$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: oqwMEcH27vbMIw+7OKzMxREpbrE1pSu033lstVbgVvk= Subject key identifier: A4:5A:35:03:06:10:A4:D2:B7:FD:45:CE:E9:56:A6:A8:24:87:77:9D Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 48 Signing time: Fri 17 Apr 2026 08:07:46 +0000 Manifest this update: Fri 17 Apr 2026 08:07:46 +0000 Manifest next update: Fri 24 Apr 2026 08:07:46 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: 2Y6k8TgzWjYYZXjMHj+TMyP0Od83mGo7ATqtoIqcm/8=) 2: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=) 3: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Apr 17 08:07:46 2026 GMT Not After : Apr 24 08:07:46 2026 GMT Subject: CN=69e1ea52-aade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4e:73:57:ae:a1:25:6f:fc:df:c2:2e:cb:49: d0:09:82:bf:5f:c5:3b:d6:92:72:f5:95:42:77:27: d8:59:41:11:19:c9:09:71:f3:28:ff:9b:60:4b:87: 89:fe:0f:d3:20:8d:4b:37:09:6a:f3:b2:c1:49:7f: 4c:36:3d:65:0b:03:4b:ac:db:01:58:93:fd:81:c4: cf:6a:95:67:fc:c5:7a:87:62:b5:a7:00:cb:2c:d1: 21:5a:e2:54:4d:ee:2b:c9:ad:19:46:00:72:2b:d5: d2:cc:ec:cf:3a:49:81:36:19:e8:10:f6:ed:42:2f: 30:b6:92:bb:8c:08:30:f9:36:56:ec:10:58:c1:c9: e5:3a:af:74:e3:0d:21:02:13:9c:21:ee:e2:52:df: ff:a0:2d:f2:6b:d7:e2:9d:27:0c:f9:89:8c:2a:e5: a1:4a:80:35:b1:dc:ac:25:90:1c:25:3a:91:92:93: 7c:c8:fb:35:21:d4:df:95:dd:cb:ff:a4:58:c3:63: 91:96:92:90:67:55:b0:9b:0a:c0:b8:da:2c:90:52: 11:2c:33:b3:18:63:00:d9:c8:3c:79:75:25:db:6a: ef:28:7e:51:18:c1:0b:f6:44:7b:6f:74:13:99:09: 43:40:7c:a4:95:63:2f:f4:b6:54:c6:c6:d9:f3:33: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:35:03:06:10:A4:D2:B7:FD:45:CE:E9:56:A6:A8:24:87:77:9D X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:e2:95:0f:f9:85:a1:ef:1d:e0:cf:77:96:17:2c:6a:be: bd:8f:79:5a:60:41:4e:67:fc:a9:24:cf:07:cf:2b:a7:39:4f: 05:54:1d:5b:20:dc:63:00:43:10:5f:8c:4f:80:68:db:17:da: 3d:c9:6b:78:bb:96:85:4e:87:04:ea:59:e1:a6:87:be:86:43: 75:d9:fc:6d:cc:9e:9a:b6:43:17:82:b8:d9:47:b3:f0:3f:0a: 7b:6f:f9:43:aa:54:5a:93:35:f5:5e:b9:cf:7e:61:a0:73:49: bd:b0:20:40:58:b7:e5:f8:29:2c:b1:82:a9:45:81:cf:56:90: 5f:81:74:03:7e:16:22:30:59:d7:19:1a:40:f2:e3:a5:49:47: b9:f2:6e:c5:7b:04:b5:49:a1:97:ef:59:19:b9:49:8a:1f:58: c1:c9:98:98:a3:bb:f0:a0:4f:2e:a0:ca:47:5f:8b:1d:db:25: c6:70:ea:ba:e1:3b:08:d9:6b:f2:c8:36:32:93:ed:6f:e3:9f: 78:fb:e8:af:1f:e3:28:01:09:02:88:2f:ba:7e:91:cf:4d:06: 0e:95:fc:c2:8f:23:7e:8c:1f:fd:f1:75:69:e1:02:6d:23:b3: 9f:bd:8b:a0:a1:9e:32:51:a6:75:fb:70:65:d2:3d:ed:9b:22: 07:78:b7:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjA0MTcwODA3NDZaFw0yNjA0MjQwODA3NDZaMBgxFjAUBgNV BAMTDTY5ZTFlYTUyLWFhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOTnNXrqElb/zfwi7LSdAJgr9fxTvWknL1lUJ3J9hZQREZyQlx8yj/m2BLh4n+ D9MgjUs3CWrzssFJf0w2PWULA0us2wFYk/2BxM9qlWf8xXqHYrWnAMss0SFa4lRN 7ivJrRlGAHIr1dLM7M86SYE2GegQ9u1CLzC2kruMCDD5NlbsEFjByeU6r3TjDSEC E5wh7uJS3/+gLfJr1+KdJwz5iYwq5aFKgDWx3KwlkBwlOpGSk3zI+zUh1N+V3cv/ pFjDY5GWkpBnVbCbCsC42iyQUhEsM7MYYwDZyDx5dSXbau8oflEYwQv2RHtvdBOZ CUNAfKSVYy/0tlTGxtnzMwEXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpFo1AwYQ pNK3/UXO6VamqCSHd50wHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEg+KVD/mFoe8d4M93lhcsar69j3laYEFOZ/ypJM8HzyunOU8FVB1bINxjAEMQ X4xPgGjbF9o9yWt4u5aFTocE6lnhpoe+hkN12fxtzJ6atkMXgrjZR7PwPwp7b/lD qlRakzX1XrnPfmGgc0m9sCBAWLfl+CkssYKpRYHPVpBfgXQDfhYiMFnXGRpA8uOl SUe58m7FewS1SaGX71kZuUmKH1jByZiYo7vwoE8uoMpHX4sd2yXGcOq64TsI2Wvy yDYyk+1v4594++ivH+MoAQkCiC+6fpHPTQYOlfzCjyN+jB/98XVp4QJtI7OfvYug oZ4yUaZ1+3Bl0j3tmyIHeLeX -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:10 2026 by rpki-client