$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: pbJbMlIy7Iq0ranvEaA0GMOKAV/S0REYgmGX3Zas2rU= Subject key identifier: 9B:1B:84:71:80:70:20:1A:AA:94:C4:B6:F6:9E:2B:7B:09:25:72:0E Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 0521 Signing time: Thu 16 Apr 2026 23:29:30 +0000 Manifest this update: Thu 16 Apr 2026 23:29:30 +0000 Manifest next update: Thu 23 Apr 2026 23:29:30 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: +dUjcuzlWY6dy41o9pjsmS3we7e6P2mYFqK4t3sCqRk=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Apr 16 23:29:30 2026 GMT Not After : Apr 23 23:29:30 2026 GMT Subject: CN=69e170da-90fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:6e:7a:1c:ff:dd:74:99:dd:ac:09:ea:62: 01:cd:23:81:d3:e9:46:5c:5a:ac:e4:b7:56:14:28: 51:21:7f:c7:2d:48:20:e2:48:01:f0:24:7a:77:0f: 28:98:37:de:22:b8:4c:e4:01:24:52:40:32:03:d9: 36:99:e4:f5:76:9b:e5:80:3c:42:ed:d9:9d:87:35: 5d:ba:73:1e:52:d9:39:c6:55:3d:4b:ef:13:5e:7f: ee:5e:90:69:92:da:3d:9a:7c:a4:66:94:20:39:89: 80:2c:8c:b8:88:c5:74:19:00:84:56:26:de:a2:31: a2:02:be:77:47:fc:21:9c:c1:88:eb:76:03:c5:77: e3:44:d2:30:fd:a0:e8:5d:fc:7a:79:2d:79:a0:37: 6a:23:2c:8b:f1:35:24:a3:c0:9d:6a:3a:81:b4:5e: 94:9c:c0:1a:ee:6b:79:cd:7d:6a:f3:db:cf:e9:90: 70:24:cb:48:60:95:c2:81:9e:4c:ae:ed:3c:5d:dc: 1b:a7:64:6d:37:13:90:f0:5a:d2:01:f5:cd:59:03: 89:8a:f7:52:14:28:90:36:35:3c:e8:c0:73:7d:3a: 38:cc:40:44:50:57:dd:20:6e:5b:d1:0b:3f:54:f7: 3e:76:45:5e:01:27:64:83:98:05:0e:e0:9d:5a:e3: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1B:84:71:80:70:20:1A:AA:94:C4:B6:F6:9E:2B:7B:09:25:72:0E X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:92:78:3f:f3:d2:34:9a:f3:5a:5b:2a:06:a1:c3:5f:2e:7d: c8:be:62:ee:bc:88:d3:a6:14:c5:50:1f:11:e6:f3:ff:df:01: 09:b6:6f:95:ac:d5:8c:f1:30:5b:83:b5:b2:6b:92:a8:06:46: 72:05:e9:e1:a1:e9:7d:c1:56:b6:d9:4a:fe:b6:12:fc:fe:81: 72:ef:b6:65:80:57:5f:a4:04:0d:71:2c:cb:fb:83:4c:67:a3: a5:f8:d4:a3:a0:b3:6c:f1:aa:e3:07:d5:19:89:3b:93:bc:c0: 27:b6:4c:fa:29:bd:e1:3f:b1:bf:6b:2f:9b:d7:49:33:58:d9: fb:17:55:4a:17:e0:d9:c2:96:9c:f8:3f:d0:13:fc:45:a2:8f: 9a:b7:3f:de:05:f5:4a:8b:72:78:52:ef:cc:8d:2a:d8:f7:3f: 72:77:20:8f:88:5c:4e:83:1d:12:ce:80:55:c7:02:16:c3:ad: f2:2f:a9:40:86:c1:73:bb:21:c0:a5:85:67:53:5a:e6:53:6a: 53:5b:08:e1:c8:f2:f7:e8:2e:ef:15:61:93:63:c0:c9:b3:bc: c5:4b:f7:d4:1e:59:93:50:dc:a2:8d:db:a6:71:ec:d3:cd:d2: 54:82:d1:7b:71:6c:da:c7:d9:9a:0c:00:e1:55:a0:32:1c:c6: f8:f8:9c:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjYwNDE2MjMyOTMwWhcNMjYwNDIzMjMyOTMwWjAYMRYwFAYD VQQDEw02OWUxNzBkYS05MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC9uehz/3XSZ3awJ6mIBzSOB0+lGXFqs5LdWFChRIX/HLUgg4kgB8CR6dw8o mDfeIrhM5AEkUkAyA9k2meT1dpvlgDxC7dmdhzVdunMeUtk5xlU9S+8TXn/uXpBp kto9mnykZpQgOYmALIy4iMV0GQCEVibeojGiAr53R/whnMGI63YDxXfjRNIw/aDo Xfx6eS15oDdqIyyL8TUko8CdajqBtF6UnMAa7mt5zX1q89vP6ZBwJMtIYJXCgZ5M ru08Xdwbp2RtNxOQ8FrSAfXNWQOJivdSFCiQNjU86MBzfTo4zEBEUFfdIG5b0Qs/ VPc+dkVeASdkg5gFDuCdWuMZvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsbhHGA cCAaqpTEtvaeK3sJJXIOMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF5J4P/PSNJrzWlsqBqHDXy59yL5i7ryI06YUxVAfEebz/98BCbZvlazVjPEw W4O1smuSqAZGcgXp4aHpfcFWttlK/rYS/P6Bcu+2ZYBXX6QEDXEsy/uDTGejpfjU o6CzbPGq4wfVGYk7k7zAJ7ZM+im94T+xv2svm9dJM1jZ+xdVShfg2cKWnPg/0BP8 RaKPmrc/3gX1SotyeFLvzI0q2Pc/cncgj4hcToMdEs6AVccCFsOt8i+pQIbBc7sh wKWFZ1Na5lNqU1sI4cjy9+gu7xVhk2PAybO8xUv31B5Zk1Dcoo3bpnHs083SVILR e3Fs2sfZmgwA4VWgMhzG+Pic6Q== -----END CERTIFICATE-----Generated at Fri Apr 17 06:53:21 2026 by rpki-client