$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft File: aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json) Hash identifier: qjFX8sQeGNarzElzK6IZ65/bSh6b+/K7ftu6Vu3fO/s= Subject key identifier: 06:51:13:DD:F4:21:1C:FB:0A:7C:67:8B:2D:D1:65:1F:97:2A:36:0E Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6 Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft Manifest number: 26 Signing time: Sun 05 Apr 2026 08:13:23 +0000 Manifest this update: Sun 05 Apr 2026 08:13:23 +0000 Manifest next update: Sun 12 Apr 2026 08:13:23 +0000 Files and hashes: 1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: lFqlnps1G3STA0aqP25O/GH6UDOm8Dpm3acuXgJqQiE=) 2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: xqonfLO8pGFGJqrL6Ubam0r8pA6SA2doL9TBCfFtqWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6 Validity Not Before: Apr 5 08:13:23 2026 GMT Not After : Apr 12 08:13:23 2026 GMT Subject: CN=69d219a3-d9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:26:4e:33:16:c5:81:80:eb:bd:21:72:15: 5b:ed:0f:98:88:20:3e:90:84:24:38:04:71:fc:de: 85:09:f7:e1:a3:b9:10:09:f5:f9:99:57:e0:3b:f2: a5:76:f2:36:1e:29:63:7c:37:c4:eb:b1:ee:3f:a0: 59:cd:cf:31:ea:f5:6f:45:9e:ec:7e:ac:7a:31:59: 91:32:74:10:4d:22:8d:48:01:c7:a1:7f:24:6d:bf: cb:6b:52:17:10:f4:54:e6:65:4b:84:67:03:92:69: e4:c2:51:55:cb:f2:7d:b8:f6:87:f7:ab:a4:44:60: 85:34:96:64:87:26:2b:9f:56:b4:8d:3b:eb:8a:e1: 85:28:67:a4:28:3f:e8:cb:fd:06:67:c0:82:ff:c9: 6c:e1:ae:c1:38:da:25:98:68:a0:f7:d5:d3:51:57: 92:e4:53:c5:75:5d:d6:40:48:31:67:83:10:18:01: 4c:d0:cd:92:2a:5a:33:7d:df:b4:bd:23:80:96:5e: 32:a7:cc:8f:10:17:d3:52:8d:66:03:9e:31:0f:d9: 6e:b3:bd:79:15:5e:2a:75:20:de:21:5e:a2:7c:fc: 15:ed:34:4a:ff:11:f6:67:e9:d9:2a:02:58:ef:ad: ca:7d:52:8d:86:f3:00:d4:b4:e3:6c:2b:c0:60:d3: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:13:DD:F4:21:1C:FB:0A:7C:67:8B:2D:D1:65:1F:97:2A:36:0E X509v3 Authority Key Identifier: keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:aa:74:30:09:06:57:26:44:f9:f8:c4:04:cb:8b:66:8c:4e: c0:ce:1d:7b:22:89:16:0c:2e:ed:7e:d9:21:12:13:2d:1f:4a: d6:51:a4:71:b2:3d:43:3b:64:4c:7e:a1:ff:e0:37:f3:92:45: 19:5e:78:d3:a4:c4:dc:1c:3e:a7:e5:54:24:25:ce:bc:f7:d8: d7:8d:07:59:34:bf:5f:30:d0:40:ab:aa:61:f7:5a:1c:18:9c: 27:ab:97:ca:b9:0a:64:16:df:94:ff:00:b4:c4:36:6b:4e:64: 89:4e:01:ad:5d:1c:14:89:12:50:f7:19:e4:1c:4d:e7:4e:1b: aa:b4:d4:04:8b:32:bd:1f:ae:fa:25:6c:43:36:55:93:c4:80: 8b:4d:d1:4c:52:54:8e:f9:cf:51:6d:30:71:55:22:d8:1e:c2: 4b:16:5a:e7:6a:50:1e:0f:32:7c:b8:ad:e3:8f:64:5b:8f:c3: 85:6d:53:0f:ba:5c:38:fe:3c:dc:d4:92:9e:fc:88:2b:d3:11: 14:ca:ba:bf:c0:4f:84:eb:20:32:de:50:2e:a9:56:f0:aa:01: d3:63:89:c4:03:f6:9f:46:f0:94:81:2d:29:19:e6:fb:16:55: 41:03:fa:d3:03:d0:15:76:51:4b:7a:24:e7:bd:b9:90:24:e7: 9d:64:81:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OTY5MDExMC8GA1UEBRMoNjk5RjU1NDREMDc4QTkwQUY1QUE2MDQxMkUxQUQzRjFG QkRFNENENjAeFw0yNjA0MDUwODEzMjNaFw0yNjA0MTIwODEzMjNaMBgxFjAUBgNV BAMTDTY5ZDIxOWEzLWQ5ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc/iZOMxbFgYDrvSFyFVvtD5iIID6QhCQ4BHH83oUJ9+GjuRAJ9fmZV+A78qV2 8jYeKWN8N8Trse4/oFnNzzHq9W9Fnux+rHoxWZEydBBNIo1IAcehfyRtv8trUhcQ 9FTmZUuEZwOSaeTCUVXL8n249of3q6REYIU0lmSHJiufVrSNO+uK4YUoZ6QoP+jL /QZnwIL/yWzhrsE42iWYaKD31dNRV5LkU8V1XdZASDFngxAYAUzQzZIqWjN937S9 I4CWXjKnzI8QF9NSjWYDnjEP2W6zvXkVXip1IN4hXqJ8/BXtNEr/EfZn6dkqAljv rcp9Uo2G8wDUtONsK8Bg0y9ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBlET3fQh HPsKfGeLLdFlH5cqNg4wHwYDVR0jBBgwFoAUaZ9VRNB4qQr1qmBBLhrT8fveTNYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NjkwL0E2Njk0QjNDMDNC MzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFyMXFtQkJMaHJUOGZ2ZVRO WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVo5VlJOQjRxUXIxcW1CQkxoclQ4ZnZlVE5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 NjkwL0E2Njk0QjNDMDNCMzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFy MXFtQkJMaHJUOGZ2ZVROWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAuqnQwCQZXJkT5+MQEy4tmjE7Azh17IokWDC7tftkhEhMtH0rWUaRxsj1DO2RM fqH/4DfzkkUZXnjTpMTcHD6n5VQkJc6899jXjQdZNL9fMNBAq6ph91ocGJwnq5fK uQpkFt+U/wC0xDZrTmSJTgGtXRwUiRJQ9xnkHE3nThuqtNQEizK9H676JWxDNlWT xICLTdFMUlSO+c9RbTBxVSLYHsJLFlrnalAeDzJ8uK3jj2Rbj8OFbVMPulw4/jzc 1JKe/Igr0xEUyrq/wE+E6yAy3lAuqVbwqgHTY4nEA/afRvCUgS0pGeb7FlVBA/rT A9AVdlFLeiTnvbmQJOedZIH8 -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:18 2026 by rpki-client