$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: 7WRWlDUlCol9EbMjzp07Oj7l4TFi6vXbSPDnRVliNNo= Subject key identifier: B7:BB:51:D8:45:54:FE:47:86:01:A1:21:31:95:49:02:43:54:C5:DF Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 14EB Signing time: Thu 16 Apr 2026 18:55:28 +0000 Manifest this update: Thu 16 Apr 2026 18:55:28 +0000 Manifest next update: Thu 23 Apr 2026 18:55:28 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: pwY8803HjtjKH6+NZG9qJ1zmgD89r5dJp0Wk4hia84g=) 2: A856E7621BBC11F182440C5A133D8C67.roa (hash: KdW7HmM/QsPtpcnFpMg/Q8r0PDiCC8P4N0obd527mv4=) 3: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: BAr/qgF2MLGt0IoB1WIa6SNFChHO0/OxfFvIz9Ta+q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Apr 16 18:55:28 2026 GMT Not After : Apr 23 18:55:28 2026 GMT Subject: CN=69e130a0-f74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:e9:4e:39:a5:43:a0:76:c3:69:cb:66:62: 8b:17:3d:e9:16:6c:95:6a:53:e4:1a:bf:c7:0d:b2: 25:10:9d:62:e4:08:8d:24:46:8b:d5:7a:33:02:2b: 69:42:84:1b:3c:ff:8c:ea:43:c7:85:1b:2b:4d:a8: ba:86:8b:4e:c1:9a:49:99:1b:57:d3:75:f6:d1:ae: 07:70:ba:27:79:cc:ac:54:e7:8c:1a:00:a3:f7:1d: 49:b9:51:aa:7d:42:f3:1e:1b:9e:ca:51:ba:71:d9: c7:0b:6b:0f:34:83:27:7e:e2:b0:c3:a2:b2:40:1a: 13:1d:57:30:54:0c:fe:f3:13:95:b5:bb:0c:e6:8e: 93:25:aa:a8:12:78:53:e7:30:43:49:7a:48:9b:e8: 9f:4e:f8:7e:b8:6f:eb:b7:ce:1a:bf:3d:71:d8:7e: 17:5a:1c:a4:71:35:81:81:c8:fc:97:5e:c6:5d:90: 20:33:81:18:1e:33:98:b6:7a:1d:5f:47:22:86:f9: 06:0d:de:53:1a:37:3c:2a:0a:c5:7d:a4:d5:ef:13: 50:eb:ba:97:29:7f:6b:e4:96:ff:17:23:a9:bd:a4: 58:54:43:98:4d:c4:34:53:a9:9b:f8:77:13:91:98: 5e:ab:f1:aa:40:e9:b3:d1:93:b3:55:7c:09:77:55: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:51:D8:45:54:FE:47:86:01:A1:21:31:95:49:02:43:54:C5:DF X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:af:90:d6:09:94:d0:c5:7f:f0:00:6a:ae:d9:d2:5a:5a:38: 4c:c4:7f:db:43:e9:1c:a2:f1:7f:90:1a:1d:a0:e4:d3:ef:57: bb:1d:62:02:cb:b8:64:a5:28:61:bc:cd:65:7a:2d:02:54:1f: c1:0d:ca:6c:d7:65:db:50:fa:82:b5:82:d3:58:37:4a:96:71: 2e:c8:30:b3:f2:63:c1:b5:bb:7e:c4:55:26:11:b0:32:b2:5a: 7d:6c:be:71:ef:5c:f2:1e:18:78:3c:3e:4a:bc:c7:50:20:53: 57:2a:76:97:4f:1b:6e:33:b9:33:97:fb:02:68:08:63:1c:0c: fa:98:1d:03:76:c2:99:7d:17:c1:33:31:18:1d:ad:c3:f7:bc: df:95:67:93:e4:89:86:f3:af:25:ad:90:4d:d1:ad:fa:90:90: 53:9c:ba:75:86:d5:c4:3a:35:04:32:48:5c:e0:41:c1:ef:5b: a1:9e:ee:14:13:38:86:fd:85:73:b2:ba:77:62:24:02:b2:90: e4:e2:b9:fc:8e:79:99:88:f7:e7:80:69:7b:b2:9f:65:1d:2a: ba:92:21:f5:0a:29:73:f7:93:38:8c:48:60:b6:b8:13:3d:56: a9:f1:64:3a:37:9c:0c:19:37:a4:ff:11:29:34:23:be:b5:ee: 2c:1f:2f:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjYwNDE2MTg1NTI4WhcNMjYwNDIzMTg1NTI4WjAYMRYwFAYD VQQDEw02OWUxMzBhMC1mNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F3pTjmlQ6B2w2nLZmKLFz3pFmyValPkGr/HDbIlEJ1i5AiNJEaL1XozAitp QoQbPP+M6kPHhRsrTai6hotOwZpJmRtX03X20a4HcLonecysVOeMGgCj9x1JuVGq fULzHhueylG6cdnHC2sPNIMnfuKww6KyQBoTHVcwVAz+8xOVtbsM5o6TJaqoEnhT 5zBDSXpIm+ifTvh+uG/rt84avz1x2H4XWhykcTWBgcj8l17GXZAgM4EYHjOYtnod X0cihvkGDd5TGjc8KgrFfaTV7xNQ67qXKX9r5Jb/FyOpvaRYVEOYTcQ0U6mb+HcT kZheq/GqQOmz0ZOzVXwJd1XylwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLe7UdhF VP5HhgGhITGVSQJDVMXfMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIK+Q1gmU0MV/8ABqrtnSWlo4TMR/20PpHKLxf5AaHaDk0+9Xux1iAsu4ZKUo YbzNZXotAlQfwQ3KbNdl21D6grWC01g3SpZxLsgws/JjwbW7fsRVJhGwMrJafWy+ ce9c8h4YeDw+SrzHUCBTVyp2l08bbjO5M5f7AmgIYxwM+pgdA3bCmX0XwTMxGB2t w/e835Vnk+SJhvOvJa2QTdGt+pCQU5y6dYbVxDo1BDJIXOBBwe9boZ7uFBM4hv2F c7K6d2IkArKQ5OK5/I55mYj354Bpe7KfZR0qupIh9Qopc/eTOIxIYLa4Ez1WqfFk OjecDBk3pP8RKTQjvrXuLB8vFA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:28 2026 by rpki-client