$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft File: pNgA2xjHwseXEbNfyLfSF9x9TG4.mft (raw, json) Hash identifier: ZAXBEqBICARdTTtj0p3fUO8kwKueBm9G9T/lYkzKdik= Subject key identifier: C5:A7:7B:BD:46:16:8E:0B:B5:7A:72:44:66:CF:61:B7:B7:57:4B:41 Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft Manifest number: 0D Signing time: Sun 19 Apr 2026 08:42:28 +0000 Manifest this update: Sun 19 Apr 2026 08:42:27 +0000 Manifest next update: Sun 26 Apr 2026 08:42:27 +0000 Files and hashes: 1: pNgA2xjHwseXEbNfyLfSF9x9TG4.crl (hash: Szp+/o5/MEICgRnZVDr5+0rEm9hq2pxLeu25sRECVFo=) 2: B7E7EF7C2C2511F1AC709C159C833773.roa (hash: 22lcIVcWJJNQeedflM7ajUp8JwhpkgUi0gHeb905Grk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Validity Not Before: Apr 19 08:42:27 2026 GMT Not After : Apr 26 08:42:27 2026 GMT Subject: CN=69e49573-686b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:a3:a0:7e:75:3b:81:27:2a:2b:4b:a4:44: 90:a9:85:b8:de:79:0c:17:5e:6a:aa:60:46:01:09: b0:06:99:cb:68:14:86:4b:1d:4a:69:a5:ea:d6:92: 11:7b:2b:3c:e7:a9:a2:43:c9:6f:bc:20:48:47:8b: ee:81:11:7b:56:67:0f:ab:41:16:f1:4c:f9:23:e2: 27:5e:5f:99:90:82:ed:6d:7d:6e:ef:a7:71:5e:56: d3:2b:ba:00:4d:74:f8:a2:cc:1f:18:f4:b3:58:55: 38:56:cd:d7:3e:48:df:ac:9a:92:11:80:e2:1e:de: 6d:19:41:ad:a3:a8:72:fd:01:cd:41:67:b1:d4:39: 8d:18:5a:fa:2a:47:16:c3:e2:70:65:ac:b4:44:12: b3:20:b9:a1:62:08:e5:d5:8a:2e:d3:11:23:bb:9a: 8c:3f:04:50:10:8d:e0:20:7b:1d:33:60:fe:a1:41: b1:7a:ab:e6:4f:8a:f6:d9:e9:ca:98:fc:30:1b:7f: 2f:cd:ce:49:53:03:ff:d5:f9:e2:70:f1:6d:b4:c5: ab:19:32:3f:d6:00:db:49:4c:bd:ea:8b:7b:e1:9f: d4:bb:eb:e3:23:a5:0a:98:3b:a4:43:77:d6:a4:d5: 1c:41:66:f8:72:68:5e:74:cb:d5:11:e2:50:61:a4: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:7B:BD:46:16:8E:0B:B5:7A:72:44:66:CF:61:B7:B7:57:4B:41 X509v3 Authority Key Identifier: keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:45:7a:c7:42:1c:36:aa:16:00:d9:7c:f5:53:e1:c7:fb:d0: c8:ee:93:ec:bf:2a:1d:e5:f8:46:75:60:06:cb:61:2b:9b:26: e0:33:1a:9f:34:6f:22:4c:b0:e5:f5:ac:34:1e:89:74:b2:82: 18:a8:98:c2:19:45:0c:e9:b6:be:06:a8:e7:c6:c5:b5:0d:1b: 21:c5:c8:cb:cf:7f:53:dd:05:d9:9c:72:7d:d3:b2:89:e5:e0: bd:c2:df:79:65:a6:c0:52:0e:a8:c6:a2:3c:47:d1:56:42:1d: 10:51:74:f6:c9:6b:12:3a:70:d5:9b:3e:13:22:a8:b2:7d:52: 53:ca:c1:0c:fb:50:9b:24:d9:26:ac:dd:95:81:cb:f7:db:72: 1b:2f:94:3c:02:13:3f:2a:9b:ca:92:bc:36:5b:c8:fb:75:eb: 39:80:f3:d8:e5:be:8b:db:c0:07:c8:d7:91:d0:89:89:10:9c: f5:72:84:59:23:f1:10:d2:d3:d6:37:5f:89:ff:d8:91:26:61: 17:4a:f2:a0:1f:d7:66:a4:a0:6c:9c:cd:0f:57:c5:6f:b3:3b: a1:26:1a:97:a8:79:64:2a:af:04:03:ce:8a:66:8a:e8:5e:eb: 11:19:3a:ef:dc:85:b4:4a:52:ad:ed:f9:c8:24:07:e0:62:b3: 29:4b:e2:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUYwMDExMC8GA1UEBRMoQTREODAwREIxOEM3QzJDNzk3MTFCMzVGQzhCN0QyMTdE QzdENEM2RTAeFw0yNjA0MTkwODQyMjdaFw0yNjA0MjYwODQyMjdaMBgxFjAUBgNV BAMTDTY5ZTQ5NTczLTY4NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcCqOgfnU7gScqK0ukRJCphbjeeQwXXmqqYEYBCbAGmctoFIZLHUppperWkhF7 KzznqaJDyW+8IEhHi+6BEXtWZw+rQRbxTPkj4ideX5mQgu1tfW7vp3FeVtMrugBN dPiizB8Y9LNYVThWzdc+SN+smpIRgOIe3m0ZQa2jqHL9Ac1BZ7HUOY0YWvoqRxbD 4nBlrLREErMguaFiCOXVii7TESO7mow/BFAQjeAgex0zYP6hQbF6q+ZPivbZ6cqY /DAbfy/NzklTA//V+eJw8W20xasZMj/WANtJTL3qi3vhn9S76+MjpQqYO6RDd9ak 1RxBZvhyaF50y9UR4lBhpJkfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxad7vUYW jgu1enJEZs9ht7dXS0EwHwYDVR0jBBgwFoAUpNgA2xjHwseXEbNfyLfSF9x9TG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RjAwLzBCQjFFNEIwMkMy NTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3NlWEViTmZ5TGZTRjl4OVRH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE5nQTJ4akh3c2VYRWJOZnlMZlNGOXg5VEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RjAwLzBCQjFFNEIwMkMyNTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3Nl WEViTmZ5TGZTRjl4OVRHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvRXrHQhw2qhYA2Xz1U+HH+9DI7pPsvyod5fhGdWAGy2ErmybgMxqfNG8iTLDl 9aw0Hol0soIYqJjCGUUM6ba+BqjnxsW1DRshxcjLz39T3QXZnHJ907KJ5eC9wt95 ZabAUg6oxqI8R9FWQh0QUXT2yWsSOnDVmz4TIqiyfVJTysEM+1CbJNkmrN2Vgcv3 23IbL5Q8AhM/KpvKkrw2W8j7des5gPPY5b6L28AHyNeR0ImJEJz1coRZI/EQ0tPW N1+J/9iRJmEXSvKgH9dmpKBsnM0PV8VvszuhJhqXqHlkKq8EA86KZoroXusRGTrv 3IW0SlKt7fnIJAfgYrMpS+I/ -----END CERTIFICATE-----Generated at Sun Apr 19 10:28:55 2026 by rpki-client