$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json) Hash identifier: oTUwa8I3Cttye2paWEVNHHDGejDpthit6WdynnZ2PJo= Subject key identifier: 90:11:33:7C:5E:C1:81:FE:A4:5A:9D:58:EF:1F:0A:BA:4D:4D:B4:A1 Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft Manifest number: 0146 Signing time: Thu 16 Apr 2026 16:16:01 +0000 Manifest this update: Thu 16 Apr 2026 16:16:01 +0000 Manifest next update: Thu 23 Apr 2026 16:16:01 +0000 Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: ps0/QL/XGtL3sfSzk5dmD8+KHxuZlYTqHCX6FE6jXLk=) 2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto=) 3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: 9ayUJbTwLRPcJporlzoTUwIv2h9R8DWkz2gQBFVIj/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Apr 16 16:16:01 2026 GMT Not After : Apr 23 16:16:01 2026 GMT Subject: CN=69e10b41-cf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:f9:ca:99:7c:b9:d3:2d:16:a0:a6:62:54: e5:55:37:70:40:61:59:de:d7:45:fd:18:0c:e7:cb: b3:e0:ac:7a:ea:35:7d:a1:1e:e0:95:bb:fc:b0:fd: bd:a8:9b:4c:1f:91:2b:ed:18:8e:45:5a:95:bc:1a: 33:03:c4:03:c9:89:b8:c6:fe:16:79:8c:e3:cc:fd: e4:fd:1a:79:32:fe:43:09:18:9b:6b:3e:94:ce:59: a2:ea:e6:9d:07:cb:30:17:25:f8:04:73:ee:76:22: e7:b4:a9:ae:35:63:c8:e9:d1:08:e2:87:8c:12:b4: ce:c4:50:d2:82:d6:69:31:97:87:f1:97:ea:9d:5d: 97:e1:bb:63:ca:4e:7e:e6:ee:64:dd:fa:9b:3a:64: 2d:c3:2e:5a:de:88:17:a0:ba:da:54:d6:8a:c1:a4: ff:9d:a3:8b:d7:b3:d3:ad:d6:f1:3c:5b:8f:22:da: b3:55:80:2f:e3:bc:3d:3c:80:74:9b:d4:c9:e5:1f: 3d:88:47:e2:b0:d6:7d:b4:8d:d6:a4:42:b0:d6:08: 51:1f:c6:31:4d:4b:be:fa:14:58:fa:84:4f:48:d8: e0:62:5e:52:53:85:9f:ac:d2:b0:77:8d:10:81:5a: 52:26:71:84:19:54:d4:ed:90:84:3a:65:ee:56:60: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:33:7C:5E:C1:81:FE:A4:5A:9D:58:EF:1F:0A:BA:4D:4D:B4:A1 X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2d:d5:63:8f:7d:0c:e2:99:bb:e7:86:32:13:cd:53:f4:86: 4f:98:63:47:95:d0:f6:b4:84:9c:4f:dd:6d:5e:71:c7:35:8a: 55:43:aa:37:f0:10:df:57:24:8a:b5:c0:5c:03:e9:1d:65:2b: b9:c7:55:b6:d1:54:58:5d:25:34:7d:ce:46:ba:09:9c:82:e9: 02:af:1f:c1:82:72:3b:f7:94:c5:b8:ce:03:47:80:da:7c:78: 7b:f1:53:d3:6b:03:07:90:af:b4:cd:94:e2:b3:b1:84:89:87: 80:1b:6d:83:c5:85:0c:7c:88:34:c4:28:20:fd:01:3c:5c:04: 30:d1:56:16:54:0d:36:64:d5:96:c7:bf:b0:6d:c5:75:8c:0a: 16:80:00:8e:5d:b1:fa:ba:b1:08:1b:82:86:f8:03:56:c9:19: 56:5f:20:f9:10:7a:2e:05:9f:58:e7:1b:92:91:8a:8f:4d:ff: 7c:9d:50:24:8e:e7:54:ef:0b:72:05:6c:ec:b2:55:4b:6c:42: 63:95:e4:5e:f4:74:06:15:f7:6a:ae:ca:b4:09:62:2b:ee:a9: 9a:89:11:2f:51:ef:e0:7c:02:dd:61:47:82:aa:57:0f:51:28: a8:98:43:3f:7a:02:b0:ac:70:6d:6d:77:23:93:e5:72:9b:67: 8f:9a:fb:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjYwNDE2MTYxNjAxWhcNMjYwNDIzMTYxNjAxWjAYMRYwFAYD VQQDEw02OWUxMGI0MS1jZjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcn5ypl8udMtFqCmYlTlVTdwQGFZ3tdF/RgM58uz4Kx66jV9oR7glbv8sP29 qJtMH5Er7RiORVqVvBozA8QDyYm4xv4WeYzjzP3k/Rp5Mv5DCRibaz6Uzlmi6uad B8swFyX4BHPudiLntKmuNWPI6dEI4oeMErTOxFDSgtZpMZeH8ZfqnV2X4btjyk5+ 5u5k3fqbOmQtwy5a3ogXoLraVNaKwaT/naOL17PTrdbxPFuPItqzVYAv47w9PIB0 m9TJ5R89iEfisNZ9tI3WpEKw1ghRH8YxTUu++hRY+oRPSNjgYl5SU4WfrNKwd40Q gVpSJnGEGVTU7ZCEOmXuVmCqkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJARM3xe wYH+pFqdWO8fCrpNTbShMB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1K TWExY0FBZjFKVnA1M1E1TWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUi3VY499DOKZu+eGMhPNU/SGT5hjR5XQ9rSEnE/dbV5xxzWKVUOqN/AQ31ck irXAXAPpHWUrucdVttFUWF0lNH3ORroJnILpAq8fwYJyO/eUxbjOA0eA2nx4e/FT 02sDB5CvtM2U4rOxhImHgBttg8WFDHyINMQoIP0BPFwEMNFWFlQNNmTVlse/sG3F dYwKFoAAjl2x+rqxCBuChvgDVskZVl8g+RB6LgWfWOcbkpGKj03/fJ1QJI7nVO8L cgVs7LJVS2xCY5XkXvR0BhX3aq7KtAliK+6pmokRL1Hv4HwC3WFHgqpXD1EoqJhD P3oCsKxwbW13I5Plcptnj5r7eA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:13 2026 by rpki-client