$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: SOQYk0L2KyeVkuOMfuw1UC9zvUAi5SYoCkbqtsP53TQ= Subject key identifier: 48:19:C8:A4:91:01:30:75:18:C2:51:09:38:4B:70:A6:CD:4D:73:1D Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: DF Signing time: Fri 17 Apr 2026 06:20:26 +0000 Manifest this update: Fri 17 Apr 2026 06:20:26 +0000 Manifest next update: Fri 24 Apr 2026 06:20:26 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: 2ezlgi7ClUq6kmd36ZSOxNeOYxoTOI/bVca68Yv4nF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Apr 17 06:20:26 2026 GMT Not After : Apr 24 06:20:26 2026 GMT Subject: CN=69e1d12a-af96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:14:95:a6:ad:c7:55:b6:f8:bb:dd:41:21: 45:d3:d4:e2:be:05:e4:58:c7:4c:81:ca:f5:1a:23: c8:92:71:f8:a6:b1:c8:7b:76:da:ae:de:fc:d7:b7: 1b:cb:d6:ab:14:bd:87:a4:a5:b3:de:03:bb:00:0c: 1a:f3:95:5d:eb:a7:34:21:ab:83:32:0e:5c:a7:cd: 18:f8:e1:6c:4e:0e:2a:19:67:ce:fb:68:e1:ac:2c: e9:98:b9:07:11:75:c1:05:11:f4:89:cc:bd:0b:0d: e5:4b:e9:96:89:bf:64:de:cd:9c:06:35:a2:03:1d: b3:00:fd:c2:1c:c6:92:ba:14:f5:19:77:fe:d7:45: 21:fb:f5:7f:2f:99:fd:07:1c:f7:a3:cf:87:cd:08: b6:2f:e9:f0:05:03:86:76:67:af:fc:d3:99:68:6f: 64:9c:dc:ca:4f:86:fe:18:cc:40:8e:a3:1e:2f:fd: 5e:8a:7d:52:c9:f0:c2:2b:b7:b2:76:1d:43:8a:9d: 71:a3:89:b5:cf:97:b5:f9:dd:33:6c:bd:a7:06:dc: b0:df:d9:ce:bd:ed:a8:57:f2:9d:4b:fd:e8:7d:af: b1:78:c7:99:10:aa:d9:4f:3b:00:be:d7:a3:92:9c: e8:c3:6a:60:13:59:7b:88:9f:1f:c6:13:67:aa:02: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:19:C8:A4:91:01:30:75:18:C2:51:09:38:4B:70:A6:CD:4D:73:1D X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:81:23:48:6a:d9:46:9b:f9:59:da:c7:f2:83:80:78:ae:c8: cb:4c:d5:68:15:2c:3e:03:e7:47:85:6a:2b:94:01:6a:0c:96: d0:97:7b:7b:6d:44:0f:26:58:02:73:ac:fc:a6:62:d6:21:e6: 52:f3:03:83:f4:2a:3b:5d:8a:09:88:b3:c7:b3:07:1e:26:96: 33:a0:46:79:c2:87:69:f0:39:85:9e:6b:4e:ed:98:c6:45:74: 67:b4:d4:fd:44:b5:4b:df:d1:e4:47:59:1c:21:b9:14:f5:ea: 85:e1:76:d1:ac:24:b2:68:aa:13:40:b6:d5:e5:87:ee:c7:f6: 73:14:1b:e4:b4:93:ee:3d:98:e5:e3:11:37:c1:b0:19:a3:61: bf:8d:60:c0:44:9a:0a:0e:1b:5d:cb:f8:46:f8:8e:6d:19:f1: 7e:ae:d6:c3:1b:94:bd:74:10:14:81:f2:79:f9:99:f3:b3:b9: bc:52:2c:5d:3e:fe:89:09:53:f6:1a:93:89:7f:20:d6:78:da: fd:f7:b4:c5:f6:7a:b1:0a:c6:1e:98:28:7f:d1:7e:93:08:78: d7:39:86:27:b6:59:67:19:bb:da:22:57:16:c5:06:68:6b:a0: 73:4f:82:d8:2c:2b:2c:9e:8e:88:57:52:54:54:1b:14:a8:0c: ee:c0:b9:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDMzQTAxNzRBNEE0QjAwOUMwMTE1MTU5NjkxMzZGMzAx MDg5REI1QjUwHhcNMjYwNDE3MDYyMDI2WhcNMjYwNDI0MDYyMDI2WjAYMRYwFAYD VQQDEw02OWUxZDEyYS1hZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iwUlaatx1W2+LvdQSFF09TivgXkWMdMgcr1GiPIknH4prHIe3bart7817cb y9arFL2HpKWz3gO7AAwa85Vd66c0IauDMg5cp80Y+OFsTg4qGWfO+2jhrCzpmLkH EXXBBRH0icy9Cw3lS+mWib9k3s2cBjWiAx2zAP3CHMaSuhT1GXf+10Uh+/V/L5n9 Bxz3o8+HzQi2L+nwBQOGdmev/NOZaG9knNzKT4b+GMxAjqMeL/1ein1SyfDCK7ey dh1Dip1xo4m1z5e1+d0zbL2nBtyw39nOve2oV/KdS/3ofa+xeMeZEKrZTzsAvtej kpzow2pgE1l7iJ8fxhNnqgKbjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgZyKSR ATB1GMJRCThLcKbNTXMdMB8GA1UdIwQYMBaAFDOgF0pKSwCcARUVlpE28wEInbW1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy80M0VBNkIxOEVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFKd0JGUldXa1RiekFRaWR0 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy80M0VBNkIxOEVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFK d0JGUldXa1RiekFRaWR0YlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtYEjSGrZRpv5WdrH8oOAeK7Iy0zVaBUsPgPnR4VqK5QBagyW0Jd7e21EDyZY AnOs/KZi1iHmUvMDg/QqO12KCYizx7MHHiaWM6BGecKHafA5hZ5rTu2YxkV0Z7TU /US1S9/R5EdZHCG5FPXqheF20awksmiqE0C21eWH7sf2cxQb5LST7j2Y5eMRN8Gw GaNhv41gwESaCg4bXcv4RviObRnxfq7WwxuUvXQQFIHyefmZ87O5vFIsXT7+iQlT 9hqTiX8g1nja/fe0xfZ6sQrGHpgof9F+kwh41zmGJ7ZZZxm72iJXFsUGaGugc0+C 2CwrLJ6OiFdSVFQbFKgM7sC5hw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:41 2026 by rpki-client