$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json) Hash identifier: IqpVrJlCIJPdVm39ht/6z6V3WixjwXbzugpw9pyxUXQ= Subject key identifier: 23:24:EF:01:69:06:34:1C:2E:CA:CD:DD:86:01:96:8F:BE:BB:AF:9C Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft Manifest number: 02AD Signing time: Fri 17 Apr 2026 01:22:05 +0000 Manifest this update: Fri 17 Apr 2026 01:22:04 +0000 Manifest next update: Fri 24 Apr 2026 01:22:04 +0000 Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: qblGqTogR02AeKUvEfpwh/lRA5NX6txp5/UdvAGkVOI=) 2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Validity Not Before: Apr 17 01:22:04 2026 GMT Not After : Apr 24 01:22:04 2026 GMT Subject: CN=69e18b3d-78fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:f2:67:09:8a:57:ed:bc:de:bf:1a:aa:5b: 30:a6:28:e9:45:b1:6b:a4:0e:46:b8:72:04:6a:2d: 74:59:62:e7:1c:83:2a:80:bb:46:02:1a:cf:47:8f: f2:f6:40:24:63:42:f9:59:90:86:88:5d:f2:61:40: d6:f6:45:18:62:e6:e1:d7:a7:49:87:10:74:e5:a0: f4:cd:c8:b4:9b:09:2c:15:6e:8f:c3:24:55:29:b5: 88:e1:63:70:28:55:9d:d9:41:5c:d2:cc:ab:ee:9b: ba:f1:51:f7:6b:f8:48:7c:08:83:8a:75:0c:75:3b: 74:15:c0:3d:e3:50:88:c9:35:ce:3c:9d:6d:06:06: aa:35:1b:74:23:1f:0d:c0:2c:7b:8d:ba:62:4e:69: b7:b4:da:b9:e3:42:74:61:63:63:90:8d:ac:cb:18: 4f:cf:ee:ab:f0:0c:f7:14:4a:7e:18:1d:f2:86:fb: 6d:26:73:3c:b2:bb:58:c6:41:ae:5d:d9:9c:ee:59: 35:e8:83:2e:cc:7e:fa:9e:b7:38:2c:5f:d5:5d:ad: 80:07:52:bd:db:15:7e:87:77:17:d3:02:8f:24:54: db:0c:7a:e9:63:42:0a:e0:47:92:ed:da:ae:09:af: 07:71:0b:44:e4:fc:e5:ea:18:87:ca:60:e5:5f:7e: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:EF:01:69:06:34:1C:2E:CA:CD:DD:86:01:96:8F:BE:BB:AF:9C X509v3 Authority Key Identifier: keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b3:e8:d6:dc:dd:2d:5c:5f:73:fe:10:cf:a8:71:d0:75:a5: 4f:93:98:01:e3:a8:6e:b7:ca:15:c1:52:2f:01:0e:00:94:eb: ea:ed:18:78:57:34:7b:a1:83:33:e7:fa:30:0d:9f:73:61:71: bb:8e:d8:8f:cc:61:8a:c7:66:67:1d:6a:50:25:77:23:c7:c3: ae:93:eb:53:ed:ed:d9:53:8a:70:ee:16:5b:84:ba:68:55:84: 90:db:e1:98:7c:65:08:4e:52:6f:6c:26:3c:8d:27:7d:21:52: d2:71:66:ab:c7:ed:29:d3:b9:cb:3c:ca:d0:0a:cd:c1:75:5c: 81:10:54:22:5c:28:54:ec:72:b2:0b:c3:b8:ce:54:95:9c:db: b9:9d:21:df:fe:02:58:0d:4f:eb:59:d2:d3:0b:be:23:81:69: 21:4d:bd:c5:1f:80:8a:66:79:91:07:24:7d:fc:0f:50:53:89: 33:10:e4:4e:5d:b3:fc:9d:ea:82:cf:df:4b:6d:97:32:27:72: e6:23:7e:08:7a:96:57:2b:24:12:10:e1:33:90:45:95:27:a3: e1:a4:90:31:77:69:f7:d9:44:35:fa:e8:61:9b:26:40:31:ef: 52:11:91:81:2b:eb:47:bd:c0:4b:ae:ba:f5:a5:a9:64:89:02: 3f:6d:bd:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2 MEZGQ0I4RDkwHhcNMjYwNDE3MDEyMjA0WhcNMjYwNDI0MDEyMjA0WjAYMRYwFAYD VQQDEw02OWUxOGIzZC03OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aPyZwmKV+283r8aqlswpijpRbFrpA5GuHIEai10WWLnHIMqgLtGAhrPR4/y 9kAkY0L5WZCGiF3yYUDW9kUYYubh16dJhxB05aD0zci0mwksFW6PwyRVKbWI4WNw KFWd2UFc0syr7pu68VH3a/hIfAiDinUMdTt0FcA941CIyTXOPJ1tBgaqNRt0Ix8N wCx7jbpiTmm3tNq540J0YWNjkI2syxhPz+6r8Az3FEp+GB3yhvttJnM8srtYxkGu Xdmc7lk16IMuzH76nrc4LF/VXa2AB1K92xV+h3cX0wKPJFTbDHrpY0IK4EeS7dqu Ca8HcQtE5Pzl6hiHymDlX35wNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMk7wFp BjQcLsrN3YYBlo++u6+cMB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1 TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEY2OC82QjYwQkZCQTNBMzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcw RmFjVjhsa0RhaHBnXzh1TmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP7Po1tzdLVxfc/4Qz6hx0HWlT5OYAeOobrfKFcFSLwEOAJTr6u0YeFc0e6GD M+f6MA2fc2Fxu47Yj8xhisdmZx1qUCV3I8fDrpPrU+3t2VOKcO4WW4S6aFWEkNvh mHxlCE5Sb2wmPI0nfSFS0nFmq8ftKdO5yzzK0ArNwXVcgRBUIlwoVOxysgvDuM5U lZzbuZ0h3/4CWA1P61nS0wu+I4FpIU29xR+AimZ5kQckffwPUFOJMxDkTl2z/J3q gs/fS22XMidy5iN+CHqWVyskEhDhM5BFlSej4aSQMXdp99lENfroYZsmQDHvUhGR gSvrR73AS6669aWpZIkCP2294Q== -----END CERTIFICATE-----Generated at Sat Apr 18 06:33:39 2026 by rpki-client