$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: DC3rcEVt/Q3zkqOMDf1Q+10vHY5O453e6qpjqGo1ArQ= Subject key identifier: 43:D1:D0:70:E0:AB:CB:7E:97:E1:72:FD:23:51:88:54:D6:AB:1A:52 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 013B Signing time: Fri 17 Apr 2026 05:08:58 +0000 Manifest this update: Fri 17 Apr 2026 05:08:57 +0000 Manifest next update: Fri 24 Apr 2026 05:08:57 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: pIDaLoNG1c6ZqvKCyv2TMjA2dkJQ3kYhl0T6S1C+yR8=) 2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=) 3: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Apr 17 05:08:57 2026 GMT Not After : Apr 24 05:08:57 2026 GMT Subject: CN=69e1c06a-1bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:4b:66:32:7f:a9:c4:49:03:b8:60:88:66: e6:d9:01:e4:46:25:eb:2a:5c:e5:fa:28:dd:cb:47: c1:c9:be:7f:ad:c5:18:54:c0:b5:a5:76:95:a7:e2: 3c:0e:96:f6:81:9f:01:0d:52:11:8c:79:e8:41:47: 18:60:42:71:4c:80:ed:5a:af:a5:d2:ed:da:ea:71: ac:8c:f3:25:88:eb:43:b0:0d:4e:5a:a6:a8:e2:82: 0e:15:e6:09:36:a6:af:c4:a3:34:84:a8:72:0f:5b: 2c:30:7f:02:7e:46:0a:06:c1:9e:e2:22:3f:20:f8: fd:c5:9a:89:5e:9e:ec:ec:9a:29:10:44:02:ff:e8: 8d:b9:ba:a7:52:25:3f:95:63:34:20:45:49:69:af: 74:15:29:a4:6a:07:99:52:69:02:58:4c:a7:a2:ca: 68:51:ad:d3:51:9e:ae:10:d2:ba:a7:38:4e:d0:0d: ba:c1:c6:97:bd:0c:08:f8:e5:c0:27:bc:25:4c:85: 83:6d:1d:6a:d1:8b:1e:0a:0f:31:75:90:3f:e9:77: c4:66:4c:d0:2a:bc:b7:77:f1:d6:db:cd:23:68:3f: 21:75:85:ab:cc:95:fc:19:c0:bd:68:8a:db:6a:65: 84:95:5f:03:bc:19:49:2d:fd:2d:8b:68:10:45:17: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:D0:70:E0:AB:CB:7E:97:E1:72:FD:23:51:88:54:D6:AB:1A:52 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:56:a1:f0:cf:38:ed:43:3a:87:cf:f3:32:f7:fa:b7:19:db: 7f:d3:bf:79:20:cd:72:e6:04:60:44:16:9d:cd:1a:27:cc:94: 9b:38:ee:65:f4:67:c5:fe:c5:90:c2:a3:6f:de:8b:5b:5f:0a: f2:aa:aa:dc:66:4a:fe:46:db:f2:73:88:e0:ed:e6:8b:f1:e5: a3:bf:a4:53:01:7b:c1:99:8f:0b:c3:8b:29:47:11:0f:95:52: a5:62:3f:3f:a4:e4:9f:fe:b7:65:9f:fa:94:45:e2:3d:05:7f: aa:9a:1a:c8:59:bc:da:be:bb:83:b7:91:67:04:76:fe:ff:18: 24:13:dc:cf:c5:7c:42:e2:7e:0b:9a:9f:bb:78:5e:1c:ad:9d: 54:5e:10:ac:b6:17:4e:8c:13:4a:ba:80:8f:44:91:92:25:af: a5:ce:9b:89:8e:ba:ee:63:96:4c:71:84:14:59:1c:0b:4f:cf: 00:4b:f6:19:29:0b:01:3b:e7:34:a5:21:9c:90:1a:15:85:74: e2:a0:7c:17:86:52:3d:59:1b:bd:8f:7f:29:d4:cf:50:d8:73: 2d:32:1b:3d:15:e2:2a:ca:0a:2d:b0:8b:b2:26:43:fe:b4:f9: f5:5d:ef:60:95:95:bd:77:f9:ed:52:bb:84:e7:6f:72:92:aa: e3:8c:58:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjYwNDE3MDUwODU3WhcNMjYwNDI0MDUwODU3WjAYMRYwFAYD VQQDEw02OWUxYzA2YS0xYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv9LZjJ/qcRJA7hgiGbm2QHkRiXrKlzl+ijdy0fByb5/rcUYVMC1pXaVp+I8 Dpb2gZ8BDVIRjHnoQUcYYEJxTIDtWq+l0u3a6nGsjPMliOtDsA1OWqao4oIOFeYJ NqavxKM0hKhyD1ssMH8CfkYKBsGe4iI/IPj9xZqJXp7s7JopEEQC/+iNubqnUiU/ lWM0IEVJaa90FSmkageZUmkCWEynospoUa3TUZ6uENK6pzhO0A26wcaXvQwI+OXA J7wlTIWDbR1q0YseCg8xdZA/6XfEZkzQKry3d/HW280jaD8hdYWrzJX8GcC9aIrb amWElV8DvBlJLf0ti2gQRRe2aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPR0HDg q8t+l+Fy/SNRiFTWqxpSMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFah8M847UM6h8/zMvf6txnbf9O/eSDNcuYEYEQWnc0aJ8yUmzjuZfRnxf7F kMKjb96LW18K8qqq3GZK/kbb8nOI4O3mi/Hlo7+kUwF7wZmPC8OLKUcRD5VSpWI/ P6Tkn/63ZZ/6lEXiPQV/qpoayFm82r67g7eRZwR2/v8YJBPcz8V8QuJ+C5qfu3he HK2dVF4QrLYXTowTSrqAj0SRkiWvpc6biY667mOWTHGEFFkcC0/PAEv2GSkLATvn NKUhnJAaFYV04qB8F4ZSPVkbvY9/KdTPUNhzLTIbPRXiKsoKLbCLsiZD/rT59V3v YJWVvXf57VK7hOdvcpKq44xYVg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:14:24 2026 by rpki-client