$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: FH+GSW+5FpHR8dw0117J7EWmwHCRooWRYFu1Bjqq6q4= Subject key identifier: 3B:5D:09:AA:A3:8F:1C:37:FC:72:4E:4A:BD:27:93:7F:62:7A:97:00 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1B0B Signing time: Thu 16 Apr 2026 16:14:01 +0000 Manifest this update: Thu 16 Apr 2026 16:14:01 +0000 Manifest next update: Thu 23 Apr 2026 16:14:01 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: +J4lL2Qd2igZQAaQZmc25WoyyH327A8KlQQpcGNhr+c=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6938 (0x1b1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Apr 16 16:14:01 2026 GMT Not After : Apr 23 16:14:01 2026 GMT Subject: CN=69e10ac9-2838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:10:2f:30:f8:23:cf:03:9d:16:60:5b:0d: 5b:a5:eb:a6:22:89:23:3a:c8:d6:5e:7d:2f:d3:15: 08:9d:0d:32:ef:4a:cd:20:e5:80:24:3c:7c:30:c0: 4a:bb:db:d1:ba:fe:61:f3:f5:57:35:ee:11:f2:41: 1e:41:12:48:b7:9a:9c:aa:60:2a:96:35:29:af:7d: 88:5e:03:fd:9c:4c:a6:53:aa:54:92:b5:ba:02:8f: 1e:da:90:8d:dd:cf:74:18:03:95:fa:f4:31:b6:04: 32:14:d0:4c:fa:93:8f:08:80:f5:9e:bd:d6:5c:00: 9e:16:b1:43:4f:3c:2d:43:02:82:0f:7f:c3:09:3e: de:c0:55:98:e7:46:99:1d:e3:34:41:93:ff:e7:9e: e0:89:42:87:4e:f2:df:04:d8:d3:88:5c:43:25:19: 94:d3:b1:58:53:f7:92:29:42:dc:f5:b4:c9:c1:0c: 86:f7:38:d1:c3:3e:06:0d:fb:88:23:12:6d:ca:81: f2:b0:68:4f:eb:a8:9b:80:3a:22:ab:9e:b4:97:5a: 81:be:a7:fc:92:2a:7a:fa:9d:91:fa:cb:46:1e:3d: 20:da:90:d7:65:65:c2:10:78:d7:12:0c:13:61:2d: e2:8b:34:6a:cd:5b:86:5e:15:db:56:f1:b1:c6:02: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:09:AA:A3:8F:1C:37:FC:72:4E:4A:BD:27:93:7F:62:7A:97:00 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cb:b1:d2:2a:6b:fb:9f:d6:16:f9:b9:eb:18:fb:c2:95:2d: 73:cf:bf:d5:69:76:6b:32:20:c5:10:bc:45:6e:ad:24:bd:4f: 56:82:7f:17:46:7e:be:21:1f:f4:69:ad:e0:1d:93:7a:85:9c: 0a:40:95:02:9b:41:a3:40:45:38:7a:e1:66:d3:50:f0:7e:6b: 91:69:18:eb:8b:33:37:65:0d:5c:4c:13:1b:41:23:de:b5:e2: 89:fb:bc:4a:e2:82:82:02:a7:8e:1c:5a:4b:66:24:8b:55:1b: af:ca:6d:4e:24:5d:20:ed:06:71:a8:77:9f:63:31:be:92:bf: c2:71:ba:4b:20:58:67:f8:43:39:d0:ea:f1:08:00:e8:48:bb: 48:5d:f2:47:f6:75:16:1e:6f:30:0b:2c:de:38:bd:e4:7c:06: bc:bb:c8:64:26:71:07:5f:64:dd:41:31:16:ba:e6:25:6d:d8: 62:09:d2:4d:09:02:7e:a1:69:9d:2d:19:51:44:ab:e8:45:0b: d4:26:1d:e9:f3:af:e9:43:4e:cc:74:3b:84:fb:a4:6c:1e:f2: 15:44:0a:11:ef:ba:2a:fb:8d:43:87:3e:7f:b0:9d:b3:bc:2f: e8:27:fa:c4:89:71:16:75:d9:cc:af:7f:f7:4c:7b:6c:c8:5a: 0c:ad:5e:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjYwNDE2MTYxNDAxWhcNMjYwNDIzMTYxNDAxWjAYMRYwFAYD VQQDEw02OWUxMGFjOS0yODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbwQLzD4I88DnRZgWw1bpeumIokjOsjWXn0v0xUInQ0y70rNIOWAJDx8MMBK u9vRuv5h8/VXNe4R8kEeQRJIt5qcqmAqljUpr32IXgP9nEymU6pUkrW6Ao8e2pCN 3c90GAOV+vQxtgQyFNBM+pOPCID1nr3WXACeFrFDTzwtQwKCD3/DCT7ewFWY50aZ HeM0QZP/557giUKHTvLfBNjTiFxDJRmU07FYU/eSKULc9bTJwQyG9zjRwz4GDfuI IxJtyoHysGhP66ibgDoiq560l1qBvqf8kip6+p2R+stGHj0g2pDXZWXCEHjXEgwT YS3iizRqzVuGXhXbVvGxxgIzDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtdCaqj jxw3/HJOSr0nk39iepcAMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAocux0ipr+5/WFvm56xj7wpUtc8+/1Wl2azIgxRC8RW6tJL1PVoJ/F0Z+viEf 9Gmt4B2TeoWcCkCVAptBo0BFOHrhZtNQ8H5rkWkY64szN2UNXEwTG0Ej3rXiifu8 SuKCggKnjhxaS2Yki1Ubr8ptTiRdIO0Gcah3n2MxvpK/wnG6SyBYZ/hDOdDq8QgA 6Ei7SF3yR/Z1Fh5vMAss3ji95HwGvLvIZCZxB19k3UExFrrmJW3YYgnSTQkCfqFp nS0ZUUSr6EUL1CYd6fOv6UNOzHQ7hPukbB7yFUQKEe+6KvuNQ4c+f7Cds7wv6Cf6 xIlxFnXZzK9/90x7bMhaDK1e3A== -----END CERTIFICATE-----Generated at Fri Apr 17 15:56:39 2026 by rpki-client