$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: bT1UeD+4Xg2Stx9Sd4atTAQM0cu5Vx/tglitSBSzoDg= Subject key identifier: 03:C6:B1:2D:DF:4D:A6:4C:2F:A4:A1:B6:1D:97:01:71:E3:D6:37:36 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1E72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1E44 Signing time: Thu 16 Apr 2026 16:02:22 +0000 Manifest this update: Thu 16 Apr 2026 16:02:22 +0000 Manifest next update: Thu 23 Apr 2026 16:02:22 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: CH8FsZ6NQW/sj4Aqse/KzKRPz4ZQ8vaK4AU21v/nAPA=) 2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=) 3: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=) 4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7794 (0x1e72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Apr 16 16:02:22 2026 GMT Not After : Apr 23 16:02:22 2026 GMT Subject: CN=69e1080e-8c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:61:f8:34:db:cc:46:cb:55:09:5c:91:b1: 2a:f4:01:7c:f5:b1:74:5f:38:95:97:68:f7:9d:5b: c2:33:00:86:52:0c:1d:1f:d0:61:f1:3f:47:c6:1a: 8e:fd:b3:55:38:3a:c8:f3:17:c5:e3:0e:81:98:48: db:e0:d2:ce:4a:e1:83:1b:49:54:95:b1:f7:34:f0: 7a:53:37:97:38:87:f9:89:20:43:f3:46:29:43:b2: 96:4c:70:2c:94:fa:d2:5a:92:aa:98:4f:4c:c6:df: 23:47:4d:81:34:57:f1:98:de:00:8b:11:1f:a0:bd: bd:6c:b2:a1:33:09:fc:d3:29:76:19:11:99:35:53: 42:a6:97:33:b4:9f:36:5c:bd:56:6f:fd:2f:35:26: f5:f1:ab:3b:4a:fc:5a:c9:bd:d2:c7:b9:60:72:c3: d9:5e:16:ba:ae:7a:84:17:ca:87:03:25:25:5f:c6: e8:5d:39:03:4d:76:d2:7f:7a:a4:e0:db:22:01:d6: 9b:d0:ba:00:eb:1f:fe:07:0b:34:4c:af:f4:09:23: 5f:9e:a6:f6:b0:15:f5:fb:05:a5:f7:c0:05:98:f6: 3e:d0:b5:2d:13:a9:35:ee:a2:c2:1a:c9:24:88:3f: 19:92:ba:a0:a5:6a:f0:e1:2c:12:65:2b:1c:e6:55: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:B1:2D:DF:4D:A6:4C:2F:A4:A1:B6:1D:97:01:71:E3:D6:37:36 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:78:9e:45:a9:60:52:96:51:d1:f0:50:d8:ad:17:ec:c1:22: 79:c5:2f:68:04:56:40:fa:7a:2a:9d:bb:dd:05:b7:f6:17:fd: cd:8c:02:1e:9c:07:4b:a7:5a:c1:58:25:2f:65:45:66:a5:f2: b6:4e:6b:85:e0:b1:11:c2:a1:32:47:eb:e5:b7:1b:20:38:6c: fc:54:ba:f8:68:19:81:b6:ed:b7:37:1c:ef:9a:93:05:e0:17: 7d:0c:44:f9:38:5b:1f:cf:20:a3:b3:d0:f7:bd:8d:26:8f:01: 66:0c:fd:1a:45:22:62:6c:dd:ee:80:59:d2:83:54:79:52:73: 89:0f:63:9f:f1:ae:ed:06:35:cd:0e:52:8d:58:7f:c4:0e:92: da:f8:b2:17:02:75:a8:f7:2c:06:8d:ec:3d:e9:7d:7e:1f:06: 1b:e8:94:89:f4:ef:19:96:1c:75:72:66:5c:3f:b6:1c:4d:3c: ab:c4:42:88:3b:4e:a5:16:8b:26:f6:3c:3d:40:6c:7c:f7:93: e5:9a:f7:99:d5:4a:c1:dd:49:77:1f:99:c9:d7:13:09:89:20: 0a:bd:fa:01:c6:36:de:17:30:90:f7:53:2d:ec:7d:4b:7b:a0: 82:6d:b7:b3:b1:29:30:6d:9f:0f:b3:7a:e1:d2:ab:eb:7b:cf: 34:cd:e2:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwNDE2MTYwMjIyWhcNMjYwNDIzMTYwMjIyWjAYMRYwFAYD VQQDEw02OWUxMDgwZS04YzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTJh+DTbzEbLVQlckbEq9AF89bF0XziVl2j3nVvCMwCGUgwdH9Bh8T9HxhqO /bNVODrI8xfF4w6BmEjb4NLOSuGDG0lUlbH3NPB6UzeXOIf5iSBD80YpQ7KWTHAs lPrSWpKqmE9Mxt8jR02BNFfxmN4AixEfoL29bLKhMwn80yl2GRGZNVNCppcztJ82 XL1Wb/0vNSb18as7Svxayb3Sx7lgcsPZXha6rnqEF8qHAyUlX8boXTkDTXbSf3qk 4NsiAdab0LoA6x/+Bws0TK/0CSNfnqb2sBX1+wWl98AFmPY+0LUtE6k17qLCGskk iD8ZkrqgpWrw4SwSZSsc5lU6iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPGsS3f TaZML6Shth2XAXHj1jc2MB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr3ieRalgUpZR0fBQ2K0X7MEiecUvaARWQPp6Kp273QW39hf9zYwCHpwHS6da wVglL2VFZqXytk5rheCxEcKhMkfr5bcbIDhs/FS6+GgZgbbttzcc75qTBeAXfQxE +ThbH88go7PQ972NJo8BZgz9GkUiYmzd7oBZ0oNUeVJziQ9jn/Gu7QY1zQ5SjVh/ xA6S2viyFwJ1qPcsBo3sPel9fh8GG+iUifTvGZYcdXJmXD+2HE08q8RCiDtOpRaL JvY8PUBsfPeT5Zr3mdVKwd1Jdx+ZydcTCYkgCr36AcY23hcwkPdTLex9S3uggm23 s7EpMG2fD7N64dKr63vPNM3inw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:19 2026 by rpki-client