$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft File: 5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json) Hash identifier: 3UA1QVSXkL9tL1gTXa6wOlNgvisKjyleM3+S24Ycb1E= Subject key identifier: 53:70:03:28:2B:40:B9:EA:08:7A:56:8F:F5:D7:A9:DB:80:A7:F1:A7 Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft Manifest number: 0188 Signing time: Fri 17 Apr 2026 04:35:39 +0000 Manifest this update: Fri 17 Apr 2026 04:35:38 +0000 Manifest next update: Fri 24 Apr 2026 04:35:38 +0000 Files and hashes: 1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: vK1uuA1G7SOLeoQOqW911oQrGoLwYVxvVZRdjcK3y5k=) 2: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: NZgLuzLqNee1fYy4mFTHbT3bJ6KftmgEr6+x/+S42oQ=) 3: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: 1qP+GrX3zgK9BKEEg6Dkyc1WLFMQUS+ZMJmqVReMcJ4=) 4: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: NZ41GePO+wVrHhL385esVXgxdvkRTvbJf+OBmKNcFbQ=) 5: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PUGLK3hnFXvhVOmJO/mpJIqVNCfFg3Hqylh+LQYF1dI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E Validity Not Before: Apr 17 04:35:38 2026 GMT Not After : Apr 24 04:35:38 2026 GMT Subject: CN=69e1b89a-918a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:13:46:6d:08:c9:33:8d:da:01:78:81:9c: c0:08:64:fc:b2:9b:32:d3:08:ac:ea:dd:10:38:5a: a7:08:a6:38:ff:d4:9b:e9:b5:34:0b:bc:3d:9a:5e: a5:b9:3f:20:fc:9f:89:d7:f0:ef:27:7a:27:19:30: dd:56:18:0b:44:9c:a0:69:18:73:2a:58:bd:a1:25: 8b:79:47:5a:94:cb:a7:ab:22:fb:7c:cf:a9:a4:9d: 11:d0:e9:80:cf:61:1e:28:99:9d:01:14:a5:13:d4: a5:49:de:bc:e3:43:bc:fd:6f:64:52:e7:51:a8:83: 2a:ce:11:67:a6:15:3e:72:ca:2a:10:64:1a:e7:b1: f7:f1:84:6a:59:3b:b5:63:0e:85:b1:9c:97:05:8b: 76:38:86:bd:b3:57:4e:ea:4a:8a:e4:6f:58:e5:54: cb:67:a3:9b:d6:ec:b2:53:db:19:38:0f:c5:04:8d: e7:ba:23:27:68:84:a8:b4:a6:9a:cf:8c:b7:74:e7: 73:42:7d:e8:08:d1:9c:47:b9:9b:59:f4:36:a1:d3: a0:24:5b:05:61:40:22:ac:47:77:85:07:27:71:5f: 2d:3e:e7:d1:3e:71:d1:d1:8b:40:22:81:1a:ae:71: 72:1a:24:1a:1f:69:21:ed:5b:8c:4b:2c:59:ff:1b: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:70:03:28:2B:40:B9:EA:08:7A:56:8F:F5:D7:A9:DB:80:A7:F1:A7 X509v3 Authority Key Identifier: keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d1:82:a0:c9:8d:fa:d2:01:29:23:da:c1:8d:1c:b6:7e:d2: 73:10:5a:5f:65:ce:a7:30:8f:97:e0:97:eb:b6:e0:70:b4:7c: 7a:56:93:74:a9:e9:5f:e7:9d:41:74:4d:06:03:f8:7c:57:64: 27:03:a5:e0:c7:26:e0:3b:db:72:db:f4:7e:49:1a:d6:46:43: d3:f9:f7:8b:6e:22:67:d9:69:0f:40:cb:a4:85:1d:73:8a:c9: 9f:e6:ef:8b:1c:ea:9e:d0:22:0a:ea:1c:b3:0c:cc:1f:bb:12: 12:b2:61:95:01:dc:90:20:70:46:45:7a:0d:92:2c:5e:af:de: 6c:f0:63:41:f2:09:21:7f:ba:00:4b:2c:c5:38:d4:82:e7:7a: d3:df:34:5a:8f:56:3c:98:32:56:a1:cf:44:1b:f9:55:ef:00: 26:d2:b5:59:cd:31:7b:0f:21:09:d3:d6:19:d0:c1:f1:8c:a1: 89:14:0b:7b:03:70:11:57:e9:37:3d:b1:6e:70:ae:06:d6:13: b4:c5:d2:eb:09:87:21:37:37:b1:a2:be:61:16:35:87:84:1a: c4:c1:d8:da:29:a6:c5:e7:6c:2b:0e:60:4a:f9:e0:a8:e9:8a: 8c:da:3d:d5:55:e4:65:d2:40:31:c2:16:45:d0:c9:4b:82:03: aa:07:91:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB REMzOEE0OEUwHhcNMjYwNDE3MDQzNTM4WhcNMjYwNDI0MDQzNTM4WjAYMRYwFAYD VQQDEw02OWUxYjg5YS05MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjqsTRm0IyTON2gF4gZzACGT8spsy0wis6t0QOFqnCKY4/9Sb6bU0C7w9ml6l uT8g/J+J1/DvJ3onGTDdVhgLRJygaRhzKli9oSWLeUdalMunqyL7fM+ppJ0R0OmA z2EeKJmdARSlE9SlSd6840O8/W9kUudRqIMqzhFnphU+csoqEGQa57H38YRqWTu1 Yw6FsZyXBYt2OIa9s1dO6kqK5G9Y5VTLZ6Ob1uyyU9sZOA/FBI3nuiMnaISotKaa z4y3dOdzQn3oCNGcR7mbWfQ2odOgJFsFYUAirEd3hQcncV8tPufRPnHR0YtAIoEa rnFyGiQaH2kh7VuMSyxZ/xuErQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNwAygr QLnqCHpWj/XXqduAp/GnMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY czlpaHktSkpGWGV0dzRwSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE9GCoMmN+tIBKSPawY0ctn7ScxBaX2XOpzCPl+CX67bgcLR8elaTdKnpX+ed QXRNBgP4fFdkJwOl4Mcm4Dvbctv0fkka1kZD0/n3i24iZ9lpD0DLpIUdc4rJn+bv ixzqntAiCuocswzMH7sSErJhlQHckCBwRkV6DZIsXq/ebPBjQfIJIX+6AEssxTjU gud60980Wo9WPJgyVqHPRBv5Ve8AJtK1Wc0xew8hCdPWGdDB8YyhiRQLewNwEVfp Nz2xbnCuBtYTtMXS6wmHITc3saK+YRY1h4QaxMHY2immxedsKw5gSvngqOmKjNo9 1VXkZdJAMcIWRdDJS4IDqgeRYw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:48:11 2026 by rpki-client