$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: U/p0LacsPLWWW3x08RTBBr4URqIUazgFLxHWEJI8Mbw= Subject key identifier: 39:31:6E:7A:1C:9D:BD:97:AD:91:68:23:56:ED:60:65:2F:47:63:0E Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 59 Signing time: Thu 16 Apr 2026 14:45:40 +0000 Manifest this update: Thu 16 Apr 2026 14:45:39 +0000 Manifest next update: Thu 23 Apr 2026 14:45:39 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: rBCUYbVqPUQJ2XxROolBsbhxls0ZieZpTlIzJJQAP9Q=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: 2fuL5HR83y1lHVu02OBTTtqwAHQ9hwGuikZsXGexJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Apr 16 14:45:39 2026 GMT Not After : Apr 23 14:45:39 2026 GMT Subject: CN=69e0f613-fa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:b7:89:cb:98:dc:32:1d:f0:47:b6:fe:3f: ef:d1:80:07:33:f8:79:b2:9e:91:45:06:2f:26:4d: 35:36:bd:f1:69:fa:d8:5a:8d:b3:a4:bd:7f:e4:d0: bc:df:59:81:1a:0d:36:53:9e:53:c7:5d:da:c7:1c: b4:a6:59:12:7b:4a:c0:78:46:8e:64:ea:89:84:0a: b8:45:dd:ad:4e:7f:5d:7e:2a:8a:90:56:e0:6b:26: e5:43:93:e7:0b:73:47:9e:f4:85:72:08:d6:52:f2: 27:c7:f6:e4:1e:19:50:22:34:27:43:3a:31:41:74: 99:87:7a:7d:e4:f3:ee:63:71:31:d9:83:90:27:93: 49:53:16:99:dd:00:72:e3:5b:88:9a:99:5b:cc:c7: 1a:f6:a1:12:4a:20:cd:31:55:24:d9:25:9a:fb:8b: 4d:52:26:f2:3c:60:92:fb:1d:60:1e:a3:9e:d2:07: c9:3d:5c:54:63:48:3f:f0:f6:b7:d5:f7:97:4a:a7: 13:d1:f0:4b:9c:1e:e2:c8:54:bb:35:77:44:81:68: c6:11:c9:d5:52:78:0a:95:3d:b0:62:3d:34:25:f6: 31:12:ac:7f:62:e5:50:35:c4:8a:8c:07:be:11:be: 77:74:71:72:e5:f7:d2:9a:83:84:82:e0:53:6f:73: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:31:6E:7A:1C:9D:BD:97:AD:91:68:23:56:ED:60:65:2F:47:63:0E X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2d:e4:78:3c:58:bc:98:16:8a:8c:a3:d2:a3:96:de:00:df: a9:0d:3f:37:c7:d1:56:9a:c5:40:01:ab:63:80:4a:fc:b4:44: 58:2d:8d:02:31:63:4c:ef:4e:a3:e7:3b:94:34:b1:e2:81:fb: 5c:76:01:ac:a1:02:b4:b5:f5:d9:8a:13:f6:22:40:b4:9b:13: 97:74:66:48:89:60:6d:44:fa:ec:8c:58:7e:b4:c9:d7:bd:1f: 64:04:1c:4d:b3:00:59:1f:6b:58:83:16:cf:90:98:b2:6a:79: be:5e:93:2a:f5:33:fb:15:07:fa:4d:e8:14:08:47:d3:a1:5a: 51:e5:40:b4:0d:38:1c:ab:9b:da:42:fd:bb:d8:4c:d9:c1:c8: b7:a7:4d:c2:61:d4:b6:77:cb:31:a5:d7:5c:d7:86:3d:40:45: 5a:f8:2c:58:be:e8:63:d2:e9:93:1f:57:78:12:cd:fb:ef:21: 8a:24:a6:d2:fd:ae:01:5f:37:99:b3:a8:34:9e:90:db:c9:ad: f7:82:3c:18:bc:f6:6d:6f:68:aa:63:6b:24:f7:cf:e7:05:46: ab:d2:8f:86:36:17:12:a1:bd:73:12:0f:92:ae:2b:02:d1:02: 54:a5:54:60:73:c7:3e:95:24:fa:bb:fd:c4:60:47:98:7f:d0: 81:4c:c3:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNjA0MTYxNDQ1MzlaFw0yNjA0MjMxNDQ1MzlaMBgxFjAUBgNV BAMTDTY5ZTBmNjEzLWZhMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCS+7eJy5jcMh3wR7b+P+/RgAcz+HmynpFFBi8mTTU2vfFp+thajbOkvX/k0Lzf WYEaDTZTnlPHXdrHHLSmWRJ7SsB4Ro5k6omECrhF3a1Of11+KoqQVuBrJuVDk+cL c0ee9IVyCNZS8ifH9uQeGVAiNCdDOjFBdJmHen3k8+5jcTHZg5Ank0lTFpndAHLj W4iamVvMxxr2oRJKIM0xVSTZJZr7i01SJvI8YJL7HWAeo57SB8k9XFRjSD/w9rfV 95dKpxPR8EucHuLIVLs1d0SBaMYRydVSeAqVPbBiPTQl9jESrH9i5VA1xIqMB74R vnd0cXLl99Kag4SC4FNvc0uvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOTFuehyd vZetkWgjVu1gZS9HYw4wHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYLeR4PFi8mBaKjKPSo5beAN+pDT83x9FWmsVAAatjgEr8tERYLY0CMWNM706j 5zuUNLHigftcdgGsoQK0tfXZihP2IkC0mxOXdGZIiWBtRPrsjFh+tMnXvR9kBBxN swBZH2tYgxbPkJiyanm+XpMq9TP7FQf6TegUCEfToVpR5UC0DTgcq5vaQv272EzZ wci3p03CYdS2d8sxpddc14Y9QEVa+CxYvuhj0umTH1d4Es377yGKJKbS/a4BXzeZ s6g0npDbya33gjwYvPZtb2iqY2sk98/nBUar0o+GNhcSob1zEg+SrisC0QJUpVRg c8c+lST6u/3EYEeYf9CBTMMI -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:03 2026 by rpki-client