$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: n+POdnLFdnJMvBCcJbjgXtLyCJHGm9jRu8Dux37mRos= Subject key identifier: 99:2A:8C:CE:1C:94:CC:A5:D2:33:40:C8:88:4E:22:54:19:AB:AB:00 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 01EC Signing time: Wed 15 Apr 2026 03:01:33 +0000 Manifest this update: Wed 15 Apr 2026 03:01:33 +0000 Manifest next update: Wed 22 Apr 2026 03:01:33 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: DftX7KcJvTrvYWBczCwgTdeMw3UPlmMZiCFHsSLr7Cw=) 2: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: J1ocAT03CSbRpODB0RRAKFgJGRB6ade57V3/kum0InU=) 3: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: mhjbk4CN2+rPJc7zvgeaO7bX0mHh9qBVgN/f8ar/U0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Apr 15 03:01:33 2026 GMT Not After : Apr 22 03:01:33 2026 GMT Subject: CN=69deff8d-3c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:3c:fa:2d:f3:f7:6e:a6:f6:d4:24:17:3c: f0:bd:9a:93:5a:5c:20:b4:51:47:84:a9:e0:03:f7: fb:ce:f2:a0:ea:16:73:84:f4:c0:ac:8f:df:d6:42: cd:7d:05:e9:20:fe:38:bf:25:7a:c6:04:7e:ba:9e: 55:0e:95:30:90:98:55:3b:7e:ac:18:b2:28:bd:0f: f9:14:a8:c1:2b:5b:bf:d5:08:c3:63:d3:32:30:41: a5:bc:59:b1:b7:74:cc:1e:c3:c9:42:ac:9d:72:29: 75:c7:0d:d6:be:88:7d:3c:40:f0:0f:95:54:0f:05: b6:46:30:22:4a:ef:1a:d9:1f:45:a6:99:a2:08:94: c8:2e:11:df:f0:69:3a:3e:51:fd:a9:30:09:c5:ba: fc:1c:9f:cf:da:48:6d:bb:d7:3f:55:9d:e8:30:84: 26:c7:fe:2b:ae:98:da:9b:34:94:ba:fa:c3:2c:e7: d6:1a:00:65:2a:2c:e7:32:ed:69:ba:0d:d9:43:91: cd:c0:6b:82:7f:bd:1b:75:04:a7:68:1f:34:11:c6: 8a:37:94:74:48:32:ba:dd:2f:53:b7:45:fc:63:16: 67:d1:d4:09:69:89:91:84:6c:69:f7:99:d5:2b:f8: 73:c5:61:25:d6:46:02:85:a5:6e:d9:70:6b:de:59: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:8C:CE:1C:94:CC:A5:D2:33:40:C8:88:4E:22:54:19:AB:AB:00 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:eb:e9:63:80:92:6a:36:f4:fb:4d:67:94:22:ee:63:31:e1: b3:62:69:b3:79:d4:ba:8d:b6:d9:86:31:fa:68:e2:95:43:ce: 75:d8:87:67:4f:58:09:1e:85:e4:f2:c7:69:d7:4f:35:7e:db: 96:40:43:04:f7:de:c0:c1:03:5d:a0:86:ce:e7:75:0f:58:be: 4c:11:25:07:33:ff:fa:af:f1:d0:0a:d3:a0:0d:2f:a6:d0:80: d6:13:7f:47:3b:85:00:ed:42:2a:ca:60:b7:ce:79:c1:5c:f9: d5:ba:9a:46:9f:45:02:2e:cc:b5:3c:fe:1c:7e:10:f9:bd:84: 05:de:25:a7:6f:f0:96:01:be:ca:c3:56:d4:c3:d7:2c:44:70: e1:79:f1:b7:6e:b1:32:7b:16:d7:c3:c8:e8:26:7a:32:80:12: 39:60:42:44:fd:67:2b:ca:a9:1f:c4:36:04:a5:34:b5:55:a2: 48:98:ae:9d:67:a3:dd:98:f8:09:51:77:62:a8:ea:55:5b:e2: 52:9c:b1:9a:af:cd:cc:31:5b:4d:fd:c1:71:14:e2:dd:9c:de: b3:98:e2:43:8c:3d:94:44:cb:b8:9e:12:0e:d1:ee:c1:24:54: 10:1f:e4:a0:13:14:e1:eb:18:67:fb:d4:f5:10:b3:bd:a0:92: 8e:0b:19:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjYwNDE1MDMwMTMzWhcNMjYwNDIyMDMwMTMzWjAYMRYwFAYD VQQDEw02OWRlZmY4ZC0zYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZY8+i3z926m9tQkFzzwvZqTWlwgtFFHhKngA/f7zvKg6hZzhPTArI/f1kLN fQXpIP44vyV6xgR+up5VDpUwkJhVO36sGLIovQ/5FKjBK1u/1QjDY9MyMEGlvFmx t3TMHsPJQqydcil1xw3Wvoh9PEDwD5VUDwW2RjAiSu8a2R9FppmiCJTILhHf8Gk6 PlH9qTAJxbr8HJ/P2khtu9c/VZ3oMIQmx/4rrpjamzSUuvrDLOfWGgBlKiznMu1p ug3ZQ5HNwGuCf70bdQSnaB80EcaKN5R0SDK63S9Tt0X8YxZn0dQJaYmRhGxp95nV K/hzxWEl1kYChaVu2XBr3llF6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkqjM4c lMyl0jNAyIhOIlQZq6sAMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhevpY4CSajb0+01nlCLuYzHhs2Jps3nUuo222YYx+mjilUPOddiHZ09YCR6F 5PLHaddPNX7blkBDBPfewMEDXaCGzud1D1i+TBElBzP/+q/x0ArToA0vptCA1hN/ RzuFAO1CKspgt855wVz51bqaRp9FAi7MtTz+HH4Q+b2EBd4lp2/wlgG+ysNW1MPX LERw4Xnxt26xMnsW18PI6CZ6MoASOWBCRP1nK8qpH8Q2BKU0tVWiSJiunWej3Zj4 CVF3YqjqVVviUpyxmq/NzDFbTf3BcRTi3Zzes5jiQ4w9lETLuJ4SDtHuwSRUEB/k oBMU4esYZ/vU9RCzvaCSjgsZhg== -----END CERTIFICATE-----Generated at Fri Apr 17 04:16:19 2026 by rpki-client