$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json) Hash identifier: q1mcG3Qusddi6LzWrle0KyFsGrtuM+jRfHm34VwQI+E= Subject key identifier: C9:98:9C:87:71:92:98:4B:DF:32:EE:82:A2:B0:7D:CA:99:E5:69:D2 Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft Manifest number: 37 Signing time: Thu 16 Apr 2026 14:32:36 +0000 Manifest this update: Thu 16 Apr 2026 14:32:36 +0000 Manifest next update: Thu 23 Apr 2026 14:32:36 +0000 Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: XJkvotS2KmOjP7UOOS23kUiSS4r36D3bahOrN+dnayA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Validity Not Before: Apr 16 14:32:36 2026 GMT Not After : Apr 23 14:32:36 2026 GMT Subject: CN=69e0f304-b12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:9b:d8:ef:80:bd:53:3d:99:1b:a0:69:5f: 31:1e:50:f0:c0:3d:1d:78:57:7d:58:e4:c5:ec:28: 6b:ca:53:5d:e6:62:9c:5e:96:66:dd:cc:69:8e:be: 2c:02:f4:5a:c0:3f:62:ab:f8:32:db:af:d3:37:36: c3:b1:30:8d:e2:f7:8c:a9:32:7b:04:97:6c:83:87: f3:0a:65:bd:17:b7:d6:6a:1a:0d:a8:5c:30:99:9f: 2a:1e:b5:26:55:2c:d9:eb:5e:b8:09:6a:73:9d:83: 9c:8d:66:9f:45:04:82:3a:3a:4d:40:35:32:c4:84: 78:07:a8:55:cd:e1:f7:e4:46:dd:cc:67:0b:94:3c: 6c:f4:b6:cb:cd:85:ae:d2:f4:9c:2e:42:09:bb:78: f5:0e:a6:88:37:d4:e6:6b:31:17:f6:d2:96:6a:5c: 69:c8:d3:24:df:0b:65:38:20:55:03:4a:db:51:cd: 39:98:34:3d:0f:c1:da:19:ae:e9:50:85:51:ec:dd: d0:df:31:15:d8:a6:14:cb:4a:f5:51:d6:82:df:b1: bc:77:b0:b3:59:5c:1b:a5:fc:fc:bf:cf:a3:1b:7e: 3c:c8:68:22:47:42:0f:4e:88:43:4a:ff:09:9a:92: c1:14:6c:16:0b:a9:8d:67:aa:31:df:40:40:75:ab: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:9C:87:71:92:98:4B:DF:32:EE:82:A2:B0:7D:CA:99:E5:69:D2 X509v3 Authority Key Identifier: keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c1:50:ac:02:2f:ba:21:58:41:67:d5:19:63:f9:84:76:2a: 83:89:d4:9f:48:e4:dd:55:90:6c:04:18:29:a6:03:56:24:50: 65:81:3c:a6:a9:38:c3:39:21:ce:08:92:c9:b3:e1:34:ae:31: 20:27:36:ef:a9:88:c2:e4:5e:58:2d:e5:dd:e5:74:a5:a7:df: 36:09:0b:b9:1c:94:b8:9e:07:08:13:b2:da:ae:d6:a4:58:4c: 9a:a1:6e:8a:41:00:46:e5:aa:73:cf:73:bf:17:ac:83:5b:b9: 15:43:39:df:cb:23:56:31:ca:7d:ea:a2:08:72:54:7b:1a:30: 45:d3:a9:58:55:c3:ad:3f:fb:92:e8:77:23:5f:03:ed:cb:66: f5:04:72:95:14:39:ef:35:e8:47:bf:4f:b2:bd:44:06:41:41: ca:9e:16:99:c4:8f:7f:9c:99:9b:84:cd:1f:c7:b3:7f:0c:43: 17:69:cd:4b:5e:da:4d:30:d4:66:76:7f:dc:9a:8f:7e:8c:b3: 2c:38:8e:fd:68:40:32:15:d3:23:14:57:17:c2:7e:ff:e5:d5: c5:34:3a:6b:21:a2:69:9e:0f:4e:1e:a1:6c:8e:90:ab:c6:b0: 8a:87:5e:e3:67:93:38:37:8b:8f:68:1c:0d:38:eb:38:bc:c4: c8:b8:68:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QkY0NzExMC8GA1UEBRMoMDlERDBFQTJEMjAzMTFGNzkzRTQ3NDNGMDg2NUM4NEEw MjQ3M0ZEQjAeFw0yNjA0MTYxNDMyMzZaFw0yNjA0MjMxNDMyMzZaMBgxFjAUBgNV BAMTDTY5ZTBmMzA0LWIxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/QZvY74C9Uz2ZG6BpXzEeUPDAPR14V31Y5MXsKGvKU13mYpxelmbdzGmOviwC 9FrAP2Kr+DLbr9M3NsOxMI3i94ypMnsEl2yDh/MKZb0Xt9ZqGg2oXDCZnyoetSZV LNnrXrgJanOdg5yNZp9FBII6Ok1ANTLEhHgHqFXN4ffkRt3MZwuUPGz0tsvNha7S 9JwuQgm7ePUOpog31OZrMRf20pZqXGnI0yTfC2U4IFUDSttRzTmYND0PwdoZrulQ hVHs3dDfMRXYphTLSvVR1oLfsbx3sLNZXBul/Py/z6MbfjzIaCJHQg9OiENK/wma ksEUbBYLqY1nqjHfQEB1q/w/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyZich3GS mEvfMu6CorB9ypnladIwHwYDVR0jBBgwFoAUCd0OotIDEfeT5HQ/CGXISgJHP9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCRjQ3LzBERkFFRTQ4RjI4 QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZlVDVIUV9DR1hJU2dKSFA5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQ2QwT290SURFZmVUNUhRX0NHWElTZ0pIUDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC RjQ3LzBERkFFRTQ4RjI4QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZl VDVIUV9DR1hJU2dKSFA5cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAswVCsAi+6IVhBZ9UZY/mEdiqDidSfSOTdVZBsBBgppgNWJFBlgTymqTjDOSHO CJLJs+E0rjEgJzbvqYjC5F5YLeXd5XSlp982CQu5HJS4ngcIE7LartakWEyaoW6K QQBG5apzz3O/F6yDW7kVQznfyyNWMcp96qIIclR7GjBF06lYVcOtP/uS6HcjXwPt y2b1BHKVFDnvNehHv0+yvUQGQUHKnhaZxI9/nJmbhM0fx7N/DEMXac1LXtpNMNRm dn/cmo9+jLMsOI79aEAyFdMjFFcXwn7/5dXFNDprIaJpng9OHqFsjpCrxrCKh17j Z5M4N4uPaBwNOOs4vMTIuGgz -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:46 2026 by rpki-client