$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: EdB74OPxwIvihvaBBlMKJ1Wt0Ha9bMFwQvALyVucDjM= Subject key identifier: AD:AB:4F:04:E9:A5:5C:B6:05:5E:7A:3B:7F:A3:77:22:DB:92:E5:EE Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1FC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1FBC Signing time: Thu 16 Apr 2026 15:56:18 +0000 Manifest this update: Thu 16 Apr 2026 15:56:17 +0000 Manifest next update: Thu 23 Apr 2026 15:56:17 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: aOX1//XGfaEelAypJFE9TWCCbkJOpILlL3gDayDN2ok=) 2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: GjOMUfWbv01wGvJ1FvR6+5UWkPxfCYmtbqRruiSURbE=) 3: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=) 4: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: t9f19zC5S/IYriertqckeC3YEvgJ+JaLXV3b4hj/fXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8132 (0x1fc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Apr 16 15:56:17 2026 GMT Not After : Apr 23 15:56:17 2026 GMT Subject: CN=69e106a1-968c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:df:55:bf:ee:01:e8:c1:66:b0:9e:98:16: bb:47:39:69:52:43:a5:62:b2:53:43:5a:d8:bb:4a: b6:7b:c4:23:24:bb:73:5e:33:e6:88:df:5e:5f:ff: c7:da:72:ba:a3:28:35:3f:63:4a:01:22:bf:6a:05: 4b:40:71:92:2e:ca:27:47:c2:b6:d6:ab:a6:07:b7: 06:f8:6d:03:7e:14:38:3d:71:78:34:0f:d6:f8:8a: 73:73:0b:4a:32:52:10:a4:41:ee:1a:0c:69:6c:a3: ed:65:a0:14:84:1b:5f:72:fb:60:1e:05:f3:3d:d8: 8e:59:3a:b7:8a:94:95:01:06:e5:44:14:22:e2:cf: 8f:c4:ec:e1:83:3e:7e:1f:cb:ba:c8:20:54:b8:90: a4:60:e8:91:0f:ab:e9:95:b0:7a:19:f9:1d:7f:a7: 76:14:03:3e:c3:55:b1:94:45:66:68:d1:4a:ac:3e: 0b:35:b4:75:87:e5:03:b8:ca:2b:e7:f6:e8:6f:2f: b0:6c:9c:57:e0:3f:99:59:2d:53:53:ea:96:a5:3a: 35:7a:5a:48:d4:2f:4e:57:ee:88:63:85:22:5f:fb: c4:cc:a3:ab:f1:40:ed:84:8c:a8:56:0a:ac:db:53: f3:72:17:71:50:03:1f:7c:18:85:71:cb:62:69:5e: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AB:4F:04:E9:A5:5C:B6:05:5E:7A:3B:7F:A3:77:22:DB:92:E5:EE X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7d:f6:6b:b2:8f:b9:7b:5d:d9:42:39:29:54:8a:a9:74:34: f8:1a:ce:47:5c:da:db:82:3b:dc:a7:29:bb:f7:70:c8:f8:50: 82:38:e7:88:b7:1a:bd:f7:21:e2:c7:fe:ed:a5:82:66:a2:0d: 7d:d0:8c:6b:49:4d:28:06:3c:aa:c5:19:a0:2b:43:d5:09:22: fe:96:07:5e:14:6a:07:ae:ef:6f:a9:57:6f:da:c7:82:07:40: 4c:52:d5:d6:0b:c5:64:92:f6:54:ce:1c:89:c8:c3:53:27:cc: f3:de:bb:fb:3d:8f:fd:14:b9:39:30:41:07:61:a7:53:2a:d9: 87:7b:07:7b:c1:f8:b4:43:fe:57:e2:e8:b4:da:09:40:be:e9: 65:f9:1a:3a:8b:e0:82:37:8e:df:0b:e8:b5:cc:26:3e:f2:1f: 1f:0b:d4:6e:26:32:0b:34:e2:86:1a:56:71:62:08:71:4b:75: ee:1b:79:76:58:50:31:ff:ac:e5:74:c0:fd:44:df:73:85:71: 0c:98:ac:11:d5:f9:b5:7a:52:65:5b:09:c3:45:38:f0:43:ba: 72:ed:92:45:c9:2f:cf:94:10:88:31:3e:78:85:21:62:0f:ac: 7f:44:87:cd:76:19:ea:ed:2c:05:fa:ec:30:9e:30:ff:c7:75: 42:53:bd:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYwNDE2MTU1NjE3WhcNMjYwNDIzMTU1NjE3WjAYMRYwFAYD VQQDEw02OWUxMDZhMS05NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIjfVb/uAejBZrCemBa7RzlpUkOlYrJTQ1rYu0q2e8QjJLtzXjPmiN9eX//H 2nK6oyg1P2NKASK/agVLQHGSLsonR8K21qumB7cG+G0DfhQ4PXF4NA/W+IpzcwtK MlIQpEHuGgxpbKPtZaAUhBtfcvtgHgXzPdiOWTq3ipSVAQblRBQi4s+PxOzhgz5+ H8u6yCBUuJCkYOiRD6vplbB6Gfkdf6d2FAM+w1WxlEVmaNFKrD4LNbR1h+UDuMor 5/boby+wbJxX4D+ZWS1TU+qWpTo1elpI1C9OV+6IY4UiX/vEzKOr8UDthIyoVgqs 21PzchdxUAMffBiFcctiaV4WcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2rTwTp pVy2BV56O3+jdyLbkuXuMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWn32a7KPuXtd2UI5KVSKqXQ0+BrOR1za24I73Kcpu/dwyPhQgjjniLcavfch 4sf+7aWCZqINfdCMa0lNKAY8qsUZoCtD1Qki/pYHXhRqB67vb6lXb9rHggdATFLV 1gvFZJL2VM4cicjDUyfM8967+z2P/RS5OTBBB2GnUyrZh3sHe8H4tEP+V+LotNoJ QL7pZfkaOovggjeO3wvotcwmPvIfHwvUbiYyCzTihhpWcWIIcUt17ht5dlhQMf+s 5XTA/UTfc4VxDJisEdX5tXpSZVsJw0U48EO6cu2SRckvz5QQiDE+eIUhYg+sf0SH zXYZ6u0sBfrsMJ4w/8d1QlO98Q== -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:20 2026 by rpki-client