$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json) Hash identifier: /GWvvYlL2ipAVMKEbK1fZZdJToEWmRT1MdDMTNE+B5k= Subject key identifier: 8A:B9:EE:8C:55:46:6E:EE:10:00:9D:CD:0F:26:DA:72:05:EE:93:77 Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft Manifest number: 1C Signing time: Fri 17 Apr 2026 08:40:17 +0000 Manifest this update: Fri 17 Apr 2026 08:40:17 +0000 Manifest next update: Fri 24 Apr 2026 08:40:17 +0000 Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: klx3MOKvXI3Ecm6mM/noL3hDfoMlAZdnRtwZTWbkZzo=) 2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Validity Not Before: Apr 17 08:40:17 2026 GMT Not After : Apr 24 08:40:17 2026 GMT Subject: CN=69e1f1f1-6a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:4b:39:f0:2d:af:b6:b6:86:d4:ae:eb:bd: a2:59:62:a3:aa:d6:ca:00:f0:dc:3b:5f:85:84:02: 00:ec:f7:76:d6:5d:46:bb:c8:f5:37:72:b4:b1:33: 0b:b6:e0:59:f3:b5:60:d6:5b:01:1e:90:d1:36:47: 83:c6:af:0f:0b:62:88:f1:ca:29:c7:b7:3b:f1:fb: d8:16:c1:33:97:91:03:df:24:ee:0f:ab:88:80:8d: 26:39:42:37:71:42:27:17:c4:4e:18:6a:32:62:0f: 90:ea:49:8f:d1:8f:73:20:db:58:bc:98:24:19:bc: 4b:92:15:4d:69:6e:74:50:b8:94:c0:8f:8e:12:75: d1:21:6d:b6:4f:9d:5c:7f:60:0a:4a:6b:80:a7:51: cb:21:5f:8e:7a:6d:58:51:dc:bc:3a:e4:5f:40:e4: 73:57:79:78:8f:e4:97:5b:e3:5f:4a:ef:c5:14:dc: f2:5a:9b:a2:0d:33:63:e5:31:86:5b:91:82:ec:b8: 3e:4b:b6:6c:ff:88:94:c0:d4:4d:a7:5d:86:6e:8e: 72:8e:87:c3:2d:23:ba:79:e4:85:6e:2b:5d:e5:5a: 4f:d4:e4:e5:53:31:5e:0d:ad:9f:63:88:a3:d5:b4: 28:d8:d8:37:86:21:8a:c1:13:90:02:41:26:14:6f: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:EE:8C:55:46:6E:EE:10:00:9D:CD:0F:26:DA:72:05:EE:93:77 X509v3 Authority Key Identifier: keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6a:6d:41:9e:f8:e9:b2:af:b6:ab:61:ef:69:f3:b9:d5:c0: 46:e9:ac:92:63:94:eb:fa:78:fa:8b:63:a4:e0:3d:c3:d4:a9: 24:33:ae:9c:66:6e:c0:f8:93:ae:28:f2:5d:db:95:91:5a:2b: 99:73:e3:86:e5:56:c2:3e:f2:a1:73:fd:5c:fb:7b:7e:7f:82: 55:b9:a7:45:ee:0b:cf:3a:04:51:3d:1b:f2:ec:ae:ee:60:d9: 12:98:27:ed:00:d6:cc:a7:11:1d:2c:3e:9c:46:51:b9:d2:9f: 26:1e:df:70:bd:9f:3d:3b:48:db:70:5a:a7:d1:fb:b6:89:53: 96:1c:80:74:14:67:ae:b5:47:82:c8:ae:50:1f:21:fb:33:a3: ad:a6:3d:1a:a6:14:20:0f:c8:b8:58:65:2c:34:ed:3f:c5:a5: 74:0a:30:3e:d6:ab:5b:41:9d:ad:00:94:26:8e:2e:9e:5a:2b: d5:45:74:97:4a:19:08:c0:82:e7:6f:98:e8:5c:ee:37:6b:3b: 03:ca:07:be:f6:7f:27:d9:d4:a3:ce:8b:48:5c:42:f4:8b:82: e9:96:6e:a4:23:18:5c:25:a7:64:7d:76:e2:a7:ac:c6:23:a4: e6:8b:16:7a:12:19:62:f4:91:00:43:42:55:cc:86:78:2e:c1: 1f:d8:e6:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoQjJFM0M2RjdBOTA0NTRBMjI3NDczN0IwNTJDQkEzNUYx OUY1RDVBMDAeFw0yNjA0MTcwODQwMTdaFw0yNjA0MjQwODQwMTdaMBgxFjAUBgNV BAMTDTY5ZTFmMWYxLTZhOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC1Es58C2vtraG1K7rvaJZYqOq1soA8Nw7X4WEAgDs93bWXUa7yPU3crSxMwu2 4FnztWDWWwEekNE2R4PGrw8LYojxyinHtzvx+9gWwTOXkQPfJO4Pq4iAjSY5Qjdx QicXxE4YajJiD5DqSY/Rj3Mg21i8mCQZvEuSFU1pbnRQuJTAj44SddEhbbZPnVx/ YApKa4CnUcshX456bVhR3Lw65F9A5HNXeXiP5Jdb419K78UU3PJam6INM2PlMYZb kYLsuD5Ltmz/iJTA1E2nXYZujnKOh8MtI7p55IVuK13lWk/U5OVTMV4NrZ9jiKPV tCjY2DeGIYrBE5ACQSYUb2lLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUirnujFVG bu4QAJ3NDybacgXuk3cwHwYDVR0jBBgwFoAUsuPG96kEVKInRzewUsujXxn11aAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzBENzMxREI4MTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJblJ6ZXdVc3VqWHhuMTFh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3VQRzk2a0VWS0luUnpld1VzdWpYeG4xMWFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzBENzMxREI4MTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJ blJ6ZXdVc3VqWHhuMTFhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsam1Bnvjpsq+2q2HvafO51cBG6aySY5Tr+nj6i2Ok4D3D1KkkM66cZm7A+JOu KPJd25WRWiuZc+OG5VbCPvKhc/1c+3t+f4JVuadF7gvPOgRRPRvy7K7uYNkSmCft ANbMpxEdLD6cRlG50p8mHt9wvZ89O0jbcFqn0fu2iVOWHIB0FGeutUeCyK5QHyH7 M6Otpj0aphQgD8i4WGUsNO0/xaV0CjA+1qtbQZ2tAJQmji6eWivVRXSXShkIwILn b5joXO43azsDyge+9n8n2dSjzotIXEL0i4Lplm6kIxhcJadkfXbip6zGI6TmixZ6 Ehli9JEAQ0JVzIZ4LsEf2Obs -----END CERTIFICATE-----Generated at Fri Apr 17 20:23:51 2026 by rpki-client