$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: ptP5Ec2pD9Q6gezoHYodT/oLfrsKrbyDR5iNSgAnq0k= Subject key identifier: A9:5C:40:52:B8:13:DE:5D:BF:FE:79:C5:F6:31:BD:F0:B2:AE:B3:C3 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 0495 Signing time: Thu 16 Apr 2026 23:53:18 +0000 Manifest this update: Thu 16 Apr 2026 23:53:17 +0000 Manifest next update: Thu 23 Apr 2026 23:53:17 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: 6RQv929O7yBKqh3qY/JqIl5524IgTnrjwk7Yczc5TpU=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 2aYC0ELWow+IfSe343bqAO+DbKR4exbO+moWs9x1JMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Apr 16 23:53:17 2026 GMT Not After : Apr 23 23:53:17 2026 GMT Subject: CN=69e1766d-6dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:48:11:02:c4:9b:0f:4f:7c:33:3c:06:42: bb:8c:8d:d6:0a:2f:f0:f7:d0:ab:5e:6c:16:44:df: 7a:5a:69:ca:24:be:bf:e6:d1:e4:78:71:6a:8d:63: e8:df:02:4a:54:f0:2a:94:f2:31:37:05:e7:a2:7d: c7:81:a9:0b:66:57:30:38:08:f1:3e:a9:ad:ff:83: 56:36:3b:30:25:8e:ae:ec:84:bc:00:3a:a9:5d:e9: 73:81:a2:b2:86:5d:49:fb:69:75:fd:94:e0:70:8a: a8:e8:7b:02:c8:ff:d7:44:39:15:25:38:d2:e7:d7: e7:fd:e8:54:a5:42:77:d1:fb:fb:3d:c4:91:4b:cc: ad:4d:02:c7:8c:23:7d:8f:37:3a:f0:39:ad:d1:32: 0c:64:8c:f3:c7:51:39:04:3b:b8:3f:74:ff:b3:16: bd:b1:90:5f:07:7f:d5:d4:5a:5c:27:b3:b3:6b:55: c4:b2:b2:30:3b:0e:59:b3:84:17:4f:47:9a:da:19: 37:ca:31:9a:c3:38:3a:c4:6c:9e:b0:ca:55:3c:0d: 05:a8:9b:30:6b:e9:d7:ee:08:58:fe:ba:a4:f7:69: 80:5f:c0:e3:5e:96:95:d7:54:79:85:0a:28:97:c8: d9:58:85:47:26:1d:2f:95:35:b8:76:e3:8a:28:33: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:40:52:B8:13:DE:5D:BF:FE:79:C5:F6:31:BD:F0:B2:AE:B3:C3 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d7:3b:85:f8:70:13:aa:c3:4f:a2:7f:a0:09:07:7e:62:7c: fb:46:cc:88:35:5f:f4:a4:d6:4d:7d:18:c2:7c:76:81:d1:2d: 54:3a:98:e8:59:52:1b:27:62:1e:0e:86:69:f5:04:5b:c5:15: 6b:fb:15:27:b3:d6:c8:37:30:b5:d7:5c:57:e8:96:bf:f1:81: 9a:0f:79:16:0b:f1:71:f7:1b:d1:2a:74:2b:eb:21:8f:ff:72: c6:d3:ac:6a:48:b4:61:33:32:80:22:75:69:5c:b6:a3:b7:14: 26:c9:1b:95:b5:13:0c:7a:b8:fa:f6:c7:27:57:3d:07:4b:a2: 68:13:03:20:f4:2f:93:ea:a3:79:25:9e:89:c7:1e:c2:8a:1d: 4f:85:e8:4b:6d:6b:0b:7e:81:fa:bc:a9:62:8c:32:24:21:ea: 24:1e:b4:2f:92:a0:8d:10:47:10:57:21:ac:1f:1c:5d:37:a1: 77:26:78:09:d6:fa:ed:d4:6b:47:0e:a9:74:7e:cd:1e:9d:04: 7e:04:54:94:6c:32:57:14:0a:fe:bc:34:a6:61:58:1f:c0:66: 4a:ef:8c:30:b7:b3:2d:e3:c1:25:1d:67:1a:44:2c:37:8f:dd: 98:ff:45:1b:9b:9a:7f:cc:d3:5b:97:68:48:7d:02:82:df:72: 1c:bc:0b:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjYwNDE2MjM1MzE3WhcNMjYwNDIzMjM1MzE3WjAYMRYwFAYD VQQDEw02OWUxNzY2ZC02ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH9IEQLEmw9PfDM8BkK7jI3WCi/w99CrXmwWRN96WmnKJL6/5tHkeHFqjWPo 3wJKVPAqlPIxNwXnon3HgakLZlcwOAjxPqmt/4NWNjswJY6u7IS8ADqpXelzgaKy hl1J+2l1/ZTgcIqo6HsCyP/XRDkVJTjS59fn/ehUpUJ30fv7PcSRS8ytTQLHjCN9 jzc68Dmt0TIMZIzzx1E5BDu4P3T/sxa9sZBfB3/V1FpcJ7Oza1XEsrIwOw5Zs4QX T0ea2hk3yjGawzg6xGyesMpVPA0FqJswa+nX7ghY/rqk92mAX8DjXpaV11R5hQoo l8jZWIVHJh0vlTW4duOKKDOXtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlcQFK4 E95dv/55xfYxvfCyrrPDMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdc7hfhwE6rDT6J/oAkHfmJ8+0bMiDVf9KTWTX0Ywnx2gdEtVDqY6FlSGydi Hg6GafUEW8UVa/sVJ7PWyDcwtddcV+iWv/GBmg95Fgvxcfcb0Sp0K+shj/9yxtOs aki0YTMygCJ1aVy2o7cUJskblbUTDHq4+vbHJ1c9B0uiaBMDIPQvk+qjeSWeicce woodT4XoS21rC36B+rypYowyJCHqJB60L5KgjRBHEFchrB8cXTehdyZ4Cdb67dRr Rw6pdH7NHp0EfgRUlGwyVxQK/rw0pmFYH8BmSu+MMLezLePBJR1nGkQsN4/dmP9F G5uaf8zTW5doSH0Cgt9yHLwLtg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:08:59 2026 by rpki-client