$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: 83kQuyCqUYQFU3b8AQ0R5iOfR609OZP5ZKy9jd/jLMg= Subject key identifier: 5A:3B:6C:8F:54:48:B3:C0:CF:08:CC:A2:E0:0A:68:48:14:F4:1F:BE Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 027D Signing time: Fri 17 Apr 2026 01:51:55 +0000 Manifest this update: Fri 17 Apr 2026 01:51:55 +0000 Manifest next update: Fri 24 Apr 2026 01:51:55 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: pHyoDANBBuNmKPgx6aSrHrmQv2Q7babtAbBTMAeiUpI=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: +jjzQDT4VXtfOv7UHvs6KHzX+DKS/3je1TxZKSVKupY=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 40EGBMsbpMDMqk64oIlNxvPswRIVzMQ9vAqZ+9/aJ30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Apr 17 01:51:55 2026 GMT Not After : Apr 24 01:51:55 2026 GMT Subject: CN=69e1923b-0289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:3a:3f:a9:7d:dc:1e:5a:0e:da:8e:7f:a3: 59:a6:93:45:57:b9:8b:cf:6b:04:fd:63:60:93:6d: 99:ae:2d:28:35:4e:f7:0a:14:20:bb:94:c3:aa:8d: 55:00:fc:f5:b6:1e:8b:46:0e:ba:76:5b:70:fb:25: f8:92:27:28:35:c4:bc:85:45:d4:64:bf:b5:d1:0b: 73:03:14:ff:aa:55:fd:2f:6b:f4:7b:c1:4a:37:03: 48:21:9b:02:a6:c7:66:1d:88:8c:ec:72:db:52:16: a6:76:7a:d1:25:eb:b0:ab:98:ee:2b:63:5a:3a:92: fb:df:ce:d3:9e:02:11:77:0b:5e:6d:c1:7e:c5:c9: 60:eb:fb:fc:fa:5a:08:e5:4f:cc:f6:76:65:c3:57: 0a:1f:8a:b3:e3:b5:2f:7b:7a:1b:e8:5f:1f:69:aa: be:c6:37:48:5e:4a:64:58:c3:16:d9:06:96:3c:9c: 85:c9:20:ae:de:99:4b:a2:ec:e2:58:64:dd:9b:4e: 43:81:59:5f:bb:9b:5d:e4:0d:24:13:e5:a2:9e:ed: a8:94:3f:f9:05:33:d1:8e:4d:b8:ee:6e:ac:d7:f6: 03:b6:37:cb:f2:51:64:91:5f:19:a8:d3:ae:8f:eb: c4:f7:79:dd:c0:58:28:6c:ac:c8:96:a4:cd:1b:1b: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3B:6C:8F:54:48:B3:C0:CF:08:CC:A2:E0:0A:68:48:14:F4:1F:BE X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:19:0e:d3:9a:a8:42:f3:04:a9:20:f6:53:3c:8b:8b:31: f1:45:55:75:56:b6:21:fe:97:5c:0b:39:dc:18:7a:d7:cc:8c: e0:e0:0e:9b:24:bd:69:b6:c4:62:52:2c:31:9e:53:c7:ba:48: 93:ae:24:f1:8b:05:8e:8d:dd:91:05:3c:e1:cb:fe:2e:f3:da: 1a:cd:4f:bf:9e:8a:ea:e1:81:59:5a:62:59:87:78:a8:62:aa: ff:42:b1:c9:42:9c:9c:f2:b5:67:e5:27:2c:f9:c1:6a:db:d4: 4e:f7:65:70:b8:59:d8:67:19:0a:1b:28:1d:1a:e2:9e:a3:f8: cf:8a:a3:21:3d:a2:29:6b:17:af:b1:ca:17:02:11:7e:14:11: d9:b8:8d:e6:34:43:7e:6d:e4:c6:7f:4e:02:ac:7a:8c:f9:7b: a4:1f:18:1f:f2:e5:c6:14:69:ee:98:ed:95:99:d6:33:ea:c1: 86:33:0a:1e:2c:7e:f2:24:13:f3:ac:48:38:1c:6c:6c:81:48: b3:f7:20:cb:d7:91:5e:fe:93:3e:4e:1d:0d:13:e6:d0:79:5d: bf:b2:93:cd:11:98:4d:44:fb:e4:09:f9:e4:83:89:02:36:1b: ef:22:4b:83:31:da:28:40:b4:41:1a:fa:07:fb:03:15:9c:f0: a4:3f:34:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwNDE3MDE1MTU1WhcNMjYwNDI0MDE1MTU1WjAYMRYwFAYD VQQDEw02OWUxOTIzYi0wMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs06P6l93B5aDtqOf6NZppNFV7mLz2sE/WNgk22Zri0oNU73ChQgu5TDqo1V APz1th6LRg66dltw+yX4kicoNcS8hUXUZL+10QtzAxT/qlX9L2v0e8FKNwNIIZsC psdmHYiM7HLbUhamdnrRJeuwq5juK2NaOpL7387TngIRdwtebcF+xclg6/v8+loI 5U/M9nZlw1cKH4qz47Uve3ob6F8faaq+xjdIXkpkWMMW2QaWPJyFySCu3plLouzi WGTdm05DgVlfu5td5A0kE+Winu2olD/5BTPRjk247m6s1/YDtjfL8lFkkV8ZqNOu j+vE93ndwFgobKzIlqTNGxv79QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFo7bI9U SLPAzwjMouAKaEgU9B++MB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgY0ZDtOaqELzBKkg9lM8i4sx8UVVdVa2If6XXAs53Bh618yM4OAOmyS9abbE YlIsMZ5Tx7pIk64k8YsFjo3dkQU84cv+LvPaGs1Pv56K6uGBWVpiWYd4qGKq/0Kx yUKcnPK1Z+UnLPnBatvUTvdlcLhZ2GcZChsoHRrinqP4z4qjIT2iKWsXr7HKFwIR fhQR2biN5jRDfm3kxn9OAqx6jPl7pB8YH/LlxhRp7pjtlZnWM+rBhjMKHix+8iQT 86xIOBxsbIFIs/cgy9eRXv6TPk4dDRPm0Hldv7KTzRGYTUT75An55IOJAjYb7yJL gzHaKEC0QRr6B/sDFZzwpD806w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:52 2026 by rpki-client