$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: 36aab5gwA550t/DjaRUZzos0zkomfOmVEV/+TZP2KwA= Subject key identifier: 99:2D:BA:3C:A3:3D:54:CA:21:38:D3:DB:80:78:4C:16:36:E7:7A:DC Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 06E0 Signing time: Sat 18 Apr 2026 22:10:30 +0000 Manifest this update: Sat 18 Apr 2026 22:10:30 +0000 Manifest next update: Sat 25 Apr 2026 22:10:30 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: 0FDrzDj9Mtei+ahV7wx2ZfCPyCBkV2obz1fww9JqeYk=) 2: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=) 3: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=) 4: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 22:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Apr 18 22:10:30 2026 GMT Not After : Apr 25 22:10:30 2026 GMT Subject: CN=69e40156-9ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:f1:2a:97:0b:95:5d:ff:5c:1a:fc:0a:bf: 29:e6:07:31:05:c0:ac:4d:41:13:02:82:70:69:5d: f7:0e:a8:d4:81:d6:eb:24:09:56:82:51:0d:4b:61: e0:49:34:2e:ef:ad:ea:05:43:94:77:67:94:1b:f8: 14:5e:00:f2:41:f9:e7:f3:49:f2:49:1e:9c:88:0b: 6a:e5:4d:1f:ab:91:8a:40:53:f9:30:99:20:a2:7f: 75:83:83:4c:18:38:93:43:c9:20:1e:46:19:a3:c7: b9:e6:88:c7:de:56:34:08:09:a0:f4:33:0b:93:d8: ed:5d:a4:31:bb:d9:5b:cb:4c:c5:6a:8c:4c:1a:b5: 7d:72:e9:eb:15:63:87:6a:a0:d0:c8:b0:df:ae:a1: fe:0c:73:0b:ce:2a:b1:0d:3b:2f:e1:80:f0:33:2d: 48:28:0e:d9:54:4c:ee:2a:a3:38:6d:d1:d5:f5:3d: 50:7d:39:96:64:d9:6a:e5:61:d3:a4:21:1e:17:88: 2e:86:b9:a4:e7:fd:c1:dc:77:86:c2:5b:d7:4a:78: 3d:ae:7e:a2:40:2e:02:2e:65:b7:c3:fa:fc:18:1d: e8:5f:f4:55:85:24:7e:06:9b:c7:74:0e:02:13:3f: b3:a3:1a:61:90:84:4b:ea:6a:9a:a8:67:76:77:13: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2D:BA:3C:A3:3D:54:CA:21:38:D3:DB:80:78:4C:16:36:E7:7A:DC X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:99:ae:76:d8:dd:46:78:d2:94:0b:bb:e1:09:4f:d5:bc:c1: 92:3a:4e:55:49:72:17:45:9a:1d:6f:32:91:e3:f1:98:6d:de: e7:79:0f:56:8c:ec:6d:0d:50:79:62:2b:30:0b:7a:8d:9b:f7: c9:fe:1b:ae:61:df:fd:f9:08:10:bb:be:4d:f9:73:82:c4:46: 06:a1:8a:41:1c:b9:f6:24:26:d6:40:3c:87:c5:b8:e7:fd:34: 54:b9:ff:24:28:e8:d3:73:55:0b:f1:67:3b:91:0d:fa:df:b4: 83:28:e4:36:bc:c6:33:6a:91:0b:bc:7c:76:92:bd:f5:e6:8b: 50:b1:eb:fb:9b:9c:9b:0e:78:42:6e:1d:bf:df:2b:da:54:76: 4b:98:9d:9d:3d:cb:23:8e:70:6f:be:8e:55:1d:07:d3:26:99: 67:19:fd:d1:cc:f6:3d:44:65:10:f5:da:48:a0:12:d1:13:47: 27:11:94:d5:8f:ce:49:3b:ca:23:68:5d:00:7e:f2:e1:09:fc: 56:ef:09:98:f5:51:5f:cd:1b:43:c0:b3:f1:9b:31:59:6b:9e: 2f:de:fe:be:c0:81:4a:1f:b8:9b:21:cc:77:34:e6:ac:48:f0: c4:65:43:3c:b2:4f:3a:aa:d8:32:4b:b7:68:7e:d3:82:10:52: 6e:b0:5f:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjYwNDE4MjIxMDMwWhcNMjYwNDI1MjIxMDMwWjAYMRYwFAYD VQQDEw02OWU0MDE1Ni05Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkKPxKpcLlV3/XBr8Cr8p5gcxBcCsTUETAoJwaV33DqjUgdbrJAlWglENS2Hg STQu763qBUOUd2eUG/gUXgDyQfnn80nySR6ciAtq5U0fq5GKQFP5MJkgon91g4NM GDiTQ8kgHkYZo8e55ojH3lY0CAmg9DMLk9jtXaQxu9lby0zFaoxMGrV9cunrFWOH aqDQyLDfrqH+DHMLziqxDTsv4YDwMy1IKA7ZVEzuKqM4bdHV9T1QfTmWZNlq5WHT pCEeF4guhrmk5/3B3HeGwlvXSng9rn6iQC4CLmW3w/r8GB3oX/RVhSR+BpvHdA4C Ez+zoxphkIRL6mqaqGd2dxNGawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJktujyj PVTKITjT24B4TBY253rcMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHJmudtjdRnjSlAu74QlP1bzBkjpOVUlyF0WaHW8ykePxmG3e53kPVozsbQ1Q eWIrMAt6jZv3yf4brmHf/fkIELu+TflzgsRGBqGKQRy59iQm1kA8h8W45/00VLn/ JCjo03NVC/FnO5EN+t+0gyjkNrzGM2qRC7x8dpK99eaLULHr+5ucmw54Qm4dv98r 2lR2S5idnT3LI45wb76OVR0H0yaZZxn90cz2PURlEPXaSKAS0RNHJxGU1Y/OSTvK I2hdAH7y4Qn8Vu8JmPVRX80bQ8Cz8ZsxWWueL97+vsCBSh+4myHMdzTmrEjwxGVD PLJPOqrYMku3aH7TghBSbrBf8w== -----END CERTIFICATE-----Generated at Sun Apr 19 10:06:32 2026 by rpki-client