc:4e:ba:c9:22:bc:0f:1e: d6:41:62:f0:4b:e7:88:04:43:6a:06:bc:6a:7b:d9: 3e:ab:77:cb:72:71:b3:c8:e0:84:9d:ae:60:4d:9a: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B1:AF:E7:D6:A8:B9:3B:F2:0F:7E:BE:31:A0:81:4E:70:0F:AF:21 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a5:4b:67:bf:ca:21:28:78:81:20:90:c5:7d:db:15:53:ed: 62:f6:29:58:61:47:6d:91:b1:cf:2c:cd:48:c9:93:6b:09:30: 88:39:57:66:04:1e:a6:67:ee:5b:e2:73:6c:25:f5:0e:f2:c5: 16:ae:43:61:f8:62:81:c7:15:8d:8f:78:bf:58:85:35:aa:c8: 82:2c:3e:02:e5:38:5a:0f:36:f1:11:80:dd:bd:fc:70:f6:b6: 5e:50:79:11:cc:0a:f6:3c:ba:dd:48:4d:89:95:00:cc:f1:ba: cd:d3:34:a9:4a:72:b8:cb:95:c0:03:ad:98:c3:2e:65:95:67: 00:b3:f9:ea:c4:f8:59:30:52:33:f9:2c:76:90:26:b9:7f:8f: c0:df:82:2a:11:bf:9c:89:64:50:62:8f:2c:3f:01:a3:18:51: 90:39:ce:4e:ac:a6:62:e3:8a:34:30:6f:c8:a2:43:cc:7a:91: da:6d:9e:0d:fa:82:97:45:65:e6:cf:77:f0:6e:a2:97:80:bc: f8:b6:ab:ad:8a:cc:7f:6c:2f:0b:8f:cd:49:37:1b:eb:af:43: cc:56:8f:5e:b2:71:62:f1:1f:65:55:dd:8a:c8:c6:b3:05:8f: b1:28:7f:e5:85:10:f4:d9:b6:2a:26:6d:44:93:63:12:0e:58: 91:c1:a3:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjYwNDE3MDEyMTM4WhcNMjYwNDI0MDEyMTM4WjAYMRYwFAYD VQQDEw02OWUxOGIyMy02ODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzHsBwd1Re9oEHDtgSLFZw1Iu+TtgkjwrOkf9HsK6uuUT2KxMhKjaQsgvDwI vRbq3gMXPSTCWx8Lyda5bb6Mj1mmrbCgz7SaM863OBlSvWsdwEyt2S4m/YLqdUx4 XQsmeBMWmSCIZ2yZz+35e0556idkCLDj68W+vPdElf6JrOnSvCjoGVMbCcIZ6SmA /D8vdjnjIzgMSmqLVz4Bb5IM5pCL/sb7MoShCMbY7D38O4RXtjjtzGY4xsZjoYyW fL6vU9Y8wZ3VNxoc5N0/Uat2woZp6smd59bc/E66ySK8Dx7WQWLwS+eIBENqBrxq e9k+q3fLcnGzyOCEna5gTZpRawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqxr+fW qLk78g9+vjGggU5wD68hMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjg0OS9DNDJBNEFEODM4QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFk M3Q1TnZUbjB2bjlOaks2bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaVLZ7/KISh4gSCQxX3bFVPtYvYpWGFHbZGxzyzNSMmTawkwiDlXZgQepmfu W+JzbCX1DvLFFq5DYfhigccVjY94v1iFNarIgiw+AuU4Wg828RGA3b38cPa2XlB5 EcwK9jy63UhNiZUAzPG6zdM0qUpyuMuVwAOtmMMuZZVnALP56sT4WTBSM/ksdpAm uX+PwN+CKhG/nIlkUGKPLD8BoxhRkDnOTqymYuOKNDBvyKJDzHqR2m2eDfqCl0Vl 5s938G6il4C8+LarrYrMf2wvC4/NSTcb669DzFaPXrJxYvEfZVXdisjGswWPsSh/ 5YUQ9Nm2KiZtRJNjEg5YkcGjNg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:37:15 2026 by rpki-client