$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: iIrTd37DLHs45NCFHoAsjg3gu9jnFLzzhC+2mzLv4bg= Subject key identifier: E9:14:28:01:46:79:3B:CB:DA:08:38:8F:DA:F5:DF:96:3F:E0:27:98 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 032C Signing time: Fri 17 Apr 2026 00:58:23 +0000 Manifest this update: Fri 17 Apr 2026 00:58:22 +0000 Manifest next update: Fri 24 Apr 2026 00:58:22 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: ON7nEjnRWjV7Tvoyqg0aWyw82zUmRLhCKHgmVdWpRoM=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: 9y7l5xDl3TqzqRPu7NQw/yrhqKT6b0rd979dT8z29Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Apr 17 00:58:22 2026 GMT Not After : Apr 24 00:58:22 2026 GMT Subject: CN=69e185af-502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:fa:26:5e:01:c7:20:81:90:91:ec:14:22: 72:ef:8d:7d:02:0d:98:d7:7a:da:87:39:cf:6c:8f: 29:99:a2:77:08:08:86:a9:89:2e:12:3b:ae:bc:eb: be:da:06:03:75:76:4d:47:e5:23:88:40:ef:5d:8f: ab:e4:6b:05:01:e5:3f:b7:42:a9:8b:17:ce:cc:97: 34:1d:21:0b:a5:94:73:e9:d0:17:50:f9:5e:82:32: a9:47:d6:a9:70:c3:d7:75:5b:a5:f0:45:77:7f:e3: 97:7d:18:3c:a1:57:de:0d:e2:02:50:23:34:d4:40: 7f:fc:8e:44:fd:f9:68:92:28:9b:25:b5:7d:de:bd: 25:9f:03:8c:81:bf:8f:8c:5f:5f:1b:f0:1c:28:83: d3:cf:49:a1:bc:6a:a9:8c:16:90:3a:8a:5b:3e:a3: 85:76:05:1d:50:eb:1f:b5:d0:f1:97:10:b0:5c:82: 96:4e:5a:fc:13:1b:24:c9:72:09:72:dc:e4:5d:98: 4a:90:3c:fe:45:b8:d8:b9:88:01:1b:02:a8:57:4f: f5:8b:17:5b:62:97:f3:c5:b0:15:d9:e6:c7:23:2a: f2:35:05:37:21:96:3b:d7:6e:7e:70:1f:43:64:10: 22:57:d0:18:a3:bf:22:7c:29:d6:46:b6:33:8a:dc: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:14:28:01:46:79:3B:CB:DA:08:38:8F:DA:F5:DF:96:3F:E0:27:98 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d0:f8:c4:36:b8:95:ff:cb:3b:36:f7:cf:6b:97:9d:44:bb: b3:36:3b:16:76:e0:eb:68:23:b8:8b:9e:fe:b3:82:f1:65:4b: b0:16:3c:ea:03:c6:3c:2c:40:7e:97:78:e8:82:2d:cd:2a:b5: 03:1f:fa:98:d3:c4:b0:50:29:57:ee:9b:7b:f1:89:c7:fd:0a: b1:1b:56:a2:e8:59:70:0e:77:c5:5c:ae:15:7e:67:63:39:2c: 9f:59:04:e3:5c:a5:7a:14:5b:3d:6a:38:64:60:4b:62:e6:ac: cb:67:b8:f1:3d:27:49:67:3d:b0:4b:a3:ed:9a:94:12:63:3a: 1e:a7:af:ca:d6:5d:cf:cd:fc:38:a0:44:9c:93:71:20:51:68: 09:e4:bb:00:29:96:8b:f5:38:cc:29:10:05:e9:61:90:30:d5: ca:69:e5:b2:51:a4:55:b8:0d:25:74:65:85:ea:c6:55:3f:32: 45:cf:eb:c9:4f:e4:aa:df:4e:f2:cf:35:ff:67:08:76:9c:46: f3:64:f6:86:12:49:42:c7:86:af:c4:08:a1:97:2c:29:84:e7: 5c:81:39:da:ee:d1:3a:8b:23:52:a5:c4:c8:8a:e8:f2:1f:70: b9:d1:84:d1:53:98:ab:04:98:fa:32:d9:d8:e9:a0:64:f7:54: a3:c6:c7:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjYwNDE3MDA1ODIyWhcNMjYwNDI0MDA1ODIyWjAYMRYwFAYD VQQDEw02OWUxODVhZi01MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznD6Jl4BxyCBkJHsFCJy7419Ag2Y13rahznPbI8pmaJ3CAiGqYkuEjuuvOu+ 2gYDdXZNR+UjiEDvXY+r5GsFAeU/t0KpixfOzJc0HSELpZRz6dAXUPlegjKpR9ap cMPXdVul8EV3f+OXfRg8oVfeDeICUCM01EB//I5E/flokiibJbV93r0lnwOMgb+P jF9fG/AcKIPTz0mhvGqpjBaQOopbPqOFdgUdUOsftdDxlxCwXIKWTlr8ExskyXIJ ctzkXZhKkDz+RbjYuYgBGwKoV0/1ixdbYpfzxbAV2ebHIyryNQU3IZY7125+cB9D ZBAiV9AYo78ifCnWRrYzitwooQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkUKAFG eTvL2gg4j9r135Y/4CeYMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASdD4xDa4lf/LOzb3z2uXnUS7szY7Fnbg62gjuIue/rOC8WVLsBY86gPGPCxA fpd46IItzSq1Ax/6mNPEsFApV+6be/GJx/0KsRtWouhZcA53xVyuFX5nYzksn1kE 41ylehRbPWo4ZGBLYuasy2e48T0nSWc9sEuj7ZqUEmM6HqevytZdz838OKBEnJNx IFFoCeS7ACmWi/U4zCkQBelhkDDVymnlslGkVbgNJXRlherGVT8yRc/ryU/kqt9O 8s81/2cIdpxG82T2hhJJQseGr8QIoZcsKYTnXIE52u7ROosjUqXEyIro8h9wudGE 0VOYqwSY+jLZ2OmgZPdUo8bHlA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:32 2026 by rpki-client