$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json) Hash identifier: 2iEMoQpbwlW7i17IBMsv2cTN+FLlZuZbGvZMrjXV24k= Subject key identifier: 37:E8:65:A3:99:81:60:07:C8:09:BF:5E:B2:E0:2B:C2:11:85:C6:16 Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft Manifest number: 01CB Signing time: Fri 17 Apr 2026 03:33:30 +0000 Manifest this update: Fri 17 Apr 2026 03:33:30 +0000 Manifest next update: Fri 24 Apr 2026 03:33:30 +0000 Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: a5+Hu+V+pU40osjfa+7UBGmFF9R2YGwtc2nbW4TGV3I=) 2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: 4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=) 3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: ySADP91L9zzRBTSfDoHJ50+Ik7XzeYcUmFcCyfVbDoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Validity Not Before: Apr 17 03:33:30 2026 GMT Not After : Apr 24 03:33:30 2026 GMT Subject: CN=69e1aa0a-0975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:62:62:67:1e:d3:60:83:48:f4:e5:1f:3c: 58:c6:7e:12:c3:62:61:87:10:d0:ca:c3:fa:9c:3d: aa:8b:c6:86:59:e5:29:f5:6b:ed:57:c2:45:7d:e1: cb:2c:d5:c2:8d:f9:cc:35:a4:c3:cf:0e:77:44:67: cd:f4:36:ed:30:08:97:94:94:4c:f4:78:69:29:5e: 84:5f:e7:cc:f9:b9:3b:00:03:1e:92:66:5b:27:80: ab:ab:ad:55:96:65:fc:d5:0c:06:4b:07:56:17:fb: 27:11:64:b4:99:f1:41:6d:41:3d:e2:62:b8:a9:01: 27:57:66:3e:f2:ed:bb:36:f7:d5:fb:75:e7:08:60: cb:76:dd:9f:77:03:e9:00:ce:23:cd:54:28:f8:af: f3:8b:bb:bf:a1:ac:85:a6:c7:35:4e:e5:40:7c:9c: cd:ab:a0:ec:36:12:02:1a:cb:3c:ce:ef:1a:6b:91: 46:df:0d:5d:fb:23:7c:8b:74:d9:c7:6c:7f:43:28: 47:a5:5c:e6:d7:02:06:9c:06:b6:7b:30:77:5c:2f: 82:5e:5e:60:08:b6:f0:06:34:b5:ab:af:99:af:12: 3c:08:2e:c6:a8:10:bf:d2:6e:d5:21:e3:c3:40:ed: 31:0d:ca:8a:3e:9c:81:bb:6b:4c:0f:aa:f5:32:dc: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:65:A3:99:81:60:07:C8:09:BF:5E:B2:E0:2B:C2:11:85:C6:16 X509v3 Authority Key Identifier: keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a8:4b:63:71:ce:10:48:89:ee:5e:e7:b5:4c:eb:39:fc:1b: 26:8e:c1:e6:84:6b:16:7b:e3:60:e1:01:7e:71:dd:0e:47:0b: ea:1d:23:7e:7a:20:b2:78:a3:7a:5a:50:e4:f9:94:1d:3a:e6: 3e:6e:0f:4d:39:a6:9c:7f:0a:c7:8d:b2:8f:bf:a9:07:ab:5b: 43:dc:02:fd:b2:53:15:36:58:24:6c:ef:0e:09:0e:e6:30:58: ee:8d:12:f0:8d:b4:4d:2f:57:59:ae:a7:47:77:87:55:c7:5e: 9b:0c:11:84:0c:28:e9:b7:70:01:c2:58:6c:35:9c:23:fa:b5: 4f:fa:09:cb:77:3d:3e:3d:34:6b:93:c7:54:c6:40:27:37:2d: 4a:cf:0f:f2:8e:e9:06:f8:10:82:59:85:28:78:0f:83:a3:d6: 93:a0:fd:be:e5:6e:dc:d4:bb:55:d2:77:9a:3a:e4:bc:9d:b7: f9:1e:e7:4c:40:9f:25:a9:f3:13:b3:d7:87:90:c7:66:1b:80: 3f:af:e9:bd:16:df:1d:b6:14:e8:d8:4c:22:1e:ec:12:8e:5a: 31:e9:16:ad:a3:62:3d:3b:a0:71:87:52:02:eb:a7:d5:04:82: ed:1d:f3:1a:38:ca:eb:68:01:2a:8d:fc:65:b6:9e:02:20:a7: 99:d3:cb:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjgxMTAvBgNVBAUTKEFGRkNFNjM3OTg4MTY1RTZDNTFCRkJGRUJEMTI4M0Q1 MTEyNDAxOTAwHhcNMjYwNDE3MDMzMzMwWhcNMjYwNDI0MDMzMzMwWjAYMRYwFAYD VQQDEw02OWUxYWEwYS0wOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jJiYmce02CDSPTlHzxYxn4Sw2JhhxDQysP6nD2qi8aGWeUp9WvtV8JFfeHL LNXCjfnMNaTDzw53RGfN9DbtMAiXlJRM9HhpKV6EX+fM+bk7AAMekmZbJ4Crq61V lmX81QwGSwdWF/snEWS0mfFBbUE94mK4qQEnV2Y+8u27NvfV+3XnCGDLdt2fdwPp AM4jzVQo+K/zi7u/oayFpsc1TuVAfJzNq6DsNhICGss8zu8aa5FG3w1d+yN8i3TZ x2x/QyhHpVzm1wIGnAa2ezB3XC+CXl5gCLbwBjS1q6+ZrxI8CC7GqBC/0m7VIePD QO0xDcqKPpyBu2tMD6r1MtwN4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfoZaOZ gWAHyAm/XrLgK8IRhcYWMB8GA1UdIwQYMBaAFK/85jeYgWXmxRv7/r0Sg9URJAGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2OC84Mjc1MjRFODhF RTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlplYkZHX3YtdlJLRDFSRWtB WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0FaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlpl YkZHX3YtdlJLRDFSRWtBWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASahLY3HOEEiJ7l7ntUzrOfwbJo7B5oRrFnvjYOEBfnHdDkcL6h0jfnogsnij elpQ5PmUHTrmPm4PTTmmnH8Kx42yj7+pB6tbQ9wC/bJTFTZYJGzvDgkO5jBY7o0S 8I20TS9XWa6nR3eHVcdemwwRhAwo6bdwAcJYbDWcI/q1T/oJy3c9Pj00a5PHVMZA JzctSs8P8o7pBvgQglmFKHgPg6PWk6D9vuVu3NS7VdJ3mjrkvJ23+R7nTECfJanz E7PXh5DHZhuAP6/pvRbfHbYU6NhMIh7sEo5aMekWraNiPTugcYdSAuun1QSC7R3z GjjK62gBKo38ZbaeAiCnmdPLCA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:48:02 2026 by rpki-client