$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: eCrBSVCgA+gKCvfF1JcVCIdLgTdrj5RrFJoReAd2xpQ= Subject key identifier: EA:E9:E5:0D:E2:DA:03:88:F5:AF:C7:6E:63:E1:2C:7A:68:B4:68:91 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 10EE Signing time: Thu 16 Apr 2026 17:38:36 +0000 Manifest this update: Thu 16 Apr 2026 17:38:35 +0000 Manifest next update: Thu 23 Apr 2026 17:38:35 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: /MCqEpPkUS89U5g8e5AdL1vMvPiNzx5b/CcC10u4s7c=) 2: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=) 3: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Apr 16 17:38:35 2026 GMT Not After : Apr 23 17:38:35 2026 GMT Subject: CN=69e11e9c-becd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:c1:79:7a:d7:b2:9e:34:c0:80:d9:13:65: f5:3c:3b:b6:d3:57:40:24:8d:8a:3b:28:32:74:8d: a0:2d:e0:74:84:09:51:6d:9b:ab:0b:9b:6f:64:b2: cb:01:2a:85:28:2f:8c:c7:94:15:98:31:9b:b5:96: 2c:6f:d3:57:c1:19:65:40:e1:9b:81:cc:68:77:ba: 33:4d:39:7a:5f:94:69:7a:9d:da:d2:9b:ba:10:e5: 80:7d:af:a4:ad:ef:3f:c5:7a:32:8b:c3:1b:ea:dc: 28:a3:9c:5b:84:0b:57:22:49:6f:f4:e5:1f:ec:9b: 83:9d:68:39:92:15:e1:42:80:4d:8d:0b:e6:53:28: ce:be:ee:44:fd:fb:4c:a5:9b:dc:db:df:ac:30:8f: 74:30:57:f9:fa:ee:2d:f2:6e:cb:f3:ff:4e:3f:50: 29:71:e8:f2:43:4f:e0:db:6b:61:56:df:c7:06:eb: 20:0f:2d:90:2a:52:fc:89:b2:49:12:d9:ed:89:9d: fc:a8:f3:f9:40:18:e3:21:22:fd:e4:93:95:e6:22: 4e:f1:8a:80:7d:c6:22:04:29:c9:bb:9e:9b:c2:f5: c4:af:99:a8:97:8f:0e:bd:73:05:19:d8:8b:73:70: cf:41:0c:9e:72:06:57:b9:7a:6d:15:7e:d2:0a:9b: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:E5:0D:E2:DA:03:88:F5:AF:C7:6E:63:E1:2C:7A:68:B4:68:91 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:12:e4:ef:88:4c:5a:cc:89:2b:de:ab:a2:23:a2:57:89: 2a:48:c6:39:72:29:f2:76:5c:d7:fe:48:2d:b5:84:b7:ef:ff: 4e:8c:03:d0:be:5e:27:de:ed:f0:84:2a:42:7d:45:84:fb:9c: 74:0a:9f:86:f2:49:b8:11:37:60:89:43:8b:a7:c7:a5:03:d3: c5:a3:20:2e:20:28:0a:53:d8:f3:96:3d:f1:48:6b:68:c5:17: 9d:e0:7a:e6:99:30:5f:be:0e:04:01:25:7d:08:11:0f:83:5b: b1:41:08:7a:1c:50:78:69:28:99:f0:43:fd:29:b7:2f:83:10: ca:df:1f:a1:97:0f:61:d6:b6:f2:0d:58:50:d2:46:9d:09:1a: 21:b9:de:63:4e:18:97:60:d1:2a:ee:cf:d3:a8:78:bf:b8:90: 7f:9b:ae:fc:49:d3:d2:11:ab:7b:86:c9:85:54:30:9a:8a:96: 5a:45:82:6b:89:1e:2e:25:5d:56:69:80:37:bc:b7:a7:f3:d2: bf:17:a0:eb:de:c1:b7:b1:04:1d:0b:1a:5c:5d:87:3a:d4:6d: a8:94:e1:32:95:11:59:e5:71:c1:5b:43:87:e9:48:8a:bc:1a: cf:60:cf:33:8a:61:0b:27:b6:9a:a6:b6:95:43:a7:de:98:01: 52:94:14:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjYwNDE2MTczODM1WhcNMjYwNDIzMTczODM1WjAYMRYwFAYD VQQDEw02OWUxMWU5Yy1iZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4nBeXrXsp40wIDZE2X1PDu201dAJI2KOygydI2gLeB0hAlRbZurC5tvZLLL ASqFKC+Mx5QVmDGbtZYsb9NXwRllQOGbgcxod7ozTTl6X5Rpep3a0pu6EOWAfa+k re8/xXoyi8Mb6twoo5xbhAtXIklv9OUf7JuDnWg5khXhQoBNjQvmUyjOvu5E/ftM pZvc29+sMI90MFf5+u4t8m7L8/9OP1ApcejyQ0/g22thVt/HBusgDy2QKlL8ibJJ EtntiZ38qPP5QBjjISL95JOV5iJO8YqAfcYiBCnJu56bwvXEr5mol48OvXMFGdiL c3DPQQyecgZXuXptFX7SCpt9HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrp5Q3i 2gOI9a/HbmPhLHpotGiRMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAChIS5O+ITFrMiSveq6IjoleJKkjGOXIp8nZc1/5ILbWEt+//TowD0L5eJ97t 8IQqQn1FhPucdAqfhvJJuBE3YIlDi6fHpQPTxaMgLiAoClPY85Y98UhraMUXneB6 5pkwX74OBAElfQgRD4NbsUEIehxQeGkomfBD/Sm3L4MQyt8foZcPYda28g1YUNJG nQkaIbneY04Yl2DRKu7P06h4v7iQf5uu/EnT0hGre4bJhVQwmoqWWkWCa4keLiVd VmmAN7y3p/PSvxeg697Bt7EEHQsaXF2HOtRtqJThMpURWeVxwVtDh+lIirwaz2DP M4phCye2mqa2lUOn3pgBUpQUnw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:04:05 2026 by rpki-client