$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json) Hash identifier: XFP5YmM0ogf/SXK8P3Q9AIwqFxX8p7Hn0R8ehGSSox4= Subject key identifier: 33:32:64:B0:18:E3:26:F6:28:F3:6E:1F:EE:FE:98:C6:CB:A1:FA:21 Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft Manifest number: 01DF Signing time: Sun 19 Apr 2026 03:14:38 +0000 Manifest this update: Sun 19 Apr 2026 03:14:38 +0000 Manifest next update: Sun 26 Apr 2026 03:14:38 +0000 Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: hr0tWmjgphN2yYo649m667KNS5ccCS/3q9lhz39riuE=) 2: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=) 3: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Validity Not Before: Apr 19 03:14:38 2026 GMT Not After : Apr 26 03:14:38 2026 GMT Subject: CN=69e4489e-2faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:cb:d7:d6:7c:70:07:a5:63:76:99:51:f8: 24:f0:53:97:61:4a:80:cc:a7:72:5a:c8:ab:01:55: 36:9a:af:eb:85:47:69:44:f6:f8:14:42:c8:c8:63: ca:cf:72:bb:9a:8d:5f:6d:b8:61:8a:8e:29:9b:7e: 03:1f:67:73:fa:8a:9f:d0:47:74:0a:9e:f2:de:7a: e8:7c:38:22:4e:b4:3d:7c:ec:fa:89:db:c2:60:a6: 2f:88:64:22:a9:6b:41:cd:c9:a1:54:c6:da:d7:e7: 79:4d:05:8e:40:52:b6:67:61:e4:44:2b:3d:7e:8b: fd:58:62:4a:4d:be:fe:16:70:61:40:a2:d4:ef:89: 46:ba:44:5b:28:4b:37:6c:27:f7:43:c9:61:24:fb: a1:ea:2b:cb:b9:7d:cd:d3:89:06:01:e9:1b:4f:bb: 3d:5f:c0:a8:1a:da:13:89:48:48:76:c9:9a:40:76: 09:4c:73:37:49:d9:23:3f:5c:80:4d:fc:54:2c:06: 87:c7:52:10:28:73:7c:25:e0:07:b5:32:35:c2:e3: a8:fa:42:02:c3:66:33:00:1e:58:71:ae:93:de:22: 7d:86:c2:5f:61:36:10:85:b2:0b:32:45:c0:6f:9d: 20:c1:d8:68:da:24:af:eb:5a:12:fb:ec:79:69:ac: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:32:64:B0:18:E3:26:F6:28:F3:6E:1F:EE:FE:98:C6:CB:A1:FA:21 X509v3 Authority Key Identifier: keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:96:4f:99:f7:6f:04:c0:b7:65:af:12:51:ee:3f:30:2e:f6: 8d:77:38:a9:00:e9:c2:a6:99:7e:3a:09:37:a1:5a:85:57:29: 83:c1:1f:a9:0c:7b:9a:ad:f7:cf:80:bf:ba:74:0e:6d:38:cc: 49:2e:30:28:61:91:29:c0:f9:55:db:dc:67:6b:f0:f3:b7:d8: 8d:dd:c3:6b:f4:c4:ee:df:78:ad:9d:0d:3c:ee:95:9c:a8:07: 0b:42:8d:62:16:e7:64:f2:11:5f:33:4b:b1:3b:0b:c5:e4:42: 8c:26:40:86:6f:10:5f:da:e1:b2:ef:b1:e6:ed:e3:aa:b1:d2: 49:54:5f:08:25:79:2c:ab:de:fa:d2:3c:d0:a3:82:43:a9:0b: 75:82:ba:99:3d:cf:7e:6d:e7:45:b4:23:1a:ca:c5:bd:b4:0c: 65:8f:24:a9:fc:94:42:98:c4:49:e6:29:1f:b6:9f:07:c8:de: c1:37:d4:be:74:63:e9:3e:57:bb:2d:12:5c:38:02:34:8c:0a: 9c:b5:9d:e4:98:05:b3:a4:11:81:c2:d8:58:30:88:88:99:6c: 81:60:e1:86:47:be:af:12:d6:80:f5:c6:0c:46:6d:81:51:78: 36:af:cd:bc:13:8e:c0:2e:dc:cc:9c:b1:8f:2d:7c:0c:01:46: 7c:f6:af:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2 QjMyOEFBOUIwHhcNMjYwNDE5MDMxNDM4WhcNMjYwNDI2MDMxNDM4WjAYMRYwFAYD VQQDEw02OWU0NDg5ZS0yZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfHL19Z8cAelY3aZUfgk8FOXYUqAzKdyWsirAVU2mq/rhUdpRPb4FELIyGPK z3K7mo1fbbhhio4pm34DH2dz+oqf0Ed0Cp7y3nrofDgiTrQ9fOz6idvCYKYviGQi qWtBzcmhVMba1+d5TQWOQFK2Z2HkRCs9fov9WGJKTb7+FnBhQKLU74lGukRbKEs3 bCf3Q8lhJPuh6ivLuX3N04kGAekbT7s9X8CoGtoTiUhIdsmaQHYJTHM3SdkjP1yA TfxULAaHx1IQKHN8JeAHtTI1wuOo+kICw2YzAB5Yca6T3iJ9hsJfYTYQhbILMkXA b50gwdho2iSv61oS++x5aaz7+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMyZLAY 4yb2KPNuH+7+mMbLofohMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4 QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot QWNlOGxRaUxfUjVyTW9xcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJZPmfdvBMC3Za8SUe4/MC72jXc4qQDpwqaZfjoJN6FahVcpg8EfqQx7mq33 z4C/unQObTjMSS4wKGGRKcD5VdvcZ2vw87fYjd3Da/TE7t94rZ0NPO6VnKgHC0KN YhbnZPIRXzNLsTsLxeRCjCZAhm8QX9rhsu+x5u3jqrHSSVRfCCV5LKve+tI80KOC Q6kLdYK6mT3Pfm3nRbQjGsrFvbQMZY8kqfyUQpjESeYpH7afB8jewTfUvnRj6T5X uy0SXDgCNIwKnLWd5JgFs6QRgcLYWDCIiJlsgWDhhke+rxLWgPXGDEZtgVF4Nq/N vBOOwC7czJyxjy18DAFGfPav0A== -----END CERTIFICATE-----Generated at Sun Apr 19 08:40:32 2026 by rpki-client