$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: JOUpEy9Zgq+YRI86auKLJjKGzLNjAa3o9mvLaIRGnVM= Subject key identifier: 1D:E5:4F:A8:2F:22:E6:F3:6D:B6:56:30:13:3B:2D:D6:BA:41:22:93 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 09BA Signing time: Thu 16 Apr 2026 19:50:01 +0000 Manifest this update: Thu 16 Apr 2026 19:50:01 +0000 Manifest next update: Thu 23 Apr 2026 19:50:01 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: Zu8gyRHjLyAKPcuyqd5FCel+6p4FqNYJm7VtGMOmrPQ=) 2: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: lwb4D6wTQBfjbmXTI8Z//lyrBHKyL8sazKScgUSsnjE=) 3: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: Fd1Tf/S90EhmoaFhI4h+ZhWQUJ40Q/83oW0JuW1LVTs=) 4: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: RrvKz+k3BpE474LEsBiK8GJqBSWh6Od/xbLaF5t2LA4=) 5: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: aGGIYu/7r8bbBJz8mmriyFLWLYpIceyB24QlB1GUQUo=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: +q1/Z0Gbv09SPM+cE3PEwTTEu2R3d9XHswraJOVO5w8=) 7: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: 86fiv+ToJ8E+95Mhatj4DQQCxzIT6kPR/i0pwYtFn6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Apr 16 19:50:01 2026 GMT Not After : Apr 23 19:50:01 2026 GMT Subject: CN=69e13d69-d800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:97:0c:b4:32:e9:5a:c0:b8:ac:69:d5:82: 2d:15:99:55:03:b2:d3:dd:bb:13:bd:a0:8d:d8:f5: 0a:3c:de:d1:93:0d:aa:7a:d2:89:7f:0e:c7:8c:4a: 79:b8:be:51:96:eb:e9:07:ed:6f:f9:7a:29:05:18: bc:3a:08:4a:a0:17:f1:f5:98:a4:b3:d2:b2:07:e9: c7:54:4d:70:5a:a1:88:2a:fd:2a:74:f3:5b:eb:3f: 81:e3:db:b8:ee:8c:b0:07:a5:73:e1:1f:50:41:c0: 71:20:95:f9:87:32:b7:84:3a:d7:68:b1:f3:f4:27: 92:78:be:c0:3a:c9:4b:8b:6b:bb:85:7d:37:bf:89: 88:3f:c9:1e:4d:83:0d:98:03:ce:dd:61:4c:63:ea: 2b:9c:86:c6:f5:63:4e:bc:a7:a1:05:c1:0b:a6:62: b8:b9:b4:99:fe:fb:6c:3b:4c:3e:49:d1:03:24:5c: 23:85:d3:22:31:40:ce:d3:80:90:f8:b4:99:75:32: e7:f4:76:3f:4e:ce:cf:86:2e:17:f3:29:8c:4d:c3: 8b:b1:05:20:4b:07:ef:f9:7d:85:d6:3c:f9:5b:11: 01:fc:ac:b9:98:17:ec:8e:1b:7c:d4:e9:93:0f:c1: ed:6c:0a:69:52:9c:4b:df:86:c8:bc:65:26:dc:89: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:4F:A8:2F:22:E6:F3:6D:B6:56:30:13:3B:2D:D6:BA:41:22:93 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:48:c5:8c:bc:a9:77:32:a9:b1:f1:dd:dd:3a:d7:46:0f:45: d6:6e:ac:0f:1a:da:c1:68:f6:c5:73:50:f6:a1:23:6a:1a:57: 4d:bf:a4:4a:8f:cb:1b:e4:18:0a:ea:03:55:29:a2:8e:fc:21: 61:5a:d4:08:7e:d5:e4:82:a3:0e:1d:86:ee:c5:cc:a9:eb:8b: 49:05:94:6a:5c:1e:e7:84:71:b2:e7:d5:a2:df:5c:dd:83:cc: fd:33:c6:73:d2:47:7b:ba:a3:b8:9c:77:60:bc:0c:21:01:99: 64:1b:6d:cf:be:d1:e1:66:02:bc:dc:2a:36:68:6f:8b:c4:60: cf:a6:2f:76:53:30:8f:8a:6d:6e:28:16:c2:6d:08:f1:9b:d9: 99:e1:56:9f:93:01:73:d4:17:8f:39:0b:27:cf:76:66:b6:86: d4:87:d0:df:44:a0:3c:7e:0b:bb:c0:bd:37:11:2b:48:7d:e7: 79:47:53:b7:8b:25:2b:ab:b0:53:7e:04:a7:4d:37:d1:49:51: 4e:26:f7:57:b0:1f:74:9f:88:53:12:8d:53:15:5e:31:57:08: 27:bd:1e:d2:65:d9:e1:1f:7b:64:de:e3:84:a0:7e:f0:cb:d4: f7:a7:8f:01:0d:c6:95:c9:3a:0e:83:1d:00:ed:09:cc:7f:df: c5:91:28:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjYwNDE2MTk1MDAxWhcNMjYwNDIzMTk1MDAxWjAYMRYwFAYD VQQDEw02OWUxM2Q2OS1kODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSCXDLQy6VrAuKxp1YItFZlVA7LT3bsTvaCN2PUKPN7Rkw2qetKJfw7HjEp5 uL5RluvpB+1v+XopBRi8OghKoBfx9Ziks9KyB+nHVE1wWqGIKv0qdPNb6z+B49u4 7oywB6Vz4R9QQcBxIJX5hzK3hDrXaLHz9CeSeL7AOslLi2u7hX03v4mIP8keTYMN mAPO3WFMY+ornIbG9WNOvKehBcELpmK4ubSZ/vtsO0w+SdEDJFwjhdMiMUDO04CQ +LSZdTLn9HY/Ts7Phi4X8ymMTcOLsQUgSwfv+X2F1jz5WxEB/Ky5mBfsjht81OmT D8HtbAppUpxL34bIvGUm3IkQXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3lT6gv IubzbbZWMBM7Lda6QSKTMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzUjFjLypdzKpsfHd3TrXRg9F1m6sDxrawWj2xXNQ9qEjahpXTb+kSo/LG+QY CuoDVSmijvwhYVrUCH7V5IKjDh2G7sXMqeuLSQWUalwe54RxsufVot9c3YPM/TPG c9JHe7qjuJx3YLwMIQGZZBttz77R4WYCvNwqNmhvi8Rgz6YvdlMwj4ptbigWwm0I 8ZvZmeFWn5MBc9QXjzkLJ892ZraG1IfQ30SgPH4Lu8C9NxErSH3neUdTt4slK6uw U34Ep0030UlRTib3V7AfdJ+IUxKNUxVeMVcIJ70e0mXZ4R97ZN7jhKB+8MvU96eP AQ3Glck6DoMdAO0JzH/fxZEoVg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:03 2026 by rpki-client