$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft File: nGKQqKEuiIZBN0PX8QV39DkWnH0.mft (raw, json) Hash identifier: Qk1DWctdwfXEtJ3xaq21HrBG03dk5sPMh9IoHVrxWVo= Subject key identifier: 16:43:1D:36:18:2B:6C:D4:07:1D:A9:C7:0E:A7:DF:1A:EC:06:99:4D Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft Manifest number: 10 Signing time: Fri 17 Apr 2026 08:47:00 +0000 Manifest this update: Fri 17 Apr 2026 08:46:59 +0000 Manifest next update: Fri 24 Apr 2026 08:46:59 +0000 Files and hashes: 1: nGKQqKEuiIZBN0PX8QV39DkWnH0.crl (hash: MBmG4BFadyUs0ahYHxiKjGFsMmGKG0/JSZ3EwA5tSYM=) 2: E3BDC64224D411F191B1E656AB833773.roa (hash: AIltHDKkxFZaiNdMv+LKbbe7L1vKTPjxvnacYsn/9PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D Validity Not Before: Apr 17 08:46:59 2026 GMT Not After : Apr 24 08:46:59 2026 GMT Subject: CN=69e1f384-e0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:75:4e:cf:71:33:61:4a:a3:cb:9d:f2:63: a9:9e:3a:e4:71:ec:3d:d2:62:c7:ea:46:af:4a:9a: 70:af:47:fe:00:4a:df:91:02:9e:bf:22:c4:0d:2c: a5:3f:ac:92:92:99:0b:d2:84:cd:7a:4b:a3:dc:95: 54:15:b1:6d:20:d4:6e:0f:84:67:6f:0a:a7:e2:a0: f3:55:a6:31:c3:ae:b4:cc:11:d1:8d:74:2d:af:7b: 4b:ca:6a:db:ca:3a:b1:4f:11:74:48:81:80:76:34: db:dd:b2:99:4a:c7:cb:73:fe:ef:06:1c:11:00:8e: f5:9b:84:8e:3f:7b:f7:e0:42:8f:4b:9e:63:0c:f2: 74:d6:07:af:fc:7a:75:0b:9b:5b:ab:79:6e:b7:98: 26:64:d0:05:30:cd:6d:fa:55:fe:d5:3a:f0:0f:18: 14:66:5c:82:81:7c:62:2a:d3:22:10:82:94:3c:98: bd:96:a6:fb:5a:66:1e:0d:6f:04:20:86:68:34:a0: 89:5f:5f:7a:27:db:3b:94:ef:6e:48:22:16:d9:00: 73:fe:dc:06:8a:99:b2:43:c5:97:ec:f1:12:51:8f: 9f:76:e3:ef:ce:a6:43:fd:86:52:f4:fe:95:2b:c3: 90:b0:6a:2a:18:18:1d:ab:05:55:ec:50:d6:ed:e1: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:43:1D:36:18:2B:6C:D4:07:1D:A9:C7:0E:A7:DF:1A:EC:06:99:4D X509v3 Authority Key Identifier: keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:14:0c:22:59:84:e5:8a:a7:b8:1a:4a:ed:5f:8a:12:45:2e: c4:fc:a9:9d:e0:ee:a9:c6:c7:cc:c4:36:18:00:e7:df:26:38: 35:4e:e9:99:df:91:8e:be:c3:4e:b9:e2:7b:78:08:3c:84:23: a8:34:d0:e1:fb:64:4d:1e:8f:35:67:f2:1c:34:3f:9f:18:90: f3:c3:b0:e6:6a:e6:45:6e:44:a4:ae:42:93:1a:58:ed:3d:2f: 5e:28:6e:09:4b:3b:41:65:b1:c1:f1:5d:81:72:1c:de:5b:b5: 5c:59:13:72:4f:43:77:9c:84:c8:df:33:3f:f1:92:6c:62:ed: 24:8a:21:94:3a:5a:1c:1e:eb:db:4b:5a:77:1f:cc:4a:2a:91: 84:e1:af:2a:9b:54:6e:66:52:c4:a1:e0:cd:9d:8a:77:ed:74: f5:aa:a0:80:c3:80:ca:c7:1c:b8:3c:b3:90:12:cf:08:3b:d1: b3:ab:42:0e:89:4a:ac:cd:5b:f3:05:97:18:21:5c:b2:b6:d1: d2:73:47:60:2b:e5:b2:6b:9b:02:fe:df:22:7f:ab:69:88:e6: b8:89:f5:f1:aa:2e:ab:b0:a1:6d:ff:c6:64:c1:8a:56:d6:82: 8f:72:99:63:4f:36:12:e3:b8:de:f2:90:33:2c:87:0d:41:36: d1:c0:e7:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0E0NzExMC8GA1UEBRMoOUM2MjkwQThBMTJFODg4NjQxMzc0M0Q3RjEwNTc3RjQz OTE2OUM3RDAeFw0yNjA0MTcwODQ2NTlaFw0yNjA0MjQwODQ2NTlaMBgxFjAUBgNV BAMTDTY5ZTFmMzg0LWUwZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPEXVOz3EzYUqjy53yY6meOuRx7D3SYsfqRq9KmnCvR/4ASt+RAp6/IsQNLKU/ rJKSmQvShM16S6PclVQVsW0g1G4PhGdvCqfioPNVpjHDrrTMEdGNdC2ve0vKatvK OrFPEXRIgYB2NNvdsplKx8tz/u8GHBEAjvWbhI4/e/fgQo9LnmMM8nTWB6/8enUL m1ureW63mCZk0AUwzW36Vf7VOvAPGBRmXIKBfGIq0yIQgpQ8mL2WpvtaZh4NbwQg hmg0oIlfX3on2zuU725IIhbZAHP+3AaKmbJDxZfs8RJRj5924+/OpkP9hlL0/pUr w5CwaioYGB2rBVXsUNbt4bjfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFkMdNhgr bNQHHanHDqffGuwGmU0wHwYDVR0jBBgwFoAUnGKQqKEuiIZBN0PX8QV39DkWnH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQ3Lzk1RTc2RDYwMjRE NDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUlaQk4wUFg4UVYzOURrV25I MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkdLUXFLRXVpSVpCTjBQWDhRVjM5RGtXbkgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTQ3Lzk1RTc2RDYwMjRENDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUla Qk4wUFg4UVYzOURrV25IMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6FAwiWYTliqe4GkrtX4oSRS7E/Kmd4O6pxsfMxDYYAOffJjg1TumZ35GOvsNO ueJ7eAg8hCOoNNDh+2RNHo81Z/IcND+fGJDzw7DmauZFbkSkrkKTGljtPS9eKG4J SztBZbHB8V2BchzeW7VcWRNyT0N3nITI3zM/8ZJsYu0kiiGUOlocHuvbS1p3H8xK KpGE4a8qm1RuZlLEoeDNnYp37XT1qqCAw4DKxxy4PLOQEs8IO9Gzq0IOiUqszVvz BZcYIVyyttHSc0dgK+Wya5sC/t8if6tpiOa4ifXxqi6rsKFt/8ZkwYpW1oKPcplj TzYS47je8pAzLIcNQTbRwOed -----END CERTIFICATE-----Generated at Fri Apr 17 19:41:25 2026 by rpki-client