$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json) Hash identifier: srHi9xv8NtGp9cHIcGBFGhPNwX7R/0zqpfhPddnn0u8= Subject key identifier: C9:8F:43:12:D6:85:8F:CE:F5:BA:58:8A:3F:FE:4E:35:5C:13:86:2A Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft Manifest number: 1F Signing time: Sun 05 Apr 2026 08:14:52 +0000 Manifest this update: Sun 05 Apr 2026 08:14:52 +0000 Manifest next update: Sun 12 Apr 2026 08:14:52 +0000 Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: AzaFgOpsMbTTbajSK4gkIcrFaYcjAmTX2mk6fYfTA+I=) 2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: Apr 5 08:14:52 2026 GMT Not After : Apr 12 08:14:52 2026 GMT Subject: CN=69d219fc-ada5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:c6:45:34:40:14:f3:97:67:27:3d:74:14: bb:b1:c7:8b:ab:af:c4:6a:6e:9b:47:93:b6:cc:e1: 0a:f8:af:82:70:ac:51:ff:f5:ad:92:c2:3d:17:33: 20:99:0c:ab:7a:90:29:ae:7d:52:38:28:ab:b8:9f: 2c:2f:9e:da:45:e5:01:b2:5e:81:07:8f:11:45:81: 62:3e:06:87:65:2c:53:82:11:ba:cb:db:e8:1e:b9: 0c:ee:0d:f8:e2:ef:ba:b7:f1:b8:4a:fc:d2:22:39: 4b:1a:ea:da:91:20:26:db:bb:82:42:e6:32:c3:51: 70:cc:d7:90:69:f0:74:f6:6d:4c:6a:d2:a3:27:58: 87:d8:13:d8:f1:5d:10:3c:9c:d6:1a:e8:ac:09:94: 79:9a:41:2f:d1:65:0a:ed:85:c5:39:92:3b:f0:ee: 0b:1d:65:47:4d:a6:a5:4a:e2:fe:73:6f:98:9b:79: 69:84:cc:2a:aa:fd:99:cf:70:2e:9d:67:64:2b:56: d8:1f:0e:be:3e:f4:4c:b2:51:1e:54:6b:00:b6:23: 8c:0d:02:23:50:d1:0f:b4:00:f1:f7:43:c3:ed:14: 00:d6:b9:1e:69:45:a9:2b:e1:fb:9b:94:77:bd:03: 48:af:bf:da:92:ca:36:f3:dd:77:de:62:6a:6a:b1: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8F:43:12:D6:85:8F:CE:F5:BA:58:8A:3F:FE:4E:35:5C:13:86:2A X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:33:6a:6d:11:dd:19:42:32:07:74:2a:5d:cd:66:0a:81:d7: 5a:07:7e:f7:37:a8:03:c7:6a:c0:59:ba:de:ec:ff:69:00:a6: d0:01:ba:52:d2:04:41:99:e9:b4:67:9e:0f:fa:5e:bd:df:14: ec:18:90:cd:37:39:f7:36:c5:84:3e:38:c2:b2:96:77:8d:d3: ba:8a:7f:a3:7d:44:9a:1e:f7:05:15:41:87:c4:48:c1:72:1b: 88:7b:86:ca:1f:bd:b8:2d:c0:e8:61:35:86:4b:c6:af:78:76: 2f:fa:fe:4e:b4:1e:87:fd:5b:2b:33:3e:e4:ce:33:92:77:97: a1:36:ea:f9:a7:bb:3a:73:1c:7c:6e:9e:c5:a2:01:1e:ec:b1: 49:6e:96:54:60:91:02:28:28:15:fc:fd:a5:ee:25:1e:a9:43: d7:90:d7:e4:53:80:0b:16:8a:01:23:ba:43:d2:bb:fa:44:87: 1b:df:5a:34:6d:8f:db:6e:86:6e:8a:07:dd:14:ef:11:df:37: fc:fb:da:e3:7b:77:cf:2a:db:67:cb:b9:20:68:e9:bd:f2:4f: 55:1c:49:db:73:30:99:36:e2:a6:48:b4:b9:9d:d9:a1:59:67: 17:33:4d:60:36:f8:d2:ca:4e:60:b5:85:1f:d9:50:02:38:99: 52:00:2c:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjA0MDUwODE0NTJaFw0yNjA0MTIwODE0NTJaMBgxFjAUBgNV BAMTDTY5ZDIxOWZjLWFkYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqCsZFNEAU85dnJz10FLuxx4urr8RqbptHk7bM4Qr4r4JwrFH/9a2Swj0XMyCZ DKt6kCmufVI4KKu4nywvntpF5QGyXoEHjxFFgWI+BodlLFOCEbrL2+geuQzuDfji 77q38bhK/NIiOUsa6tqRICbbu4JC5jLDUXDM15Bp8HT2bUxq0qMnWIfYE9jxXRA8 nNYa6KwJlHmaQS/RZQrthcU5kjvw7gsdZUdNpqVK4v5zb5ibeWmEzCqq/ZnPcC6d Z2QrVtgfDr4+9EyyUR5UawC2I4wNAiNQ0Q+0APH3Q8PtFADWuR5pRakr4fublHe9 A0ivv9qSyjbz3XfeYmpqsVbnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyY9DEtaF j871uliKP/5ONVwThiowHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NkIxL0Y0QTkxNTdBMDg4QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRv WVJCb3FjT0JSU3NsOFFFMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6M2ptEd0ZQjIHdCpdzWYKgddaB373N6gDx2rAWbre7P9pAKbQAbpS0gRBmem0 Z54P+l693xTsGJDNNzn3NsWEPjjCspZ3jdO6in+jfUSaHvcFFUGHxEjBchuIe4bK H724LcDoYTWGS8aveHYv+v5OtB6H/VsrMz7kzjOSd5ehNur5p7s6cxx8bp7FogEe 7LFJbpZUYJECKCgV/P2l7iUeqUPXkNfkU4ALFooBI7pD0rv6RIcb31o0bY/bboZu igfdFO8R3zf8+9rje3fPKttny7kgaOm98k9VHEnbczCZNuKmSLS5ndmhWWcXM01g NvjSyk5gtYUf2VACOJlSACzV -----END CERTIFICATE-----Generated at Sun Apr 5 19:49:16 2026 by rpki-client