$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.mft (raw, json) Hash identifier: cWmi/wp7G6VqTX9mG45hUF+KDjUb7fbg1UwwpRmZU/U= Subject key identifier: 3F:82:D6:79:08:EF:D9:3D:F3:F0:F4:88:E4:3A:A9:46:59:1F:95:6D Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft Manifest number: 33 Signing time: Fri 17 Apr 2026 08:21:02 +0000 Manifest this update: Fri 17 Apr 2026 08:21:02 +0000 Manifest next update: Fri 24 Apr 2026 08:21:02 +0000 Files and hashes: 1: 9fW2D5FdvXIk_85g8fnQXoNwLvM.crl (hash: oxjgPdKvXru9RouKTgxtKffATLxqsb5WZS7SulSNS98=) 2: F59E9504F20611F0B4D6054A4A6F56BC.roa (hash: fJ10i1I3CVn/cq/HNYJ87da7lOqBMrG/ft9ahjiVUac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Validity Not Before: Apr 17 08:21:02 2026 GMT Not After : Apr 24 08:21:02 2026 GMT Subject: CN=69e1ed6e-4366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:8b:bf:aa:b2:24:cc:f8:d3:e3:0a:8c:59: 38:a1:b6:0e:cc:5c:b8:18:0d:cd:ce:2d:a5:01:c8: c3:02:fc:6f:88:14:e9:98:a1:5e:9c:20:9f:bb:eb: 5a:bb:d0:4e:22:e3:7a:52:c5:50:56:a3:b6:28:58: a1:b6:08:a1:5b:eb:d9:ea:e9:85:cc:3b:e9:11:72: 6d:37:35:16:33:87:0a:c5:dc:e8:25:6e:9f:0b:94: b9:a2:83:1b:fc:fd:f4:9b:ad:ac:f6:e4:e5:2f:65: 3a:cb:d8:d1:e2:da:dc:dd:08:ac:46:e8:c8:e8:3a: 8a:bb:02:d7:64:18:03:c5:32:d9:3f:16:b6:6d:ef: a4:20:b5:8f:0b:ad:e8:d1:9a:20:d9:a9:63:81:22: 4c:d5:93:bd:69:29:b9:37:09:fb:06:6c:8a:a9:9b: 9b:11:3e:c3:50:9e:9e:90:4c:16:f7:f9:3a:46:ca: 29:a7:26:f2:86:50:a5:ee:68:47:3e:7b:33:16:b2: 4d:40:73:eb:42:27:bc:b2:e2:e7:94:7c:d0:57:b5: 9d:77:32:a6:c3:c8:7d:fb:a1:a6:4c:f8:57:ce:de: c0:2d:83:0f:0b:ad:93:42:42:79:e4:b8:1f:74:d9: ff:e5:76:a5:51:0d:95:09:e8:a4:9d:a2:6c:10:95: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:82:D6:79:08:EF:D9:3D:F3:F0:F4:88:E4:3A:A9:46:59:1F:95:6D X509v3 Authority Key Identifier: keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ce:5e:af:9f:8d:2b:5c:ff:b0:84:a5:c9:1c:c9:cb:e7:b5: 63:66:d0:5e:65:12:1c:be:9d:8a:f6:c8:59:89:18:18:ad:f1: 23:68:4a:0e:54:53:bd:5c:03:0d:b4:52:52:f7:53:7c:96:4d: 81:4b:7d:8b:cb:57:d9:0e:b4:3e:01:8f:23:eb:f8:24:43:66: 47:6c:b7:51:3b:87:47:2f:e0:0a:b7:5e:9a:4e:85:bd:ca:32: 21:36:6b:e7:67:95:1d:35:6b:36:f3:6a:d1:9b:93:fa:9b:63: 03:a6:0c:27:da:ec:c7:24:95:4f:c1:e6:b6:33:e8:a7:5a:d2: eb:de:e0:6a:35:31:80:8e:fd:3b:ca:93:87:1a:da:27:1c:be: ea:3e:01:4b:8c:8a:02:34:6f:db:88:0b:99:e0:75:2c:5b:e9: 9f:5d:2f:14:9e:37:44:26:9d:45:b3:cc:d8:d2:a9:26:35:55: 22:f8:af:a9:82:5c:86:37:a0:47:ca:a1:7b:c2:67:e1:fe:2b: 2b:94:dc:a0:09:6e:bb:e4:2a:c9:ca:d1:c2:2b:49:81:3f:0d: 48:ff:af:5d:06:18:87:e9:35:be:c6:e4:fd:d5:61:86:b4:1e: 26:eb:92:69:33:1b:c8:6f:e6:03:7d:0d:d2:93:53:d3:10:ef: ac:c2:85:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTg1QjExMC8GA1UEBRMoRjVGNUI2MEY5MTVEQkQ3MjI0RkZDRTYwRjFGOUQwNUU4 MzcwMkVGMzAeFw0yNjA0MTcwODIxMDJaFw0yNjA0MjQwODIxMDJaMBgxFjAUBgNV BAMTDTY5ZTFlZDZlLTQzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmz4u/qrIkzPjT4wqMWTihtg7MXLgYDc3OLaUByMMC/G+IFOmYoV6cIJ+761q7 0E4i43pSxVBWo7YoWKG2CKFb69nq6YXMO+kRcm03NRYzhwrF3Oglbp8LlLmigxv8 /fSbraz25OUvZTrL2NHi2tzdCKxG6MjoOoq7AtdkGAPFMtk/FrZt76QgtY8LrejR miDZqWOBIkzVk71pKbk3CfsGbIqpm5sRPsNQnp6QTBb3+TpGyimnJvKGUKXuaEc+ ezMWsk1Ac+tCJ7yy4ueUfNBXtZ13MqbDyH37oaZM+FfO3sAtgw8LrZNCQnnkuB90 2f/ldqVRDZUJ6KSdomwQld43AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUP4LWeQjv 2T3z8PSI5DqpRlkflW0wHwYDVR0jBBgwFoAU9fW2D5FdvXIk/85g8fnQXoNwLvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0I4NkNDRjU4RjIw NTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJa184NWc4Zm5RWG9Od0x2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWZXMkQ1RmR2WElrXzg1ZzhmblFYb053THZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODVCL0I4NkNDRjU4RjIwNTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJ a184NWc4Zm5RWG9Od0x2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMzl6vn40rXP+whKXJHMnL57VjZtBeZRIcvp2K9shZiRgYrfEjaEoOVFO9XAMN tFJS91N8lk2BS32Ly1fZDrQ+AY8j6/gkQ2ZHbLdRO4dHL+AKt16aToW9yjIhNmvn Z5UdNWs282rRm5P6m2MDpgwn2uzHJJVPwea2M+inWtLr3uBqNTGAjv07ypOHGton HL7qPgFLjIoCNG/biAuZ4HUsW+mfXS8UnjdEJp1Fs8zY0qkmNVUi+K+pglyGN6BH yqF7wmfh/isrlNygCW675CrJytHCK0mBPw1I/69dBhiH6TW+xuT91WGGtB4m65Jp MxvIb+YDfQ3Sk1PTEO+swoUe -----END CERTIFICATE-----Generated at Fri Apr 17 11:50:10 2026 by rpki-client