$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: /3jzTsJ9Of7ZGHrtyi05rcVbk6e7kOa6cAEMf3xEE7k= Subject key identifier: 1A:B6:7F:49:14:CF:1A:EC:DE:3C:61:56:AB:A8:4A:64:3B:65:BD:F1 Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 44 Signing time: Fri 17 Apr 2026 08:08:14 +0000 Manifest this update: Fri 17 Apr 2026 08:08:14 +0000 Manifest next update: Fri 24 Apr 2026 08:08:14 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: dXpP/HZvmevU6X2T/8SVjsDUCKWZUvFQVZ3mNycP7PQ=) 2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: BgD9Nozy6YrPBl3k/LaQh1iksmIlumLLGLfxZ8EsuWo=) 3: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: EjJ1CDCwau1fKrzrYHxK/Qrh8GUA8jF4SY+Z2pjXM+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Apr 17 08:08:14 2026 GMT Not After : Apr 24 08:08:14 2026 GMT Subject: CN=69e1ea6e-5219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:fd:c4:91:39:db:76:4f:34:4a:7a:f9:b7: b7:c5:fe:79:c7:51:d5:e3:7f:7c:19:0b:70:1e:dd: 67:55:35:5c:be:41:8d:ec:b7:c0:e9:b7:e8:af:f3: f7:4c:92:ea:e0:dc:e1:dd:43:d3:cc:8c:2f:ae:8a: a1:fc:20:30:82:ae:95:c8:e3:cd:a7:e5:e4:89:94: 8b:d7:26:2f:51:e0:8a:27:f3:50:23:34:01:c6:d0: c0:2f:a1:e7:67:3f:22:01:3a:a1:ba:80:76:1b:b5: 2a:75:5a:3e:87:f4:1d:f7:f5:aa:50:18:a2:3b:c6: 73:19:7b:ce:89:37:b4:c3:e0:84:37:e6:61:e7:19: ad:1a:3e:e9:5b:7b:50:be:b4:67:ef:60:54:25:ce: 69:b4:93:2a:ba:af:af:e0:8a:59:b1:67:3a:b1:ee: 34:a5:27:aa:44:9c:c6:80:1e:f0:13:d6:56:13:ac: 67:fb:fe:e3:fe:9f:96:62:7c:54:50:8c:fa:ed:82: 4d:ef:36:b2:a0:a7:9a:85:2e:8b:8d:e5:19:32:06: 6f:5b:32:2e:e3:cb:af:19:17:b1:f1:6b:4b:76:9b: 2f:fc:14:41:2a:f7:20:d6:ea:6f:5f:d2:d1:42:32: 11:ab:7a:f5:29:0e:79:cd:a2:ff:11:8d:0d:e7:87: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B6:7F:49:14:CF:1A:EC:DE:3C:61:56:AB:A8:4A:64:3B:65:BD:F1 X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:a4:c0:ad:25:6d:c3:8e:3d:3e:93:79:83:8b:d8:55:5d: ef:eb:58:62:99:bd:af:cf:89:45:3c:31:c5:1e:f8:2b:51:fa: 97:13:e4:f1:fb:0a:60:a7:6d:d3:6d:86:fb:64:0a:e8:4f:0a: b2:d8:9c:23:58:25:67:6d:a9:1b:36:ef:8e:5d:6d:e0:10:ce: 10:45:99:25:e4:87:16:4b:07:b4:94:42:0b:80:07:25:af:2f: d0:87:1d:52:62:28:ae:8d:05:73:7e:6c:0f:84:13:ae:f8:7a: dd:af:a2:8a:a9:7a:c9:cd:32:45:4d:ea:42:26:1c:9f:03:7f: 89:13:7d:6f:90:73:9b:f7:a2:cc:43:df:8f:52:e2:26:31:bf: 00:18:97:a8:6e:a0:05:4f:e5:41:4e:83:40:53:a5:96:08:ec: 10:21:71:3c:f5:bd:d2:32:07:33:a5:e9:44:f5:ef:d3:5c:60: 96:4a:d9:48:23:fa:c8:20:68:0b:0b:00:e3:63:96:a4:41:29: 44:28:b7:46:f4:2f:db:ce:96:4b:2f:ca:b5:df:d3:f0:32:f0: 78:97:49:7f:58:9b:c9:0e:4e:65:a8:25:21:15:50:25:7a:ae: b5:6c:b6:ec:bb:bc:b3:98:17:3f:dc:f2:2e:14:ac:fa:ef:bb: 57:fc:1f:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNjA0MTcwODA4MTRaFw0yNjA0MjQwODA4MTRaMBgxFjAUBgNV BAMTDTY5ZTFlYTZlLTUyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIwf3EkTnbdk80Snr5t7fF/nnHUdXjf3wZC3Ae3WdVNVy+QY3st8Dpt+iv8/dM kurg3OHdQ9PMjC+uiqH8IDCCrpXI482n5eSJlIvXJi9R4Ion81AjNAHG0MAvoedn PyIBOqG6gHYbtSp1Wj6H9B339apQGKI7xnMZe86JN7TD4IQ35mHnGa0aPulbe1C+ tGfvYFQlzmm0kyq6r6/gilmxZzqx7jSlJ6pEnMaAHvAT1lYTrGf7/uP+n5ZifFRQ jPrtgk3vNrKgp5qFLouN5RkyBm9bMi7jy68ZF7Hxa0t2my/8FEEq9yDW6m9f0tFC MhGrevUpDnnNov8RjQ3nh/d5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGrZ/SRTP GuzePGFWq6hKZDtlvfEwHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArSqTArSVtw449PpN5g4vYVV3v61himb2vz4lFPDHFHvgrUfqXE+Tx+wpgp23T bYb7ZAroTwqy2JwjWCVnbakbNu+OXW3gEM4QRZkl5IcWSwe0lEILgAclry/Qhx1S YiiujQVzfmwPhBOu+Hrdr6KKqXrJzTJFTepCJhyfA3+JE31vkHOb96LMQ9+PUuIm Mb8AGJeobqAFT+VBToNAU6WWCOwQIXE89b3SMgczpelE9e/TXGCWStlII/rIIGgL CwDjY5akQSlEKLdG9C/bzpZLL8q139PwMvB4l0l/WJvJDk5lqCUhFVAleq61bLbs u7yzmBc/3PIuFKz677tX/B+X -----END CERTIFICATE-----Generated at Fri Apr 17 12:09:07 2026 by rpki-client