$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json) Hash identifier: yDLnJJW/8wPoIcWvC/MZfuPPjc8HTq/yEcmKslpLK1Y= Subject key identifier: CA:27:D9:5E:9B:52:FB:3F:EB:C8:3D:63:93:37:E2:A8:D7:DF:8C:86 Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft Manifest number: 40 Signing time: Fri 17 Apr 2026 08:12:26 +0000 Manifest this update: Fri 17 Apr 2026 08:12:26 +0000 Manifest next update: Fri 24 Apr 2026 08:12:26 +0000 Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: y1rYbgAK/6x0A1XT/s379rCI+dwmWji/of3fJtg+qs8=) 2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Validity Not Before: Apr 17 08:12:26 2026 GMT Not After : Apr 24 08:12:26 2026 GMT Subject: CN=69e1eb6a-4dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:a5:6e:62:23:89:68:7a:a0:b9:e6:dd:ab: 39:6f:bd:cc:49:98:a5:4a:5f:4b:5a:81:90:18:1d: ff:a9:5b:ec:ea:d1:d1:74:9f:6e:7d:fd:6e:8e:5a: 64:72:08:37:7e:a7:35:04:a4:b0:c4:87:bf:8d:0a: cf:d1:82:b0:35:47:95:78:d3:fe:25:c7:1e:6d:ba: 27:ef:9a:77:be:0a:6e:cd:e8:2a:a0:09:48:99:f4: d7:a6:19:19:29:87:60:87:91:e7:c5:23:ef:ed:18: 7f:d7:ba:81:85:53:e3:d7:b4:90:e5:ca:c1:00:cc: fe:55:2f:35:4a:b6:c3:05:bb:52:84:4c:14:ae:3c: f2:b5:b5:bf:03:45:10:a9:00:57:57:68:b7:e6:75: 09:47:17:45:18:04:45:d0:c4:5b:8e:a0:d7:a8:57: c2:a7:44:69:0c:7e:66:02:5f:c0:62:04:e5:a4:b3: 7e:4a:87:52:14:a1:5a:84:05:51:a3:9c:b0:a3:fa: c2:ef:9a:d7:2a:22:d8:b6:9a:bd:78:71:6c:2c:ba: 44:c2:5d:64:77:3c:c6:0c:4f:3a:40:0b:e1:eb:d6: e6:02:8f:76:2d:d3:7c:1d:a1:6f:9c:77:18:cb:08: 13:68:87:c6:6d:3c:74:d7:64:5a:54:2b:44:ce:a3: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:27:D9:5E:9B:52:FB:3F:EB:C8:3D:63:93:37:E2:A8:D7:DF:8C:86 X509v3 Authority Key Identifier: keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a9:88:b2:a8:e1:e2:47:cb:0c:87:84:65:84:18:35:b0:43: d4:ca:69:24:84:96:7d:48:6c:a4:76:33:21:9b:9f:30:f6:41: 1c:15:8e:49:d3:e5:67:86:b5:9b:b7:f6:60:98:5e:90:8f:51: 4d:fd:a4:a3:da:c0:e1:8a:a3:ed:f0:09:34:2f:cb:c6:70:72: d5:3d:da:32:ad:42:de:58:5c:bd:03:c1:c2:51:55:cf:e0:58: ef:92:3f:b8:d8:be:2f:5d:1b:14:29:db:c5:d6:02:06:bb:d2: 52:b1:6e:24:c5:c3:3c:28:af:dc:1e:5d:e9:80:f0:40:51:76: f8:9c:92:a5:c8:8f:9e:3d:60:7d:35:40:84:6c:5e:cf:31:a0: 4a:f2:d1:05:77:21:a7:0f:a8:f1:f6:5d:df:d8:1e:c0:fb:c9: ee:b8:eb:9d:a6:33:1e:23:ca:de:fe:c0:90:68:94:97:a3:9b: 0b:ab:d6:53:b1:3f:b3:b3:74:77:4c:ac:eb:84:4c:e9:6e:11: cb:a5:7b:91:42:36:ce:f5:f4:02:2f:81:53:40:7a:d3:26:4d: 9c:cf:42:bc:04:d7:f4:af:73:19:72:9a:12:02:12:58:95:a4: 41:6d:38:23:cf:e0:94:25:0b:a1:cd:02:61:87:3e:bd:c7:f5: 6e:93:d7:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUJCMzExMC8GA1UEBRMoNDI2RjRBRDU4NUQ3QTU0REQzNjJFM0Y3QjNDOEYzQUY2 QUE2M0MyRTAeFw0yNjA0MTcwODEyMjZaFw0yNjA0MjQwODEyMjZaMBgxFjAUBgNV BAMTDTY5ZTFlYjZhLTRkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCybKVuYiOJaHqguebdqzlvvcxJmKVKX0tagZAYHf+pW+zq0dF0n259/W6OWmRy CDd+pzUEpLDEh7+NCs/RgrA1R5V40/4lxx5tuifvmne+Cm7N6CqgCUiZ9NemGRkp h2CHkefFI+/tGH/XuoGFU+PXtJDlysEAzP5VLzVKtsMFu1KETBSuPPK1tb8DRRCp AFdXaLfmdQlHF0UYBEXQxFuOoNeoV8KnRGkMfmYCX8BiBOWks35Kh1IUoVqEBVGj nLCj+sLvmtcqIti2mr14cWwsukTCXWR3PMYMTzpAC+Hr1uYCj3Yt03wdoW+cdxjL CBNoh8ZtPHTXZFpUK0TOoytPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyifZXptS +z/ryD1jkzfiqNffjIYwHwYDVR0jBBgwFoAUQm9K1YXXpU3TYuP3s8jzr2qmPC4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzgxOThFMDE0RTI0 NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUzVFl1UDNzOGp6cjJxbVBD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW05SzFZWFhwVTNUWXVQM3M4anpyMnFtUEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 QkIzLzgxOThFMDE0RTI0NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUz VFl1UDNzOGp6cjJxbVBDNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCCqYiyqOHiR8sMh4RlhBg1sEPUymkkhJZ9SGykdjMhm58w9kEcFY5J0+VnhrWb t/ZgmF6Qj1FN/aSj2sDhiqPt8Ak0L8vGcHLVPdoyrULeWFy9A8HCUVXP4Fjvkj+4 2L4vXRsUKdvF1gIGu9JSsW4kxcM8KK/cHl3pgPBAUXb4nJKlyI+ePWB9NUCEbF7P MaBK8tEFdyGnD6jx9l3f2B7A+8nuuOudpjMeI8re/sCQaJSXo5sLq9ZTsT+zs3R3 TKzrhEzpbhHLpXuRQjbO9fQCL4FTQHrTJk2cz0K8BNf0r3MZcpoSAhJYlaRBbTgj z+CUJQuhzQJhhz69x/Vuk9c3 -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:53 2026 by rpki-client