$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: ExOhtwFbdJ4669lCYf1f4bLoSR266vQayY6kLYg/IVs= Subject key identifier: E4:C4:9C:FA:9E:50:07:D2:69:5C:9B:3D:24:5B:D0:F1:BF:06:6B:2A Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 57 Signing time: Fri 17 Apr 2026 07:54:18 +0000 Manifest this update: Fri 17 Apr 2026 07:54:18 +0000 Manifest next update: Fri 24 Apr 2026 07:54:18 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: 0ttZ/GaNPzbvFxP5uJvZS1/lxq21k6AaH1YBolzB+Qg=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Apr 17 07:54:18 2026 GMT Not After : Apr 24 07:54:18 2026 GMT Subject: CN=69e1e72a-ccf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:63:c2:de:c4:56:e1:d2:4d:23:98:4c:cf: 4f:d0:2a:e2:d9:10:7d:50:57:fc:e0:9b:ac:71:d5: 67:9f:15:8a:3f:90:df:38:8e:6b:2d:23:09:be:34: 4b:d6:b8:16:ff:ef:84:8b:d4:63:82:52:67:c8:75: e9:d7:10:de:5d:3d:96:54:22:0e:21:93:49:41:8e: 6a:e5:e4:4f:39:0a:9b:6a:d6:3f:e2:a8:a1:d0:58: 05:e8:e3:af:85:47:5d:6d:c9:50:ae:be:e6:25:d0: 96:bb:cf:de:d5:b5:05:4c:4e:5f:08:65:f1:40:90: 08:37:5c:79:e4:8d:e6:bb:25:3e:45:be:a2:a3:b3: 18:2f:fa:7c:02:86:5e:00:7d:60:fa:04:44:92:5a: 97:01:c5:8b:07:85:8f:59:cb:fd:f4:06:59:be:3c: 42:b8:2e:b8:ac:47:61:4c:e2:5b:93:4a:ed:96:f8: 49:b6:27:5d:6a:93:25:d6:d3:16:36:33:51:77:d6: 5b:14:2c:c4:40:09:18:a1:a1:4e:bc:c6:2e:91:92: 08:b7:13:ae:6b:73:3d:14:63:a1:26:4f:17:36:ea: 7d:f4:1b:b7:d4:80:34:a4:d3:ee:97:e7:1a:3f:bc: 75:ff:0e:b9:f9:26:c2:69:cc:5c:b0:5a:7b:d7:5a: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C4:9C:FA:9E:50:07:D2:69:5C:9B:3D:24:5B:D0:F1:BF:06:6B:2A X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b6:f3:0e:f8:3f:0a:aa:9b:51:09:16:1b:bf:2a:49:a2:60: 49:85:89:fb:22:75:68:1c:a5:b2:80:15:2c:fe:03:25:0d:97: 63:b4:e2:57:20:5f:4b:cf:53:b4:73:0d:d1:f3:30:6f:fe:62: 9a:74:80:83:68:ad:cd:40:64:cd:c3:76:65:cc:74:b9:a2:ea: 1e:f4:3d:62:38:e8:c8:b3:3c:4d:d0:70:08:4f:a2:ae:af:5e: aa:52:63:84:a4:bd:8d:f5:34:16:74:c5:b0:d1:c3:a3:11:33: 60:43:f7:12:c2:ae:9c:2d:e5:dd:8b:72:bf:b2:4b:37:85:c6: 93:3a:cd:c3:11:53:56:0f:02:cb:c0:9d:9d:a2:0d:16:c1:c8: 45:6e:5d:f7:a2:40:6c:a4:bc:8f:2a:24:a5:f7:26:3a:46:5c: 25:1d:1a:ba:36:1d:c5:82:28:4b:f2:d1:df:6b:ec:25:c8:22: 8f:7d:8d:4b:bf:11:84:94:70:3b:ba:e4:f7:a9:77:e2:0f:57: 4b:77:b2:7e:39:1f:e0:62:43:1c:96:3b:ae:4f:dd:5e:42:f8: 7b:52:89:23:7d:5e:a6:19:20:68:20:fb:c8:37:de:6a:28:a2: 4b:5c:ec:06:0e:3d:6f:7d:6a:7b:cc:6b:25:d1:d5:cd:0e:77: d4:2c:5b:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNjA0MTcwNzU0MThaFw0yNjA0MjQwNzU0MThaMBgxFjAUBgNV BAMTDTY5ZTFlNzJhLWNjZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC85mPC3sRW4dJNI5hMz0/QKuLZEH1QV/zgm6xx1WefFYo/kN84jmstIwm+NEvW uBb/74SL1GOCUmfIdenXEN5dPZZUIg4hk0lBjmrl5E85Cptq1j/iqKHQWAXo46+F R11tyVCuvuYl0Ja7z97VtQVMTl8IZfFAkAg3XHnkjea7JT5FvqKjsxgv+nwChl4A fWD6BESSWpcBxYsHhY9Zy/30Blm+PEK4LrisR2FM4luTSu2W+Em2J11qkyXW0xY2 M1F31lsULMRACRihoU68xi6Rkgi3E65rcz0UY6EmTxc26n30G7fUgDSk0+6X5xo/ vHX/Drn5JsJpzFywWnvXWrJhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5MSc+p5Q B9JpXJs9JFvQ8b8GayowHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAtvMO+D8KqptRCRYbvypJomBJhYn7InVoHKWygBUs/gMlDZdjtOJXIF9Lz1O0 cw3R8zBv/mKadICDaK3NQGTNw3ZlzHS5ouoe9D1iOOjIszxN0HAIT6Kur16qUmOE pL2N9TQWdMWw0cOjETNgQ/cSwq6cLeXdi3K/sks3hcaTOs3DEVNWDwLLwJ2dog0W wchFbl33okBspLyPKiSl9yY6RlwlHRq6Nh3FgihL8tHfa+wlyCKPfY1LvxGElHA7 uuT3qXfiD1dLd7J+OR/gYkMcljuuT91eQvh7UokjfV6mGSBoIPvIN95qKKJLXOwG Dj1vfWp7zGsl0dXNDnfULFtA -----END CERTIFICATE-----Generated at Fri Apr 17 14:11:07 2026 by rpki-client