$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: g8XVDxT8LwIi6dkC4ZzcZhjf0R8XdOFQai1+cA4m5UI= Subject key identifier: 24:00:FC:9C:A5:44:DD:DA:E8:82:61:26:E1:54:3B:B8:51:C0:1B:77 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 354C Signing time: Thu 16 Apr 2026 14:16:09 +0000 Manifest this update: Thu 16 Apr 2026 14:16:09 +0000 Manifest next update: Thu 23 Apr 2026 14:16:09 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: e4N9uGKwoIqDp9kN4+uZFDXmRuleUOt9Vm2lVa9aEcw=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Apr 16 14:16:09 2026 GMT Not After : Apr 23 14:16:09 2026 GMT Subject: CN=69e0ef29-3547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:93:92:9a:f0:dc:3c:d0:6a:24:6f:56:d4: 94:6e:f2:cd:85:17:35:1c:32:56:fe:fd:83:b1:a9: 4b:be:02:61:e9:25:8c:5d:f7:6c:98:c8:3c:cd:f3: 65:74:67:b1:5e:5d:d3:97:64:7f:4c:fe:84:02:bd: cc:65:44:80:cc:ca:c0:90:ed:66:7c:4c:9a:b4:53: c5:73:34:fa:63:e6:b9:e4:a9:6b:b9:de:9a:cb:48: 5e:33:dc:be:4e:d8:9c:9a:07:cf:97:27:9b:14:6c: 7a:37:89:85:10:7c:37:f5:d4:1c:e2:40:b0:ac:25: 97:01:7a:8d:23:da:94:c5:58:dd:82:0d:7e:5d:74: 14:93:31:cc:b7:28:dc:04:cf:92:49:d1:91:b1:85: 41:d6:ba:26:33:b3:9f:de:db:69:04:a9:d9:d9:02: ec:84:6e:91:e5:65:89:74:2a:a7:55:d5:28:9f:39: 97:6c:09:76:56:ee:d2:4e:f3:cb:e2:f2:95:6b:06: e0:33:4a:da:7a:e8:1b:90:c4:70:88:3e:84:71:53: c5:f4:04:ec:41:f0:a7:31:27:de:c0:c8:79:f0:99: 99:f0:19:67:88:24:e1:b1:19:95:ee:77:4d:d8:f5: 7e:d7:db:66:dd:c2:6f:62:af:34:c9:f4:91:e7:59: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:FC:9C:A5:44:DD:DA:E8:82:61:26:E1:54:3B:B8:51:C0:1B:77 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e1:ed:c2:87:b5:be:c9:ee:c3:fd:f9:d5:c5:8c:a8:28:18: f4:f1:be:1f:c4:f6:c6:f2:20:d5:eb:08:5e:55:3f:46:79:eb: e3:35:2e:8d:5f:c0:d4:35:2f:37:2e:ce:9e:55:99:46:a0:c0: 1a:05:96:ff:00:3c:df:25:36:36:1b:30:31:8f:c5:0b:e8:d8: b7:03:24:b8:a0:aa:91:d7:dc:8e:8c:d0:55:b7:2f:9e:d2:cf: f3:f3:aa:34:f4:f7:09:20:d1:a9:d4:05:b3:a2:a3:04:fd:a0: dd:08:2f:39:0f:b7:66:c7:a5:a2:7a:d6:37:b0:43:26:35:b5: 4c:c9:3c:7f:31:d1:0f:1d:97:1e:a1:6a:b1:2e:64:f8:fd:c2: 88:1d:f6:d6:30:65:5f:48:f4:f4:72:44:90:88:76:b1:23:9b: 3d:53:43:32:15:ac:d6:1f:b5:12:02:1f:13:37:c6:24:f2:50: d3:86:fa:78:cc:a9:61:e8:8b:d9:bd:fc:a8:d3:a4:47:f6:31: 8d:d8:d5:61:de:4d:11:62:ea:4f:d7:f1:37:4f:91:07:eb:5e: 04:80:75:06:a6:5a:18:7f:fd:31:dd:e8:c3:d4:15:b5:73:aa: 86:d6:b4:4a:1c:0c:04:d9:0d:c0:5e:7c:35:83:16:1c:bd:f8: 7e:58:34:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjYwNDE2MTQxNjA5WhcNMjYwNDIzMTQxNjA5WjAYMRYwFAYD VQQDEw02OWUwZWYyOS0zNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiCTkprw3DzQaiRvVtSUbvLNhRc1HDJW/v2DsalLvgJh6SWMXfdsmMg8zfNl dGexXl3Tl2R/TP6EAr3MZUSAzMrAkO1mfEyatFPFczT6Y+a55Klrud6ay0heM9y+ TticmgfPlyebFGx6N4mFEHw39dQc4kCwrCWXAXqNI9qUxVjdgg1+XXQUkzHMtyjc BM+SSdGRsYVB1romM7Of3ttpBKnZ2QLshG6R5WWJdCqnVdUonzmXbAl2Vu7STvPL 4vKVawbgM0raeugbkMRwiD6EcVPF9ATsQfCnMSfewMh58JmZ8BlniCThsRmV7ndN 2PV+19tm3cJvYq80yfSR51nDYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQA/Jyl RN3a6IJhJuFUO7hRwBt3MB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAouHtwoe1vsnuw/351cWMqCgY9PG+H8T2xvIg1esIXlU/Rnnr4zUujV/A1DUv Ny7OnlWZRqDAGgWW/wA83yU2NhswMY/FC+jYtwMkuKCqkdfcjozQVbcvntLP8/Oq NPT3CSDRqdQFs6KjBP2g3QgvOQ+3ZselonrWN7BDJjW1TMk8fzHRDx2XHqFqsS5k +P3CiB321jBlX0j09HJEkIh2sSObPVNDMhWs1h+1EgIfEzfGJPJQ04b6eMypYeiL 2b38qNOkR/YxjdjVYd5NEWLqT9fxN0+RB+teBIB1BqZaGH/9Md3ow9QVtXOqhta0 ShwMBNkNwF58NYMWHL34flg0CQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:15 2026 by rpki-client