$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: m/xr0jxUU+ptxgbA7XhyBPGremYrJixb9YWbPpzxdIk= Subject key identifier: BB:37:58:2B:78:1F:88:58:30:95:F0:B8:55:6B:11:3C:2F:60:EF:E9 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 3538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3531 Signing time: Thu 16 Apr 2026 15:02:14 +0000 Manifest this update: Thu 16 Apr 2026 15:02:14 +0000 Manifest next update: Thu 23 Apr 2026 15:02:14 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: hUiCOBf65ICYHJEamF9ooDBZzGCOfugKUaEpcR5HjgU=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: 2kB+l6pOb5zT/KlsA2xEtLzgFrgfMDCnlHiA1i2V1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13624 (0x3538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Apr 16 15:02:14 2026 GMT Not After : Apr 23 15:02:14 2026 GMT Subject: CN=69e0f9f6-745c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:4b:91:fd:72:24:84:8a:70:40:c9:16:96: d0:2b:4a:6d:1d:06:09:c3:4b:68:bf:fe:41:83:79: 81:c3:39:f8:2f:f5:2d:33:e6:1f:31:7f:aa:92:a2: 79:1c:1f:d4:5a:f7:18:8b:f2:43:9c:f5:64:28:c9: 04:ca:17:d0:db:8b:6c:8b:e5:79:67:46:35:3d:07: 29:21:0b:71:5c:13:43:d8:f8:3a:94:eb:6f:ec:4f: 01:67:0c:5a:c2:8b:14:c1:46:9e:24:75:0f:ab:05: 27:7d:fe:08:31:99:82:0b:27:b8:23:2b:46:56:5a: 38:dd:7e:48:db:ae:d2:d5:68:2c:1b:39:40:f3:d1: bf:b1:47:45:4c:94:8b:dc:ad:74:2a:00:1e:ad:fb: 8a:3b:cc:79:5a:d7:87:7b:a1:96:0f:c7:a7:c1:9a: 1b:bd:bd:21:90:75:42:2e:8f:93:12:de:32:cc:fc: fa:33:0a:7d:ec:3f:ef:67:e3:a8:1f:79:18:27:35: 28:3d:93:22:86:32:e6:5f:c5:c9:b7:5f:a6:d0:58: 03:1f:01:02:d8:dd:e4:ab:d6:86:df:3e:61:6d:de: 08:d9:3d:ca:e9:cb:10:9d:cb:8d:a1:df:7d:a3:93: c5:2f:bf:aa:1a:01:3a:8d:58:64:8b:26:d0:60:c3: 91:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:37:58:2B:78:1F:88:58:30:95:F0:B8:55:6B:11:3C:2F:60:EF:E9 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:e7:2e:45:e1:67:32:be:58:77:c7:a4:be:48:30:6e:ba:34: 5a:d7:32:aa:9f:97:46:d4:2d:86:3a:3c:75:67:f7:68:e9:f5: b0:02:a4:e2:0e:76:01:bb:0b:68:72:dc:87:17:1f:3a:41:8d: 56:62:8d:64:a2:f8:d0:99:f5:7e:9b:a0:ec:4e:6d:e3:67:11: 45:f5:1c:78:d5:50:3c:d4:23:8f:29:77:ce:fe:73:9b:45:90: bb:ab:65:b0:c0:be:4e:ba:9f:3a:05:12:18:58:26:b8:33:f5: d3:6a:59:d4:73:26:53:3f:57:8b:e2:a5:9a:74:32:db:41:0b: 32:84:f3:61:3d:b4:32:68:dd:a5:16:cf:4f:8d:dc:26:94:80: a9:ab:93:4f:71:b8:4b:d8:5c:1e:b7:5b:92:f8:06:44:08:92: be:b2:9f:d7:c9:d8:49:6e:0d:55:0d:91:1e:aa:88:02:b1:68: f4:60:27:4a:87:53:1f:5d:48:da:55:23:8b:17:17:8b:9d:02: 30:7d:64:fb:96:8a:a3:9a:91:75:6c:f8:de:d1:38:47:a7:f9: 18:3d:5c:ed:5d:7b:d5:36:ae:92:75:95:af:e1:b6:68:d8:71: 48:f5:60:bf:07:f5:b9:fd:4f:42:4b:fb:1e:91:ac:fa:a6:92: a6:e7:7b:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYwNDE2MTUwMjE0WhcNMjYwNDIzMTUwMjE0WjAYMRYwFAYD VQQDEw02OWUwZjlmNi03NDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5tLkf1yJISKcEDJFpbQK0ptHQYJw0tov/5Bg3mBwzn4L/UtM+YfMX+qkqJ5 HB/UWvcYi/JDnPVkKMkEyhfQ24tsi+V5Z0Y1PQcpIQtxXBND2Pg6lOtv7E8BZwxa wosUwUaeJHUPqwUnff4IMZmCCye4IytGVlo43X5I267S1WgsGzlA89G/sUdFTJSL 3K10KgAerfuKO8x5WteHe6GWD8enwZobvb0hkHVCLo+TEt4yzPz6Mwp97D/vZ+Oo H3kYJzUoPZMihjLmX8XJt1+m0FgDHwEC2N3kq9aG3z5hbd4I2T3K6csQncuNod99 o5PFL7+qGgE6jVhkiybQYMOR0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLs3WCt4 H4hYMJXwuFVrETwvYO/pMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6OcuReFnMr5Yd8ekvkgwbro0Wtcyqp+XRtQthjo8dWf3aOn1sAKk4g52AbsL aHLchxcfOkGNVmKNZKL40Jn1fpug7E5t42cRRfUceNVQPNQjjyl3zv5zm0WQu6tl sMC+TrqfOgUSGFgmuDP102pZ1HMmUz9Xi+KlmnQy20ELMoTzYT20MmjdpRbPT43c JpSAqauTT3G4S9hcHrdbkvgGRAiSvrKf18nYSW4NVQ2RHqqIArFo9GAnSodTH11I 2lUjixcXi50CMH1k+5aKo5qRdWz43tE4R6f5GD1c7V171TauknWVr+G2aNhxSPVg vwf1uf1PQkv7HpGs+qaSpud7xA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:27:14 2026 by rpki-client