$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: 7K651VMjdSMI8gvSGx8SZFm6YUWgc6KuxAFCz8qlmN4= Subject key identifier: 6D:5B:59:E3:F2:54:50:91:0A:EF:D1:BD:88:61:D9:5F:73:25:ED:D6 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 120F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11DF Signing time: Thu 16 Apr 2026 17:06:03 +0000 Manifest this update: Thu 16 Apr 2026 17:06:03 +0000 Manifest next update: Thu 23 Apr 2026 17:06:03 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: GUeUiu4436k7hXRbeJRC0f23qoHl4hOSe5vRV9wFCBA=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=) 3: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=) 4: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4623 (0x120f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Apr 16 17:06:03 2026 GMT Not After : Apr 23 17:06:03 2026 GMT Subject: CN=69e116fb-5a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:a6:ba:79:71:0d:90:ef:74:c4:92:00:11: b3:4f:b6:05:72:47:03:9d:32:ec:ea:79:50:c5:1a: f6:12:e4:8c:f3:7a:ef:90:48:c4:4f:4f:27:7d:11: 67:cb:45:2a:72:8a:da:a0:e2:ec:2e:7e:b2:ff:54: ad:f8:4f:7f:09:69:6e:bb:7a:1a:cc:d6:a5:cf:ed: 3d:95:92:4e:cc:cb:c4:d0:fe:a3:bf:5f:e3:af:e9: fb:ff:e3:a3:d5:dd:8a:b8:2a:ee:a0:4d:95:59:2b: 69:bf:1f:f7:53:cc:f6:da:bf:50:f3:65:44:7c:67: 6b:50:76:bb:50:02:0e:b2:d8:bb:f9:a6:e6:4c:74: 2d:9b:0e:52:c8:e6:51:50:97:e8:cf:8c:b7:d5:31: 17:bd:44:ba:8a:fb:a0:9e:4e:d9:6a:e3:c7:36:86: 68:87:0a:f1:16:24:da:9c:0f:39:cb:31:13:c9:9b: a1:f7:29:42:cd:70:9c:b0:43:fa:d5:4b:91:f0:34: 25:a4:5f:76:6e:64:ed:d9:da:00:83:e6:a0:11:a1: af:41:60:b6:38:07:88:1f:f3:09:e8:64:5d:64:0f: a4:54:3f:5e:b9:0d:74:3a:3d:3b:d7:4b:fd:30:02: d0:84:3f:b1:a3:c9:c5:8b:4b:c2:ba:17:05:77:7b: 5e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:59:E3:F2:54:50:91:0A:EF:D1:BD:88:61:D9:5F:73:25:ED:D6 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:06:6a:cb:37:e0:58:6d:1b:da:c4:fd:19:2c:31:13:7a: 89:f5:48:a3:b4:c7:26:12:c9:ce:8c:2f:ad:14:0f:fa:8c:5b: 7d:80:ba:4d:1d:a5:4c:b4:4b:7f:33:16:3c:e6:34:df:88:40: b7:38:32:0f:59:cd:40:04:c9:6c:3b:d7:1d:ef:f1:c2:2f:87: ca:be:84:49:a1:5a:78:92:1d:f6:0f:a5:96:e3:8c:32:dc:b6: 8d:dd:bf:32:77:f5:26:82:5c:e1:23:e9:0c:c9:f1:c5:e6:fe: a6:8f:c1:c4:b6:ff:4e:fd:bf:b2:bd:fc:1f:3c:da:5f:1e:88: 63:3b:d6:6f:7d:73:5b:bc:ae:7a:b8:b4:9d:e5:dd:5e:14:d0: bf:19:a8:e4:88:f6:9c:48:0c:65:88:5d:d9:4e:92:00:8f:57: 73:eb:e6:64:2b:6a:cf:eb:79:2b:d7:14:49:e6:9d:e7:70:99: 83:ac:10:d4:60:0a:87:e4:81:94:e6:24:ca:14:1c:0b:4f:7b: be:f2:4b:5a:23:cc:22:76:3f:0c:71:28:a0:a3:61:dc:d5:79: 7f:8b:3d:6e:bd:1f:b1:97:93:aa:41:43:77:cf:9c:f1:f0:a7: f4:97:8d:1c:84:7f:f3:ba:49:53:32:48:47:44:40:4b:db:7b: 77:08:7e:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjYwNDE2MTcwNjAzWhcNMjYwNDIzMTcwNjAzWjAYMRYwFAYD VQQDEw02OWUxMTZmYi01YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1SmunlxDZDvdMSSABGzT7YFckcDnTLs6nlQxRr2EuSM83rvkEjET08nfRFn y0UqcoraoOLsLn6y/1St+E9/CWluu3oazNalz+09lZJOzMvE0P6jv1/jr+n7/+Oj 1d2KuCruoE2VWStpvx/3U8z22r9Q82VEfGdrUHa7UAIOsti7+abmTHQtmw5SyOZR UJfoz4y31TEXvUS6ivugnk7ZauPHNoZohwrxFiTanA85yzETyZuh9ylCzXCcsEP6 1UuR8DQlpF92bmTt2doAg+agEaGvQWC2OAeIH/MJ6GRdZA+kVD9euQ10Oj0710v9 MALQhD+xo8nFi0vCuhcFd3tePQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1bWePy VFCRCu/RvYhh2V9zJe3WMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaa4Gass34FhtG9rE/RksMRN6ifVIo7THJhLJzowvrRQP+oxbfYC6TR2lTLRL fzMWPOY034hAtzgyD1nNQATJbDvXHe/xwi+Hyr6ESaFaeJId9g+lluOMMty2jd2/ Mnf1JoJc4SPpDMnxxeb+po/BxLb/Tv2/sr38HzzaXx6IYzvWb31zW7yueri0neXd XhTQvxmo5Ij2nEgMZYhd2U6SAI9Xc+vmZCtqz+t5K9cUSead53CZg6wQ1GAKh+SB lOYkyhQcC097vvJLWiPMInY/DHEooKNh3NV5f4s9br0fsZeTqkFDd8+c8fCn9JeN HIR/87pJUzJIR0RAS9t7dwh+aA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:01:39 2026 by rpki-client