$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json) Hash identifier: 5YN7e+hZsFZcmpp9ah9Aa6XnKbvx+LO7RbrqQRq28po= Subject key identifier: 53:B9:0F:7A:A4:11:60:4D:92:5F:D0:F8:2B:5B:17:7C:47:CE:8B:80 Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft Manifest number: 66 Signing time: Wed 15 Apr 2026 07:31:16 +0000 Manifest this update: Wed 15 Apr 2026 07:31:15 +0000 Manifest next update: Wed 22 Apr 2026 07:31:15 +0000 Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: 4+DEVU8TSPiPZuJjTsKNH5ahIQqjKCEtEd/hu5y/vwQ=) 2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: gEDKwshdmBsC3CB4+s8rKksc9ZXswjsTOQAKy74q070=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Validity Not Before: Apr 15 07:31:15 2026 GMT Not After : Apr 22 07:31:15 2026 GMT Subject: CN=69df3ec4-c358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:aa:77:c5:8c:99:9d:ae:78:6e:ee:73:fe: 7e:84:65:3c:4a:f9:ed:16:51:88:77:a8:8a:d4:26: b1:81:ec:fa:08:b3:cb:8f:f5:a5:f3:9b:24:31:28: 87:29:8c:ad:c4:d3:77:1a:3d:23:6e:d8:5f:5c:52: 00:a3:a4:38:19:8f:77:48:4c:4e:2e:65:fc:5c:65: 71:e8:5a:f4:00:37:b0:a8:2b:7b:ef:fa:50:06:1f: 2c:88:ba:6c:2e:10:38:c2:65:54:12:4f:94:b4:25: 2d:05:bd:67:70:04:fc:98:5d:43:ac:62:dc:95:b9: 38:ab:35:53:69:ad:df:28:11:98:2d:a7:a8:57:ea: a0:cb:de:68:6b:a5:48:ae:34:63:25:f1:57:4a:ba: 99:3f:a6:78:da:02:1e:db:36:7d:29:0e:67:f0:09: f9:f0:ce:99:2d:6a:36:41:ea:bb:7d:89:27:a0:74: 0f:9d:b6:86:cb:1f:0e:d1:d9:1a:dd:e3:8f:8b:b9: b4:7e:af:cc:d4:8f:c6:60:50:43:1a:9d:26:73:b1: 5a:44:6d:1a:e5:43:ea:7a:50:77:c1:98:ac:0d:9e: f0:d2:06:1b:9e:e2:15:4e:9a:db:93:9b:19:87:ad: 4d:d7:d6:9b:09:55:a4:38:25:b6:8a:04:53:d9:8b: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B9:0F:7A:A4:11:60:4D:92:5F:D0:F8:2B:5B:17:7C:47:CE:8B:80 X509v3 Authority Key Identifier: keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:da:98:c3:bf:e1:6a:c7:2b:5e:c1:f7:e0:ac:0b:56:a9: 87:6c:79:74:6c:ae:2d:1c:e4:03:63:a6:5a:ef:f9:63:dd:ed: ec:a1:e1:23:e5:a4:1e:5f:29:35:1a:b0:6e:fc:7a:98:04:e9: 53:9d:9d:45:01:44:c3:68:64:42:ff:dd:d9:0a:e7:77:69:97: fd:6f:57:4c:1c:b5:6a:fc:09:22:c0:d1:f1:98:85:5c:44:4c: ef:27:5a:8b:6a:ce:7f:2b:60:1a:67:1a:38:cf:2b:eb:38:18: ed:86:f2:e5:ef:08:35:31:af:25:75:f0:a7:4f:8a:20:03:9a: f7:63:7a:c1:d1:95:0e:72:ee:3b:13:35:bd:9d:02:c8:fc:1a: c1:5d:e9:a0:d1:9c:05:bf:8a:3b:37:f6:36:82:9b:d9:b3:12: 65:bf:9d:47:81:09:9e:47:b1:27:56:01:b9:04:19:3b:46:d1: 9d:55:0c:1f:29:5a:91:da:05:1e:f7:78:26:35:25:c7:c4:56: a3:8d:40:50:e0:12:f5:56:86:55:3b:f0:b0:42:08:0e:c7:a3: c7:13:ea:37:d7:de:ff:ba:7d:3b:80:e2:23:a3:65:cb:01:ac: 98:ff:af:97:75:18:ab:77:f1:4b:8d:ec:09:de:5f:36:0e:20: c7:44:93:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUYyQTExMC8GA1UEBRMoNkIxMThDMTU4RTBCOEQ5Qjk4NEVDRERDNzhCMjQ0ODAy RTQ3MDU0NzAeFw0yNjA0MTUwNzMxMTVaFw0yNjA0MjIwNzMxMTVaMBgxFjAUBgNV BAMTDTY5ZGYzZWM0LWMzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEq6p3xYyZna54bu5z/n6EZTxK+e0WUYh3qIrUJrGB7PoIs8uP9aXzmyQxKIcp jK3E03caPSNu2F9cUgCjpDgZj3dITE4uZfxcZXHoWvQAN7CoK3vv+lAGHyyIumwu EDjCZVQST5S0JS0FvWdwBPyYXUOsYtyVuTirNVNprd8oEZgtp6hX6qDL3mhrpUiu NGMl8VdKupk/pnjaAh7bNn0pDmfwCfnwzpktajZB6rt9iSegdA+dtobLHw7R2Rrd 44+LubR+r8zUj8ZgUEManSZzsVpEbRrlQ+p6UHfBmKwNnvDSBhue4hVOmtuTmxmH rU3X1psJVaQ4JbaKBFPZi0rnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU7kPeqQR YE2SX9D4K1sXfEfOi4AwHwYDVR0jBBgwFoAUaxGMFY4LjZuYTs3ceLJEgC5HBUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRjJBLzkzMkY4NUJFOUY4 RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1WVRzM2NlTEpFZ0M1SEJV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhHTUZZNExqWnVZVHMzY2VMSkVnQzVIQlVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RjJBLzkzMkY4NUJFOUY4RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1 WVRzM2NlTEpFZ0M1SEJVYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIttqYw7/hascrXsH34KwLVqmHbHl0bK4tHOQDY6Za7/lj3e3soeEj5aQeXyk1 GrBu/HqYBOlTnZ1FAUTDaGRC/93ZCud3aZf9b1dMHLVq/AkiwNHxmIVcREzvJ1qL as5/K2AaZxo4zyvrOBjthvLl7wg1Ma8ldfCnT4ogA5r3Y3rB0ZUOcu47EzW9nQLI /BrBXemg0ZwFv4o7N/Y2gpvZsxJlv51HgQmeR7EnVgG5BBk7RtGdVQwfKVqR2gUe 93gmNSXHxFajjUBQ4BL1VoZVO/CwQggOx6PHE+o3197/un07gOIjo2XLAayY/6+X dRird/FLjewJ3l82DiDHRJP1 -----END CERTIFICATE-----Generated at Fri Apr 17 05:36:31 2026 by rpki-client