$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: Rue0Dss6sCj7RXLWKbDAEXU4IPkd7QBMqQRUnrEHNoU= Subject key identifier: A3:8F:3D:F3:C3:8D:D8:E7:1C:FC:A8:80:E5:9C:EB:85:DE:D7:C0:B4 Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: D1 Signing time: Sun 19 Apr 2026 06:23:34 +0000 Manifest this update: Sun 19 Apr 2026 06:23:34 +0000 Manifest next update: Sun 26 Apr 2026 06:23:34 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: EbvKanEenLWQZE4/8/nu+ytjeIj7MHkh2ZWmkFRbraA=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: Apr 19 06:23:34 2026 GMT Not After : Apr 26 06:23:34 2026 GMT Subject: CN=69e474e6-4816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:24:ef:f4:2c:f6:a6:d4:74:7a:f0:72:ec: 54:5b:13:19:54:ec:36:33:24:e9:25:de:0b:6e:f3: 7e:dc:9e:94:14:4a:ee:89:97:5d:a6:90:6a:12:70: 0a:62:e5:20:9c:b5:4d:ab:22:97:c5:7e:ea:b8:0c: 9f:45:3f:b7:d3:46:73:ef:e0:0d:e2:00:80:ff:2e: 2a:69:65:c6:6d:9c:b1:e7:de:33:d2:87:ed:5e:d1: 59:9c:02:27:a7:bc:84:0e:7f:a9:18:b4:bf:c8:16: 6c:f9:3b:d6:69:13:98:57:1c:b5:4f:a0:8e:92:31: d8:09:54:e7:85:75:2c:80:e2:3d:b6:c9:f2:26:23: de:0a:7d:31:f2:a0:bf:9d:b8:d4:45:8a:d3:d2:da: 29:0b:2e:b6:12:70:02:92:28:c9:f1:ff:d4:ff:a9: d6:12:0c:4e:b4:44:b7:de:ae:87:ba:db:34:8b:c4: 83:fa:05:bd:ae:6b:42:ba:ef:49:ba:05:57:94:32: d5:d0:59:de:cf:1d:59:9e:e9:b1:23:7d:ec:ac:53: 55:f1:9a:f8:51:67:00:9b:03:ce:67:d0:2f:ba:7f: 82:d9:84:23:a0:d5:a2:4b:ce:05:4e:bd:ac:88:0b: 6e:56:96:f8:3a:c1:83:2d:b7:5b:25:08:d9:68:25: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:3D:F3:C3:8D:D8:E7:1C:FC:A8:80:E5:9C:EB:85:DE:D7:C0:B4 X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4c:3c:f0:60:19:ec:ea:da:bf:44:c9:5d:f5:21:d2:4e:75: 3f:d3:73:69:15:bc:24:a2:da:19:e5:ce:7f:87:b9:a7:8e:3a: 9d:90:a4:37:e6:2b:07:a4:31:36:98:ec:8e:50:76:9b:19:0e: 13:d0:30:e4:c4:ba:31:d7:54:61:eb:55:f7:a2:6a:ba:08:16: 3e:86:25:d6:d5:c1:9e:57:40:f1:d3:c4:d4:f5:c6:13:40:76: a4:2a:c5:eb:71:01:f0:b8:be:ee:9f:09:09:0e:35:ce:fc:67: 9c:ec:3c:0a:a2:ed:7d:f8:54:fb:f2:4d:01:fa:58:47:e0:a8: e6:bf:0d:04:72:5b:84:21:39:5b:90:c0:a7:47:6b:57:df:5f: 45:89:56:ba:87:c4:08:44:a3:a7:f6:38:93:dc:cf:a5:49:f2: 62:4d:69:45:9a:60:84:4b:5c:f2:f0:fa:6d:0c:30:17:af:99: 37:dd:b0:ea:5d:19:de:a7:d1:f3:b4:ff:4e:42:4f:19:53:b9: e6:71:bf:4c:7a:84:5a:7a:38:cd:1d:78:85:ee:94:c8:62:9f: b0:25:6c:9e:36:02:31:43:01:ba:1a:9a:28:83:57:e2:9b:13: 51:4c:51:5a:f2:bb:a9:15:d5:73:e9:6a:e1:a4:d3:62:2c:a2: d1:4e:a3:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4QzIxMTAvBgNVBAUTKEQyNEZDQ0FEM0FDRTdGRkU1QkYwMkE2QThGNjhDMDYw MkUxQzFCNTEwHhcNMjYwNDE5MDYyMzM0WhcNMjYwNDI2MDYyMzM0WjAYMRYwFAYD VQQDEw02OWU0NzRlNi00ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0gk7/Qs9qbUdHrwcuxUWxMZVOw2MyTpJd4LbvN+3J6UFEruiZddppBqEnAK YuUgnLVNqyKXxX7quAyfRT+300Zz7+AN4gCA/y4qaWXGbZyx594z0oftXtFZnAIn p7yEDn+pGLS/yBZs+TvWaROYVxy1T6COkjHYCVTnhXUsgOI9tsnyJiPeCn0x8qC/ nbjURYrT0topCy62EnACkijJ8f/U/6nWEgxOtES33q6Huts0i8SD+gW9rmtCuu9J ugVXlDLV0Fnezx1ZnumxI33srFNV8Zr4UWcAmwPOZ9Avun+C2YQjoNWiS84FTr2s iAtuVpb4OsGDLbdbJQjZaCVtlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOPPfPD jdjnHPyogOWc64Xe18C0MB8GA1UdIwQYMBaAFNJPzK06zn/+W/Aqao9owGAuHBtR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQThDMi85NUE2OUJFMjAw NTMxMUYwOEU3M0UxNEFDNEY5QUUwMi8wa19NclRyT2ZfNWI4Q3BxajJqQVlDNGNH MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QThDMi85NUE2OUJFMjAwNTMxMUYwOEU3M0UxNEFDNEY5QUUwMi8wa19NclRyT2Zf NWI4Q3BxajJqQVlDNGNHMUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhEw88GAZ7Orav0TJXfUh0k51P9NzaRW8JKLaGeXOf4e5p446nZCkN+YrB6Qx NpjsjlB2mxkOE9Aw5MS6MddUYetV96JquggWPoYl1tXBnldA8dPE1PXGE0B2pCrF 63EB8Li+7p8JCQ41zvxnnOw8CqLtffhU+/JNAfpYR+Co5r8NBHJbhCE5W5DAp0dr V99fRYlWuofECESjp/Y4k9zPpUnyYk1pRZpghEtc8vD6bQwwF6+ZN92w6l0Z3qfR 87T/TkJPGVO55nG/THqEWno4zR14he6UyGKfsCVsnjYCMUMBuhqaKINX4psTUUxR WvK7qRXVc+lq4aTTYiyi0U6jew== -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:32 2026 by rpki-client