$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: HyJUJOj9R+3BOpQ6JnBE0VMMBmQIRyH4XmY+QCqUp2Y= Subject key identifier: BC:C4:67:E8:46:2A:36:77:7E:AE:B0:65:2B:89:8F:E5:24:81:DE:76 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 0326 Signing time: Sun 05 Apr 2026 00:50:58 +0000 Manifest this update: Sun 05 Apr 2026 00:50:58 +0000 Manifest next update: Sun 12 Apr 2026 00:50:58 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: pdNrGYDC/Eu81iS0gxQCUoG0gQpRLFyykEUHlG0QiHk=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: 9y7l5xDl3TqzqRPu7NQw/yrhqKT6b0rd979dT8z29Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Apr 5 00:50:58 2026 GMT Not After : Apr 12 00:50:58 2026 GMT Subject: CN=69d1b1f2-f55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:fc:83:56:f9:cc:4f:f9:89:b8:fc:2e:2a: 03:67:d8:d8:bb:f1:ac:e0:73:71:2a:76:f7:70:7d: f0:2b:9d:c2:e8:ec:3b:d6:14:a8:11:3e:e9:9f:a7: ad:63:0a:ab:98:b9:02:e7:0a:f9:a8:59:66:23:7a: 2e:a6:6f:40:2e:74:58:23:35:b8:07:c0:10:0d:9d: 2a:84:12:2c:a1:7e:02:87:9a:59:d8:80:fe:60:c4: 7f:40:ca:7d:8b:e2:70:31:4c:fd:9a:27:2f:9c:da: c2:e4:ca:0d:ca:ad:c8:89:d2:bb:c5:7f:9c:97:2e: 3d:18:12:1f:b8:29:8a:17:a3:e8:7a:fa:9c:6f:30: 6b:ea:42:5f:d1:25:ce:69:05:62:ed:d1:2f:da:21: 0e:e6:62:6f:8c:e6:8c:c7:36:fd:a0:f3:cf:78:f7: 65:8b:6f:e4:bf:7c:97:a8:b6:09:83:a4:ca:25:94: 54:ba:de:c0:93:af:34:7d:d1:38:24:2e:26:e7:7f: 7e:36:16:f7:a2:dd:1d:32:1b:1a:94:e9:bc:d6:4c: f9:f5:8e:1c:d0:46:ca:bb:0b:4e:51:ac:0b:73:4e: 9f:75:e1:f8:cd:d3:c0:8a:01:38:fc:27:ce:aa:01: 5b:c1:3e:f7:50:a1:a9:e6:79:5f:a6:be:dd:55:54: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C4:67:E8:46:2A:36:77:7E:AE:B0:65:2B:89:8F:E5:24:81:DE:76 X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:2d:4d:ba:d9:7f:70:bc:8a:2d:44:39:c8:9e:57:7d:4b:80: 80:5b:3a:56:61:d1:94:03:13:c6:07:a0:b8:b8:b1:42:e9:f2: 4f:4d:94:d1:12:f3:e5:2e:27:c5:e0:8d:5b:1f:56:d0:30:69: 56:6a:aa:77:4a:fa:0e:38:78:5c:0d:e6:70:07:db:34:0d:3d: c0:f0:40:35:03:ce:37:46:65:29:74:c4:29:67:b4:aa:0e:e3: 2b:bd:a8:b1:66:d1:b9:3b:ac:c6:10:04:de:ed:57:8f:0e:b3: fb:77:bf:8d:7e:41:8f:09:70:42:73:5b:6e:b2:32:0a:e9:a1: 2c:27:e5:a5:db:3e:d8:eb:26:74:cb:2a:48:13:ed:18:b3:dc: 41:8b:27:36:b7:39:ab:0d:84:84:f9:1b:fc:e3:b7:0f:ff:c9: d3:e9:9a:c9:6c:0a:8e:61:6e:11:4f:cb:27:a4:04:32:b0:f4: 40:02:54:d9:a7:32:16:5b:7a:e2:93:d9:f8:4b:6c:32:a3:16: c9:11:9d:77:25:f2:3b:19:bc:16:bf:0b:a9:66:73:d7:be:47: 61:dd:40:2d:a2:3e:8b:69:ed:73:1c:17:2d:47:7d:d3:6c:8d: 26:e1:c5:6c:4a:51:3a:6c:d4:5a:f9:04:8c:ef:62:0f:13:51: 76:0d:b1:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjYwNDA1MDA1MDU4WhcNMjYwNDEyMDA1MDU4WjAYMRYwFAYD VQQDEw02OWQxYjFmMi1mNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXX8g1b5zE/5ibj8LioDZ9jYu/Gs4HNxKnb3cH3wK53C6Ow71hSoET7pn6et YwqrmLkC5wr5qFlmI3oupm9ALnRYIzW4B8AQDZ0qhBIsoX4Ch5pZ2ID+YMR/QMp9 i+JwMUz9micvnNrC5MoNyq3IidK7xX+cly49GBIfuCmKF6PoevqcbzBr6kJf0SXO aQVi7dEv2iEO5mJvjOaMxzb9oPPPePdli2/kv3yXqLYJg6TKJZRUut7Ak680fdE4 JC4m539+Nhb3ot0dMhsalOm81kz59Y4c0EbKuwtOUawLc06fdeH4zdPAigE4/CfO qgFbwT73UKGp5nlfpr7dVVSadwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzEZ+hG KjZ3fq6wZSuJj+Ukgd52MB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKC1Nutl/cLyKLUQ5yJ5XfUuAgFs6VmHRlAMTxgeguLixQunyT02U0RLz5S4n xeCNWx9W0DBpVmqqd0r6Djh4XA3mcAfbNA09wPBANQPON0ZlKXTEKWe0qg7jK72o sWbRuTusxhAE3u1Xjw6z+3e/jX5BjwlwQnNbbrIyCumhLCflpds+2OsmdMsqSBPt GLPcQYsnNrc5qw2EhPkb/OO3D//J0+mayWwKjmFuEU/LJ6QEMrD0QAJU2acyFlt6 4pPZ+EtsMqMWyRGddyXyOxm8Fr8LqWZz175HYd1ALaI+i2ntcxwXLUd902yNJuHF bEpROmzUWvkEjO9iDxNRdg2xOA== -----END CERTIFICATE-----Generated at Sun Apr 5 21:07:19 2026 by rpki-client