$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: KaGByah5yn6rMQgWo1ZZH+YkKawfpM8PeV99FXZ+vL4= Subject key identifier: BE:3B:CC:18:00:9E:0A:4F:F0:D5:1E:97:55:3F:04:FA:15:31:81:30 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0CEC Signing time: Thu 16 Apr 2026 18:12:19 +0000 Manifest this update: Thu 16 Apr 2026 18:12:19 +0000 Manifest next update: Thu 23 Apr 2026 18:12:19 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: p93xePko2kMFmRaYUTdFUAJGc+vNHeZO49m1lzHV9aE=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 0Bzx3cTQetOlK87DOybR5kJ5yU0elH44slx+HVrYHM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Apr 16 18:12:19 2026 GMT Not After : Apr 23 18:12:19 2026 GMT Subject: CN=69e12683-2fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:b7:cc:82:8b:05:11:08:a6:0f:fd:68:40: 61:71:bd:7b:d7:be:6a:72:b4:47:fa:e5:a0:20:d0: 85:30:aa:76:90:f8:02:e4:bb:7f:01:1c:90:08:7c: 90:f5:6f:94:44:1a:59:07:93:e6:d3:d6:3c:b2:af: 67:45:b2:f0:2b:ac:7c:f2:0e:6a:22:4a:f8:26:0d: 93:2c:b6:c4:ef:fe:35:0e:e5:85:01:5f:a3:73:52: c6:d0:b1:3b:4f:68:e0:e6:20:a0:60:bb:03:95:a6: fe:ea:fc:4d:57:8b:94:ae:0f:81:ff:b3:48:9a:66: 2a:aa:7e:1a:4f:bf:82:08:2c:57:ff:8e:34:7d:f6: 20:34:69:cc:bf:8a:f6:79:b0:62:4b:9c:8a:98:f1: c9:d7:b3:db:f9:c3:e3:4a:2f:91:48:07:67:52:86: e0:d4:8e:c6:1d:a7:49:47:aa:a8:fe:5e:4c:a9:65: e2:7e:4f:ae:69:d3:fb:80:ad:64:43:45:7b:fc:70: 16:59:fd:3f:11:1f:a2:cf:25:43:74:2d:cc:55:72: 44:ec:a1:4b:a2:0f:79:d2:9f:40:d9:fe:50:d5:57: b9:da:96:c7:28:73:1d:7f:2e:04:bc:1f:2c:46:4e: 65:0b:a5:6c:bc:3f:f4:2f:90:8e:4f:75:3c:30:7b: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:CC:18:00:9E:0A:4F:F0:D5:1E:97:55:3F:04:FA:15:31:81:30 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:72:9a:87:4b:63:0c:38:8d:40:b2:e6:7a:34:50:07:f3:ea: 71:06:a2:0b:a3:98:4d:30:92:d5:f2:f4:4f:50:37:6f:7b:e7: 49:f5:51:ef:6a:2b:19:5c:c0:6e:0e:32:9b:68:d3:91:89:72: e7:e6:2c:a5:60:60:c3:e7:e4:20:7a:b4:9e:4e:e2:ae:e5:51: 19:0b:21:25:5b:49:db:dd:45:4f:ec:73:6e:d4:38:3d:8d:c0: aa:4f:db:4a:59:50:17:f2:fa:21:11:23:4e:5f:57:c7:bb:d5: b6:e6:5b:3c:78:39:25:47:f3:17:63:29:cb:3c:2f:06:49:cf: 32:bf:f8:42:3e:c1:02:ce:e1:50:e0:b3:f6:f7:9f:20:8b:25: 90:dc:fd:96:4a:ec:e4:54:2c:bf:c8:21:72:21:2d:69:8f:88: 51:ab:ff:b8:85:1d:42:3c:ed:ab:16:09:94:50:98:cd:5f:7d: b8:41:4f:a9:0f:d2:fa:6f:a8:95:76:9b:77:2e:b2:ee:e7:e7: 4f:03:bb:29:cb:84:56:59:7c:56:c6:45:08:79:57:08:7c:5e: 6f:9f:bf:a5:04:c9:cb:8e:a1:ef:7c:c2:46:cf:65:c0:3a:ee: 72:ac:dd:7d:fa:e2:41:0e:57:27:3b:a7:71:b6:54:ed:8c:c9: 2c:91:44:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjYwNDE2MTgxMjE5WhcNMjYwNDIzMTgxMjE5WjAYMRYwFAYD VQQDEw02OWUxMjY4My0yZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArai3zIKLBREIpg/9aEBhcb17175qcrRH+uWgINCFMKp2kPgC5Lt/ARyQCHyQ 9W+URBpZB5Pm09Y8sq9nRbLwK6x88g5qIkr4Jg2TLLbE7/41DuWFAV+jc1LG0LE7 T2jg5iCgYLsDlab+6vxNV4uUrg+B/7NImmYqqn4aT7+CCCxX/440ffYgNGnMv4r2 ebBiS5yKmPHJ17Pb+cPjSi+RSAdnUobg1I7GHadJR6qo/l5MqWXifk+uadP7gK1k Q0V7/HAWWf0/ER+izyVDdC3MVXJE7KFLog950p9A2f5Q1Ve52pbHKHMdfy4EvB8s Rk5lC6VsvD/0L5COT3U8MHsEqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL47zBgA ngpP8NUel1U/BPoVMYEwMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiXKah0tjDDiNQLLmejRQB/PqcQaiC6OYTTCS1fL0T1A3b3vnSfVR72orGVzA bg4ym2jTkYly5+YspWBgw+fkIHq0nk7iruVRGQshJVtJ291FT+xzbtQ4PY3Aqk/b SllQF/L6IREjTl9Xx7vVtuZbPHg5JUfzF2MpyzwvBknPMr/4Qj7BAs7hUOCz9vef IIslkNz9lkrs5FQsv8ghciEtaY+IUav/uIUdQjztqxYJlFCYzV99uEFPqQ/S+m+o lXabdy6y7ufnTwO7KcuEVll8VsZFCHlXCHxeb5+/pQTJy46h73zCRs9lwDrucqzd ffriQQ5XJzuncbZU7YzJLJFEBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:37:04 2026 by rpki-client