$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: Lme8l3koQfQIj+/UnixszJsjYHQKJ9G4FGFU+aFxGkI= Subject key identifier: 9C:DE:BC:A1:0A:AA:FD:F2:8F:EF:74:0E:73:CF:40:8B:25:24:6C:C6 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 0667 Signing time: Thu 16 Apr 2026 22:32:15 +0000 Manifest this update: Thu 16 Apr 2026 22:32:15 +0000 Manifest next update: Thu 23 Apr 2026 22:32:15 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: ZjflvQDgogn60iYBiHXC0vY0oXtVNbPQ1qOZLEazokE=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: NDR9ZBlCPG6TNFjpWR6oUi6H3yAwo0tj9PuG9qFDBEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Apr 16 22:32:15 2026 GMT Not After : Apr 23 22:32:15 2026 GMT Subject: CN=69e1636f-99e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:4b:a7:da:19:60:d5:27:fc:19:d9:7b:c6: cc:db:07:6f:ae:81:1e:50:74:2d:35:07:0d:6e:09: bf:65:57:10:e6:25:8f:d8:25:7c:66:6f:40:4f:3c: ca:e5:3b:6d:29:4d:19:75:90:85:b3:0e:79:ff:8e: 48:e7:cc:bb:ed:4a:02:49:bb:c4:dc:c0:2a:3a:c7: 81:5d:8a:b9:61:ce:ce:c4:b4:88:51:12:1d:96:b3: 0c:ff:4a:e4:85:3f:2f:91:d3:1c:d0:ee:99:c5:ab: bc:25:64:6e:65:3a:05:74:5f:81:08:42:51:d2:06: 26:01:07:7f:1e:51:62:4a:e8:a7:af:41:89:0e:ba: ff:18:4e:b0:a3:46:e0:0e:78:02:0c:d2:1d:84:43: 1b:2a:13:a7:d1:43:da:b4:eb:52:1b:63:45:1f:4c: 7e:85:b4:50:4b:69:b1:30:51:2b:63:7f:2a:19:ef: cc:35:d9:51:40:5a:82:7d:2b:ad:08:97:da:e3:1b: ff:81:80:a8:59:a3:a7:a8:30:f6:27:db:20:ca:b5: 13:68:68:8b:57:6f:08:be:c6:f1:f7:20:51:40:42: 07:f9:8b:39:35:00:6a:2b:36:9c:df:d4:34:37:41: 1e:78:4d:d6:89:7b:0b:63:1d:5c:cc:4a:68:e7:bf: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DE:BC:A1:0A:AA:FD:F2:8F:EF:74:0E:73:CF:40:8B:25:24:6C:C6 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:32:6e:b7:f8:3e:70:14:a5:bd:78:b8:82:ce:c8:0b:0e: 48:67:65:09:7a:07:93:27:3a:7e:0b:0a:b9:7c:fe:61:5d:6c: 1c:b0:25:85:5a:74:d0:ec:68:ac:47:21:bf:12:3b:f9:1b:f6: a0:aa:4e:a3:88:7f:14:68:a2:9d:13:aa:a6:5d:eb:f0:93:00: 11:67:d4:a9:0c:f9:aa:fb:fb:7d:dd:a3:4b:80:d0:92:f6:16: 3f:17:a9:06:6d:c7:69:aa:90:b4:34:32:43:00:20:29:a5:ee: 21:b6:25:83:ba:a4:53:28:96:25:e7:e5:a6:24:47:80:2a:37: af:8d:97:5d:48:06:fa:c8:fa:05:2e:10:30:40:fa:17:7e:5a: 45:6a:da:c4:2a:95:48:7b:1b:0c:04:e1:27:b1:1d:51:90:86: 5a:17:54:4e:30:df:25:bd:ee:7f:2f:17:4a:d1:09:4e:21:b1: e0:c7:b3:17:20:15:f8:d7:dc:53:5c:29:38:ac:fa:5d:25:d3: 21:a4:e5:b5:24:ef:8e:7b:d8:d5:a2:4a:c5:74:71:1a:c0:df: 2d:62:ac:df:dc:43:c2:68:40:e6:b1:7c:29:2d:92:a9:44:25: b5:4d:5a:b2:19:d0:6b:8d:d0:c2:63:b2:ff:cd:97:58:3f:4b: 90:f2:6d:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjYwNDE2MjIzMjE1WhcNMjYwNDIzMjIzMjE1WjAYMRYwFAYD VQQDEw02OWUxNjM2Zi05OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkFLp9oZYNUn/BnZe8bM2wdvroEeUHQtNQcNbgm/ZVcQ5iWP2CV8Zm9ATzzK 5TttKU0ZdZCFsw55/45I58y77UoCSbvE3MAqOseBXYq5Yc7OxLSIURIdlrMM/0rk hT8vkdMc0O6Zxau8JWRuZToFdF+BCEJR0gYmAQd/HlFiSuinr0GJDrr/GE6wo0bg DngCDNIdhEMbKhOn0UPatOtSG2NFH0x+hbRQS2mxMFErY38qGe/MNdlRQFqCfSut CJfa4xv/gYCoWaOnqDD2J9sgyrUTaGiLV28Ivsbx9yBRQEIH+Ys5NQBqKzac39Q0 N0EeeE3WiXsLYx1czEpo578fHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzevKEK qv3yj+90DnPPQIslJGzGMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/4ybrf4PnAUpb14uILOyAsOSGdlCXoHkyc6fgsKuXz+YV1sHLAlhVp00Oxo rEchvxI7+Rv2oKpOo4h/FGiinROqpl3r8JMAEWfUqQz5qvv7fd2jS4DQkvYWPxep Bm3HaaqQtDQyQwAgKaXuIbYlg7qkUyiWJeflpiRHgCo3r42XXUgG+sj6BS4QMED6 F35aRWraxCqVSHsbDAThJ7EdUZCGWhdUTjDfJb3ufy8XStEJTiGx4MezFyAV+Nfc U1wpOKz6XSXTIaTltSTvjnvY1aJKxXRxGsDfLWKs39xDwmhA5rF8KS2SqUQltU1a shnQa43QwmOy/82XWD9LkPJtPA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:36:13 2026 by rpki-client