$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: 8GBSG5S6D4Uvzfa+eecz5LcMCYR3b7JvyRnbgjbolOU= Subject key identifier: 26:02:F6:25:41:78:29:C3:F5:C5:39:5C:AD:73:0A:E4:F1:F2:50:34 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 021A Signing time: Fri 17 Apr 2026 02:35:23 +0000 Manifest this update: Fri 17 Apr 2026 02:35:23 +0000 Manifest next update: Fri 24 Apr 2026 02:35:23 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: 4KvLndOqT4cV3MQCYNvL893N8G2NHxgy7XTCd16na6o=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: BQffJWUhC3MFwSjvVuhP9nq/ZEQ/mBQ35OQP2zYEaDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Apr 17 02:35:23 2026 GMT Not After : Apr 24 02:35:23 2026 GMT Subject: CN=69e19c6b-c0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:74:68:e4:25:76:ae:21:e7:a1:2d:f6:ae: c7:22:6d:b4:09:aa:2f:f2:3c:28:19:f2:fe:3e:11: c4:f5:fa:2f:72:86:2a:28:ac:9d:b3:26:c8:de:a3: f8:15:ad:ce:e8:55:e1:46:d0:4e:64:cc:c0:1b:0a: 6b:29:f1:3d:19:b5:1a:7f:0c:8f:e0:b1:0b:2e:fe: 07:23:a3:92:bb:35:d3:d2:b1:b9:4b:a1:7d:79:cc: eb:63:0c:34:9b:a2:21:ef:8b:06:12:11:8c:af:ea: c7:09:1b:b2:d1:28:4d:b7:42:ae:8e:26:0f:45:99: ed:d7:21:dd:d0:6d:69:ae:02:9a:dd:04:0b:e8:af: da:e4:dd:43:77:99:e4:c0:a2:10:96:96:1a:01:03: 25:0e:3c:19:12:4a:e4:8e:2f:82:3e:f9:f0:c8:dc: e8:bc:80:48:f8:0b:15:80:30:c8:81:18:71:cb:0d: 7e:20:05:02:3b:0b:84:52:39:9e:2e:8e:1a:5c:ae: 44:82:00:13:02:2f:87:5f:46:c6:65:ae:ef:91:21: 93:e0:de:a1:f2:ac:09:63:43:c2:dd:de:d2:33:82: 91:38:81:5c:4e:ba:12:c7:53:08:4b:09:c7:df:b6: 80:f1:66:62:26:b4:ee:60:ef:7d:43:05:81:6c:1d: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:F6:25:41:78:29:C3:F5:C5:39:5C:AD:73:0A:E4:F1:F2:50:34 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:29:1e:13:17:cb:52:3b:86:bb:82:30:cf:c4:64:d6:e5:94: af:95:fd:d4:a7:70:72:32:f9:82:d8:6c:7e:25:57:57:3b:2a: 80:09:8e:8b:2f:21:64:97:f0:06:93:5f:b8:13:4f:ed:ad:7a: 93:68:ce:a0:ae:16:65:8c:a4:8c:91:0b:70:6e:de:9d:0a:44: 5f:75:8a:c7:36:64:79:ba:fd:73:97:2b:e4:7d:d2:e2:76:b9: 48:42:d7:db:ae:6a:6d:12:96:eb:5c:c2:5e:a4:9b:1d:b7:1d: 57:7e:94:83:67:b4:a8:68:79:b3:14:db:a1:05:7f:8c:c0:c4: 96:77:b8:eb:b7:ad:58:28:c9:23:f9:da:85:3e:e1:3f:fd:e4: a5:9a:42:db:97:8d:a8:6b:33:d3:c4:41:a6:2e:3c:b1:8b:b9: 1d:9c:5c:2a:d4:91:66:91:11:ba:ab:8a:38:af:f9:dd:72:13: e8:64:f7:34:15:d8:8b:cd:b0:25:d0:ea:9b:14:a0:17:d3:f7: 33:0b:bf:85:9d:cd:4d:66:01:49:a9:e5:dd:c9:8c:97:f2:b7: 5e:55:61:73:c1:f4:61:ac:4c:2f:db:43:f8:d1:22:aa:cb:92: fa:e4:b0:4c:fd:d4:65:5f:9f:8a:88:f5:ae:92:24:07:bc:fb: d6:ae:26:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwNDE3MDIzNTIzWhcNMjYwNDI0MDIzNTIzWjAYMRYwFAYD VQQDEw02OWUxOWM2Yi1jMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkXJ0aOQldq4h56Et9q7HIm20Caov8jwoGfL+PhHE9fovcoYqKKydsybI3qP4 Fa3O6FXhRtBOZMzAGwprKfE9GbUafwyP4LELLv4HI6OSuzXT0rG5S6F9eczrYww0 m6Ih74sGEhGMr+rHCRuy0ShNt0KujiYPRZnt1yHd0G1prgKa3QQL6K/a5N1Dd5nk wKIQlpYaAQMlDjwZEkrkji+CPvnwyNzovIBI+AsVgDDIgRhxyw1+IAUCOwuEUjme Lo4aXK5EggATAi+HX0bGZa7vkSGT4N6h8qwJY0PC3d7SM4KROIFcTroSx1MISwnH 37aA8WZiJrTuYO99QwWBbB0nuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYC9iVB eCnD9cU5XK1zCuTx8lA0MB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQCkeExfLUjuGu4Iwz8Rk1uWUr5X91KdwcjL5gthsfiVXVzsqgAmOiy8hZJfw BpNfuBNP7a16k2jOoK4WZYykjJELcG7enQpEX3WKxzZkebr9c5cr5H3S4na5SELX 265qbRKW61zCXqSbHbcdV36Ug2e0qGh5sxTboQV/jMDElne467etWCjJI/nahT7h P/3kpZpC25eNqGsz08RBpi48sYu5HZxcKtSRZpERuquKOK/53XIT6GT3NBXYi82w JdDqmxSgF9P3Mwu/hZ3NTWYBSanl3cmMl/K3XlVhc8H0YaxML9tD+NEiqsuS+uSw TP3UZV+fioj1rpIkB7z71q4mVw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:18 2026 by rpki-client