$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: DhrATwmiyYyKTK4g9CMfNW3qwY32Vpk5LkvxD0gKHHk= Subject key identifier: E1:DE:8F:3C:00:64:85:70:FF:84:16:8E:4C:D4:67:4A:CE:83:9B:0A Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 353D Signing time: Thu 16 Apr 2026 15:14:40 +0000 Manifest this update: Thu 16 Apr 2026 15:14:40 +0000 Manifest next update: Thu 23 Apr 2026 15:14:40 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: Vh/dwE52ZheqioNMYcFqycNLBgx38fePb6Z93xP1NIg=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13654 (0x3556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Apr 16 15:14:40 2026 GMT Not After : Apr 23 15:14:40 2026 GMT Subject: CN=69e0fce0-622d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:f5:ec:72:dc:3d:d9:ee:03:71:36:64:b4: d7:46:af:ed:c1:1f:b0:12:bd:7d:e8:f3:46:75:bf: 76:ee:4d:fb:2c:55:97:cf:cd:87:1b:cc:d0:88:3c: 66:e3:67:c9:a8:35:88:7f:80:27:e2:0e:bd:da:ab: 12:74:7e:36:17:94:3a:67:e5:eb:4d:d9:cf:71:ad: 92:7c:96:7d:a6:64:e2:fb:29:0d:5a:33:ae:5c:7a: c1:0e:f1:4d:7f:75:98:b0:34:df:ac:55:96:fe:9e: 48:b4:23:e9:34:6d:5f:68:63:b8:30:bf:da:5e:9d: ad:4b:9c:e4:ba:90:07:b9:52:82:92:48:87:7b:d1: e7:bb:97:a5:f6:56:ac:b3:3b:82:27:be:18:5a:cf: 6c:a4:90:bb:32:eb:33:a0:81:36:51:54:3d:b4:0b: 26:ed:41:e7:4d:93:89:3d:63:d3:01:a1:6e:82:fc: 0b:7e:fb:64:d5:50:c9:0b:bf:4d:a8:b4:f2:bc:79: 8e:33:75:a6:17:d2:00:6f:8d:46:16:0b:e2:c3:90: f7:3d:bd:83:df:c7:db:8b:10:ef:3e:2d:d7:82:49: 07:aa:8a:4a:6e:a5:cc:42:3a:7f:59:60:98:7a:64: 4c:73:d2:58:8f:80:91:8b:65:ee:1e:5f:dc:d0:c6: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:8F:3C:00:64:85:70:FF:84:16:8E:4C:D4:67:4A:CE:83:9B:0A X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a9:3f:51:c8:4e:30:ac:e6:f9:8f:3a:df:0b:f0:93:ea:b6: d4:f3:39:2c:69:f1:ec:a0:a0:d5:f0:58:71:07:69:1d:53:00: 4d:8d:36:f1:b3:a8:cd:ff:c3:ad:30:f1:ec:28:49:d7:e7:cc: 3a:29:fc:c6:97:bc:6b:b8:86:64:f0:e2:6e:5a:2b:e1:d4:fd: fd:b8:73:53:98:d9:61:73:80:98:54:ae:82:79:01:f0:0c:cc: d7:63:34:c5:87:67:40:9f:ba:78:a0:78:23:7b:b3:9a:36:36: ac:bf:56:96:14:45:f8:83:b6:4a:da:94:4c:32:a1:7b:0c:d3: 9c:14:34:65:16:7a:22:cb:3a:a4:b5:1d:3c:a0:40:91:80:38: fd:ba:f9:fe:b5:90:96:c3:8f:c0:50:c1:c6:e1:1e:ee:8a:8a: 9d:2d:7c:cd:b5:38:d6:e5:37:73:1c:40:19:f5:7d:72:b2:84: 08:e0:83:ea:d6:55:cc:de:96:82:4a:79:45:7c:47:6d:30:10: c3:65:ed:fc:a4:20:c6:c1:f2:f8:22:9d:38:e7:04:1a:5d:75: aa:66:af:51:47:51:79:a3:fd:24:d7:b0:55:63:42:54:2d:ea: f4:55:f2:4d:a7:59:1a:71:6f:63:da:49:4a:8f:cb:33:0d:84: 5c:7b:64:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYwNDE2MTUxNDQwWhcNMjYwNDIzMTUxNDQwWjAYMRYwFAYD VQQDEw02OWUwZmNlMC02MjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolD17HLcPdnuA3E2ZLTXRq/twR+wEr196PNGdb927k37LFWXz82HG8zQiDxm 42fJqDWIf4An4g692qsSdH42F5Q6Z+XrTdnPca2SfJZ9pmTi+ykNWjOuXHrBDvFN f3WYsDTfrFWW/p5ItCPpNG1faGO4ML/aXp2tS5zkupAHuVKCkkiHe9Hnu5el9las szuCJ74YWs9spJC7MuszoIE2UVQ9tAsm7UHnTZOJPWPTAaFugvwLfvtk1VDJC79N qLTyvHmOM3WmF9IAb41GFgviw5D3Pb2D38fbixDvPi3XgkkHqopKbqXMQjp/WWCY emRMc9JYj4CRi2XuHl/c0MZwMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHejzwA ZIVw/4QWjkzUZ0rOg5sKMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS6k/UchOMKzm+Y863wvwk+q21PM5LGnx7KCg1fBYcQdpHVMATY028bOozf/D rTDx7ChJ1+fMOin8xpe8a7iGZPDiblor4dT9/bhzU5jZYXOAmFSugnkB8AzM12M0 xYdnQJ+6eKB4I3uzmjY2rL9WlhRF+IO2StqUTDKhewzTnBQ0ZRZ6Iss6pLUdPKBA kYA4/br5/rWQlsOPwFDBxuEe7oqKnS18zbU41uU3cxxAGfV9crKECOCD6tZVzN6W gkp5RXxHbTAQw2Xt/KQgxsHy+CKdOOcEGl11qmavUUdReaP9JNewVWNCVC3q9FXy TadZGnFvY9pJSo/LMw2EXHtk7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 07:34:17 2026 by rpki-client