$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: sdhKIi6/C0t66W7P7w47qGqmkrd/wIquIGcNmAmTd2E= Subject key identifier: 65:19:BF:70:19:98:A5:0D:10:88:AB:75:1C:D4:BB:61:D6:9F:F2:39 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0AB4 Signing time: Thu 16 Apr 2026 20:11:01 +0000 Manifest this update: Thu 16 Apr 2026 20:11:01 +0000 Manifest next update: Thu 23 Apr 2026 20:11:01 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: D3Knts3alB+iifyx10d7+uNp1BUluDVnYfJgmtWrjGI=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Apr 16 20:11:01 2026 GMT Not After : Apr 23 20:11:01 2026 GMT Subject: CN=69e14255-c73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:19:6f:41:cf:e8:b6:a9:f3:98:3a:f4:a1: f3:ca:fc:3e:68:50:7c:0d:e8:1c:7e:fb:7d:2a:a6: b3:c9:c6:0d:f1:90:f9:33:a4:5b:a4:08:de:30:4f: 85:6f:8d:1f:41:34:aa:ef:d7:e0:78:cf:ff:bd:a3: 07:eb:84:df:47:f1:e0:bf:bb:a9:9e:cd:9a:4c:27: f7:a5:a6:70:a4:d0:fa:79:3a:42:e2:70:6b:a6:ac: 42:7c:c2:3d:2a:f5:e4:c0:4a:61:1a:89:a3:59:2b: 84:92:61:51:9d:67:54:4a:a3:38:be:df:82:83:87: 52:73:56:30:08:be:59:ef:c6:a4:f9:1c:6e:0d:00: bb:ff:7d:85:61:d3:39:4e:1e:44:3f:ce:f8:4c:7c: eb:54:bb:26:ff:71:a7:4a:42:8a:99:91:87:22:67: dd:41:51:9f:13:52:cb:6a:29:74:5a:09:05:48:c4: 2c:d5:f9:b2:13:e1:01:83:78:24:22:9e:f8:f2:6a: e2:78:43:54:cd:6a:c8:c1:36:c9:da:5f:84:02:90: dd:de:32:3b:b2:73:dd:f6:e0:ac:eb:ca:d6:52:99: e3:6c:39:bd:d8:ef:2b:55:25:c7:4d:73:31:48:2d: b3:58:63:65:2f:a6:a2:fc:e9:13:76:d0:a8:1a:6a: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:19:BF:70:19:98:A5:0D:10:88:AB:75:1C:D4:BB:61:D6:9F:F2:39 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:02:2b:38:db:13:db:f5:ed:10:c2:35:86:4a:3d:01:2a:02: ba:2e:9a:2d:3b:fc:46:66:37:22:df:59:32:af:13:50:84:4f: b4:69:83:18:44:2e:34:54:0d:46:e4:1b:c3:88:85:07:fc:10: 9c:4b:c1:bb:43:41:14:df:1f:2b:83:75:41:b4:c2:80:2a:59: e6:b5:93:d0:b5:70:c9:36:42:5f:f1:7d:56:a6:9f:f3:4b:fd: 99:bd:ab:b4:b5:c4:7e:27:d1:c7:3f:51:18:6c:4d:c7:40:d2: 06:5d:5e:10:82:8b:0c:24:d9:02:6f:46:f3:d5:45:3a:ab:f3: 46:a3:8a:48:33:50:c3:d9:2a:b4:70:82:7b:14:ac:5e:85:01: 95:f6:58:09:1e:ae:d3:3b:87:1f:9c:4b:f4:b9:dd:fc:c3:ff: f2:ba:14:6e:d2:37:96:8e:f7:9a:b3:1c:74:8c:a0:92:b5:a7: 65:0d:ae:7e:92:0c:c2:97:7f:cb:68:e8:db:72:ee:4a:12:3b: da:81:6b:6d:b7:95:cd:6e:90:05:4f:b5:13:79:aa:50:6f:40: 35:72:a7:9f:9a:bf:1f:30:5e:97:ba:cf:a7:c9:d4:49:a8:87: 14:cd:75:a7:cf:6f:4f:89:96:5b:eb:74:67:d5:7f:27:a9:be: cf:ce:86:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjYwNDE2MjAxMTAxWhcNMjYwNDIzMjAxMTAxWjAYMRYwFAYD VQQDEw02OWUxNDI1NS1jNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mQZb0HP6Lap85g69KHzyvw+aFB8Degcfvt9KqazycYN8ZD5M6RbpAjeME+F b40fQTSq79fgeM//vaMH64TfR/Hgv7upns2aTCf3paZwpND6eTpC4nBrpqxCfMI9 KvXkwEphGomjWSuEkmFRnWdUSqM4vt+Cg4dSc1YwCL5Z78ak+RxuDQC7/32FYdM5 Th5EP874THzrVLsm/3GnSkKKmZGHImfdQVGfE1LLail0WgkFSMQs1fmyE+EBg3gk Ip748mrieENUzWrIwTbJ2l+EApDd3jI7snPd9uCs68rWUpnjbDm92O8rVSXHTXMx SC2zWGNlL6ai/OkTdtCoGmr7rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUZv3AZ mKUNEIirdRzUu2HWn/I5MB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAegIrONsT2/XtEMI1hko9ASoCui6aLTv8RmY3It9ZMq8TUIRPtGmDGEQuNFQN RuQbw4iFB/wQnEvBu0NBFN8fK4N1QbTCgCpZ5rWT0LVwyTZCX/F9Vqaf80v9mb2r tLXEfifRxz9RGGxNx0DSBl1eEIKLDCTZAm9G89VFOqvzRqOKSDNQw9kqtHCCexSs XoUBlfZYCR6u0zuHH5xL9Lnd/MP/8roUbtI3lo73mrMcdIygkrWnZQ2ufpIMwpd/ y2jo23LuShI72oFrbbeVzW6QBU+1E3mqUG9ANXKnn5q/HzBel7rPp8nUSaiHFM11 p89vT4mWW+t0Z9V/J6m+z86GtA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:09:37 2026 by rpki-client