$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: ICEcsntQ1Jp7ZJo+tI5oHPwTZXYa+qCQ1+Jv451rw/Q= Subject key identifier: 37:A3:37:9D:C6:AE:84:EE:4A:46:13:69:18:46:C0:01:D8:C2:44:B6 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0DB4 Signing time: Thu 16 Apr 2026 17:50:14 +0000 Manifest this update: Thu 16 Apr 2026 17:50:13 +0000 Manifest next update: Thu 23 Apr 2026 17:50:13 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: SS1j1bZy8wSVFro2yPMscqVmoF/j835tF6umYlqp1RA=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: wM4jTVSXdRa49wS3QCPAkcV9PaMIwDAgOcfWtEI5Jsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Apr 16 17:50:13 2026 GMT Not After : Apr 23 17:50:13 2026 GMT Subject: CN=69e12156-4436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:9c:7f:80:19:09:f2:bd:3d:70:68:bd:74: ef:95:a2:ff:61:21:a1:03:68:90:6b:e2:3f:4f:15: a9:17:51:84:41:46:9b:14:7b:99:9f:63:21:5a:1d: 06:9d:b6:d2:83:dc:5d:54:3b:c7:4a:59:f7:aa:ae: a0:fe:1a:ec:46:95:de:e6:4d:59:5a:99:ba:7c:6e: d6:06:22:0c:56:e8:78:7f:b6:72:26:58:a3:64:3d: ab:e2:79:d5:42:5d:73:f7:6a:70:de:91:15:29:c0: aa:3d:51:10:e9:68:02:4d:83:d8:d8:31:51:b0:29: ee:07:67:48:17:fc:5f:69:49:22:7f:3a:37:7f:b2: 12:54:4e:a4:0d:21:29:4c:a5:20:2a:c4:fc:ee:31: d7:f2:4d:bb:ac:fe:a8:c8:a7:bd:55:f1:c3:b0:66: 3d:3f:0e:5c:cb:68:1c:66:2b:b7:44:06:73:6b:5d: c0:40:62:30:2a:35:0d:85:e8:54:5a:69:cb:99:ad: 6d:4c:b4:94:e3:f5:b6:4e:37:e8:1b:9c:3b:45:87: 3d:c2:cf:6f:60:15:00:ce:c9:4e:f1:64:44:9a:fb: 83:87:fd:9e:53:85:34:9e:f2:7e:32:5f:47:3e:3b: 22:b2:92:29:fa:58:86:56:41:02:0f:78:db:b1:b2: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A3:37:9D:C6:AE:84:EE:4A:46:13:69:18:46:C0:01:D8:C2:44:B6 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ca:0f:2c:dc:d9:db:b2:81:e6:6f:96:b8:7d:fa:39:90:46: af:87:6c:e2:96:a0:a0:c9:bf:6e:1b:57:8e:0e:73:7b:84:a9: d2:d5:02:5e:3a:23:97:0c:41:67:f8:17:51:0e:56:d9:d6:42: 78:07:c4:7c:85:25:34:e0:e4:6f:ed:79:a3:ec:76:2b:6e:a4: 53:b9:2d:89:a8:da:97:cc:98:fa:0f:1a:31:7a:6b:3f:34:5c: 45:01:cd:60:77:54:1c:53:46:65:ba:b2:81:22:66:13:ab:1f: fa:e9:6f:28:d9:d5:cd:e9:8e:c2:94:63:b5:23:d8:a3:be:ff: 84:b0:8a:3b:82:d3:5f:01:97:22:77:83:29:05:0a:77:4f:94: 90:20:14:82:57:2d:1c:a8:bd:9e:52:60:7c:0e:a9:14:74:cc: d2:5b:4e:d5:81:13:db:52:54:89:19:5b:35:e3:ff:50:77:56: 0d:a7:5c:32:3d:43:8e:2e:ed:04:3f:bb:1f:23:95:20:38:6e: d3:7b:c8:4c:cf:bb:61:a6:46:69:d0:f4:e7:46:a9:95:f8:79: 9d:b8:8d:6c:92:cd:2f:2b:e5:11:25:02:b8:cb:57:e1:29:f4: b4:2a:c5:89:a7:18:52:a8:69:08:9f:85:b9:04:db:9f:2a:52: d5:3f:d8:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjYwNDE2MTc1MDEzWhcNMjYwNDIzMTc1MDEzWjAYMRYwFAYD VQQDEw02OWUxMjE1Ni00NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f6cf4AZCfK9PXBovXTvlaL/YSGhA2iQa+I/TxWpF1GEQUabFHuZn2MhWh0G nbbSg9xdVDvHSln3qq6g/hrsRpXe5k1ZWpm6fG7WBiIMVuh4f7ZyJlijZD2r4nnV Ql1z92pw3pEVKcCqPVEQ6WgCTYPY2DFRsCnuB2dIF/xfaUkifzo3f7ISVE6kDSEp TKUgKsT87jHX8k27rP6oyKe9VfHDsGY9Pw5cy2gcZiu3RAZza13AQGIwKjUNhehU WmnLma1tTLSU4/W2TjfoG5w7RYc9ws9vYBUAzslO8WREmvuDh/2eU4U0nvJ+Ml9H PjsispIp+liGVkECD3jbsbLdiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDejN53G roTuSkYTaRhGwAHYwkS2MB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC8oPLNzZ27KB5m+WuH36OZBGr4ds4pagoMm/bhtXjg5ze4Sp0tUCXjojlwxB Z/gXUQ5W2dZCeAfEfIUlNODkb+15o+x2K26kU7ktiajal8yY+g8aMXprPzRcRQHN YHdUHFNGZbqygSJmE6sf+ulvKNnVzemOwpRjtSPYo77/hLCKO4LTXwGXIneDKQUK d0+UkCAUglctHKi9nlJgfA6pFHTM0ltO1YET21JUiRlbNeP/UHdWDadcMj1Dji7t BD+7HyOVIDhu03vITM+7YaZGadD050aplfh5nbiNbJLNLyvlESUCuMtX4Sn0tCrF iacYUqhpCJ+FuQTbnypS1T/Ykw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:45:28 2026 by rpki-client