$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json) Hash identifier: DxuCxthNBIXXlGxy+39PwwXQqfT69ffY61VDM3/91K0= Subject key identifier: 17:89:21:7B:B3:29:1C:FD:03:1D:C0:BF:20:67:03:F7:BB:E7:B0:1B Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft Manifest number: 017B Signing time: Fri 17 Apr 2026 04:26:42 +0000 Manifest this update: Fri 17 Apr 2026 04:26:41 +0000 Manifest next update: Fri 24 Apr 2026 04:26:41 +0000 Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: ivJoiPcugTmj7+2WmSellb7EJi1u4njaHJIyXSISZm4=) 2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: XOz44GxKH9RUxphnLQGSg14r7883QyXPCV8YI6CNByI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661 Validity Not Before: Apr 17 04:26:41 2026 GMT Not After : Apr 24 04:26:41 2026 GMT Subject: CN=69e1b681-fdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:55:b0:69:10:94:7e:d3:7a:73:b4:d3:ca: 50:27:7b:8a:7f:d1:39:0d:b0:df:dd:95:bb:fd:81: 41:78:cf:3c:b7:fe:07:26:d9:db:dc:a4:d0:b8:9e: 53:aa:97:bc:cc:de:a8:d7:d2:db:a8:68:6b:8c:2b: c6:cd:34:cb:47:67:7a:24:fa:5b:2a:f4:2e:ad:f2: fb:4e:db:a3:bc:ef:9c:bb:d0:6e:9c:1c:0b:38:7a: a9:23:ef:54:89:20:ab:e5:a2:73:7c:15:34:1e:48: a8:87:da:ce:89:54:fe:02:83:9e:59:4e:38:83:28: c6:50:0b:4b:f7:68:22:92:b3:77:c1:1f:93:06:6b: 2b:c5:9e:62:28:14:27:41:24:52:d9:bf:c5:5e:34: e5:eb:8c:5f:5b:24:96:c0:6d:3c:1b:e8:76:20:02: af:ef:66:c2:66:db:ea:9e:0e:72:14:78:f3:da:e2: 41:75:01:22:fa:06:e4:c1:83:18:68:f1:9a:30:3c: 31:12:5c:cb:0b:0d:26:1b:24:f2:87:f3:ff:21:40: 18:1f:70:11:28:6e:58:29:57:a3:fe:42:32:71:9b: 2f:1f:10:00:c4:be:2c:26:8b:50:2d:cb:17:b6:98: 29:67:f7:2d:cf:a5:9d:81:b5:7e:62:6d:bb:41:25: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:21:7B:B3:29:1C:FD:03:1D:C0:BF:20:67:03:F7:BB:E7:B0:1B X509v3 Authority Key Identifier: keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:21:41:64:c6:69:65:d6:6b:66:f9:46:ea:29:a4:c6:6d:9f: 25:78:a2:6b:68:b7:78:8f:66:7e:f2:f7:f7:7d:fb:ef:f5:53: e6:be:fe:66:c7:8c:cc:f4:4f:48:e9:ad:3b:3d:3b:1d:43:48: 8e:4c:bc:1b:e9:b0:cd:21:81:6e:ee:7a:ee:62:29:9c:e6:90: ba:10:9b:1d:f1:fc:d3:e1:cf:d9:cc:53:61:10:45:8d:48:d9: 1e:6b:17:e7:a2:52:07:07:6c:5d:11:bb:bf:9e:8b:43:63:65: 4b:1a:fc:8e:b1:2b:be:5e:8c:a2:9c:a1:dc:2a:46:e4:d8:4d: 01:2c:11:12:c6:ab:3f:01:87:4d:4d:1e:36:e0:e7:15:ee:de: 74:0b:e7:71:09:2d:4a:3c:06:64:cb:15:95:85:62:f3:08:dd: 79:c2:84:db:78:63:c3:99:f5:f3:d6:6a:7f:de:d7:9d:7c:38: 0e:4d:a6:3d:c2:e6:68:44:95:f6:2b:ea:a1:9a:d8:8a:b5:69: 96:cd:b4:d8:11:2f:57:ab:82:d0:d0:00:27:8a:3d:31:7c:94: 4d:79:e6:8d:ac:99:09:1c:05:18:db:37:43:bf:8d:c8:0d:90: 82:58:f3:7a:cc:2d:a0:1c:b3:82:10:9d:23:e7:05:a2:78:30: 21:5d:cb:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0NDkxMTAvBgNVBAUTKDZGNjVBMEM5MjI2MEIxQURBMjMxODdCMjlCQUMzQkVB REFDMDU2NjEwHhcNMjYwNDE3MDQyNjQxWhcNMjYwNDI0MDQyNjQxWjAYMRYwFAYD VQQDEw02OWUxYjY4MS1mZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotJVsGkQlH7TenO008pQJ3uKf9E5DbDf3ZW7/YFBeM88t/4HJtnb3KTQuJ5T qpe8zN6o19LbqGhrjCvGzTTLR2d6JPpbKvQurfL7TtujvO+cu9BunBwLOHqpI+9U iSCr5aJzfBU0Hkioh9rOiVT+AoOeWU44gyjGUAtL92gikrN3wR+TBmsrxZ5iKBQn QSRS2b/FXjTl64xfWySWwG08G+h2IAKv72bCZtvqng5yFHjz2uJBdQEi+gbkwYMY aPGaMDwxElzLCw0mGyTyh/P/IUAYH3ARKG5YKVej/kIycZsvHxAAxL4sJotQLcsX tpgpZ/ctz6WdgbV+Ym27QSXj4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeJIXuz KRz9Ax3AvyBnA/e757AbMB8GA1UdIwQYMBaAFG9loMkiYLGtojGHspusO+rawFZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ0OS80MDE3OTBGQzA3 M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3NhMmlNWWV5bTZ3NzZ0ckFW bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQ0OS80MDE3OTBGQzA3M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3Nh MmlNWWV5bTZ3NzZ0ckFWbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyyFBZMZpZdZrZvlG6imkxm2fJXiia2i3eI9mfvL393377/VT5r7+ZseMzPRP SOmtOz07HUNIjky8G+mwzSGBbu567mIpnOaQuhCbHfH80+HP2cxTYRBFjUjZHmsX 56JSBwdsXRG7v56LQ2NlSxr8jrErvl6Mopyh3CpG5NhNASwREsarPwGHTU0eNuDn Fe7edAvncQktSjwGZMsVlYVi8wjdecKE23hjw5n189Zqf97XnXw4Dk2mPcLmaESV 9ivqoZrYirVpls202BEvV6uC0NAAJ4o9MXyUTXnmjayZCRwFGNs3Q7+NyA2Qgljz eswtoByzghCdI+cFongwIV3LCg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:13:45 2026 by rpki-client