$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: YgCLICiIEP3LUDssLBaym6CU/wywcp0CpiUHpAaCzZY= Subject key identifier: B9:35:38:CD:FB:B0:F5:EA:EE:65:2E:57:61:0A:07:0B:F3:93:BD:A8 Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: BA Signing time: Fri 17 Apr 2026 06:47:52 +0000 Manifest this update: Fri 17 Apr 2026 06:47:51 +0000 Manifest next update: Fri 24 Apr 2026 06:47:51 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: 5195TTHtKZGieM9ZB8ZJedG1IYqSOlJPOjcAG9GK0KI=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: Apr 17 06:47:51 2026 GMT Not After : Apr 24 06:47:51 2026 GMT Subject: CN=69e1d798-ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:c3:b0:1f:ec:16:2c:53:91:9d:f2:fa:b0: 6d:77:87:6d:0a:8f:6b:d2:f7:1d:dd:b8:2c:14:5d: 07:44:ab:c4:2f:eb:1b:23:c5:7c:a3:a8:2d:a8:02: c5:05:4b:e7:dd:dc:4c:0f:ca:a7:dc:15:9c:cd:b7: e3:ac:0a:c4:cf:2a:4a:56:dd:71:c8:6a:4e:7d:12: b5:ea:ef:26:1b:a1:a3:5d:58:16:05:54:94:cc:a3: c0:08:8e:7f:9f:a9:9f:7c:6d:64:70:e2:50:5d:aa: 1e:37:3a:7d:b3:42:ae:00:7a:34:41:68:02:bb:48: 28:46:8e:d3:e3:af:6d:ef:9c:f1:6d:61:41:69:43: 11:31:f9:70:ef:94:64:8b:7e:5f:28:73:f8:ca:b6: be:ed:b7:cd:0e:60:f1:c7:62:ac:58:82:db:28:c1: 62:27:8e:a8:7d:ee:59:a8:2c:39:cb:68:f1:a1:d8: bd:db:57:8b:e7:21:0e:6c:72:3a:1e:1c:a7:22:ae: 10:fe:24:7f:97:53:7c:88:f1:a7:9d:66:33:58:fc: f2:58:40:b2:6c:2c:63:78:ee:dd:5c:29:34:67:35: a4:56:e6:a4:58:7f:ee:57:bf:d3:81:12:0a:f4:4d: 95:ca:24:03:57:ae:5a:9d:37:13:c9:fb:3f:a2:9b: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:35:38:CD:FB:B0:F5:EA:EE:65:2E:57:61:0A:07:0B:F3:93:BD:A8 X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:52:7d:a8:92:37:6c:c0:27:18:2e:5c:12:10:02:23:00:b4: 96:ff:64:98:bb:65:25:2e:dd:99:7c:77:bf:05:5b:ff:e9:81: 9a:53:4e:ed:11:ef:b6:1a:c3:a8:3c:ff:15:d4:3a:4b:f2:ef: d2:22:46:51:78:c2:39:b7:63:52:fc:43:56:e6:be:18:f0:d8: 90:c3:23:31:fb:52:bb:dd:3a:99:01:7f:97:68:4a:f6:cf:71: e8:62:7e:27:81:65:d1:db:98:5f:30:8f:16:4c:71:e5:aa:a5: e2:6d:21:9d:df:42:b3:df:08:41:8b:1d:65:38:3a:2e:81:48: 8e:6d:62:f3:bf:24:45:be:ab:08:7b:a7:98:e4:a9:76:d3:a5: 5e:35:86:42:89:c5:72:2f:47:56:3b:c6:72:5c:c0:ee:3d:7a: b6:f2:44:8b:42:9e:f9:d8:2b:1d:c9:9b:96:f2:f4:f7:c3:e0: 0e:1c:57:ed:6c:0f:27:6b:5e:61:f6:ad:04:ae:45:e2:68:82: 1d:a0:e6:2e:27:a7:84:5e:0a:63:f2:f0:70:83:de:22:96:06: 4d:26:d9:71:63:82:31:b3:c8:bf:d2:9d:a3:22:00:71:5e:88: ab:f1:6c:5e:02:cb:33:9f:54:ae:a7:79:89:19:0b:ff:bc:ec: 06:b8:74:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3QUExMTAvBgNVBAUTKDc1RkUzN0E4M0VEQTgwMEE2MTAyNjA4NTg3RURGNDA4 OUQ4MjQwRTAwHhcNMjYwNDE3MDY0NzUxWhcNMjYwNDI0MDY0NzUxWjAYMRYwFAYD VQQDEw02OWUxZDc5OC1lYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxULDsB/sFixTkZ3y+rBtd4dtCo9r0vcd3bgsFF0HRKvEL+sbI8V8o6gtqALF BUvn3dxMD8qn3BWczbfjrArEzypKVt1xyGpOfRK16u8mG6GjXVgWBVSUzKPACI5/ n6mffG1kcOJQXaoeNzp9s0KuAHo0QWgCu0goRo7T469t75zxbWFBaUMRMflw75Rk i35fKHP4yra+7bfNDmDxx2KsWILbKMFiJ46ofe5ZqCw5y2jxodi921eL5yEObHI6 HhynIq4Q/iR/l1N8iPGnnWYzWPzyWECybCxjeO7dXCk0ZzWkVuakWH/uV7/TgRIK 9E2VyiQDV65anTcTyfs/ops9GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLk1OM37 sPXq7mUuV2EKBwvzk72oMB8GA1UdIwQYMBaAFHX+N6g+2oAKYQJghYft9AidgkDg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzdBQS9EMjJFREEzNDJB ODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdBcGhBbUNGaC0zMENKMkNR T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzdBQS9EMjJFREEzNDJBODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdB cGhBbUNGaC0zMENKMkNRT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFJ9qJI3bMAnGC5cEhACIwC0lv9kmLtlJS7dmXx3vwVb/+mBmlNO7RHvthrD qDz/FdQ6S/Lv0iJGUXjCObdjUvxDVua+GPDYkMMjMftSu906mQF/l2hK9s9x6GJ+ J4Fl0duYXzCPFkxx5aql4m0hnd9Cs98IQYsdZTg6LoFIjm1i878kRb6rCHunmOSp dtOlXjWGQonFci9HVjvGclzA7j16tvJEi0Ke+dgrHcmblvL098PgDhxX7WwPJ2te YfatBK5F4miCHaDmLienhF4KY/LwcIPeIpYGTSbZcWOCMbPIv9KdoyIAcV6Iq/Fs XgLLM59Urqd5iRkL/7zsBrh06Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:12:09 2026 by rpki-client