$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: q8jBnZUDzZ8UfcjDTvS5pClp94JqcBPmujQ662fN3ys= Subject key identifier: B9:A8:3A:26:F9:82:DD:77:4D:71:81:49:A9:FA:22:FE:CC:EE:E3:CC Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B96 Signing time: Sat 04 Apr 2026 18:55:41 +0000 Manifest this update: Sat 04 Apr 2026 18:55:40 +0000 Manifest next update: Sat 11 Apr 2026 18:55:40 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: GxSjSMRlhZldFFIs/dJhnRN8fPAZcsQ3NFBghlea5nE=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Apr 4 18:55:40 2026 GMT Not After : Apr 11 18:55:40 2026 GMT Subject: CN=69d15ead-dc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:b5:c7:e4:7e:44:54:77:52:37:e3:ed:1a: f0:64:fc:ff:02:c5:4f:d2:8c:71:9c:2b:66:38:ec: 17:0d:30:1e:70:49:dd:0e:34:d0:0e:f5:32:fe:44: 21:9b:cb:67:2a:7f:ff:bc:18:0c:a8:b2:47:1f:4b: 81:d1:01:aa:22:1c:97:9c:90:9a:12:3e:92:0b:69: 32:e7:c6:93:89:19:d0:7d:35:38:b6:48:19:c7:4d: 9a:2e:24:c5:dc:5c:64:ad:d5:ed:31:cb:26:d5:4f: a5:2a:93:23:d8:4e:19:ae:2a:d3:bc:17:72:e1:6b: 1b:20:c1:aa:f8:aa:f1:26:08:7e:20:09:7b:83:86: b1:b2:67:d9:1e:5e:46:7b:56:c3:f5:14:43:49:7d: 27:fa:c9:91:59:45:1a:24:85:e9:75:85:28:de:13: 33:e6:0d:a4:6e:c5:30:77:b3:68:5d:35:16:12:e3: 8b:c0:24:18:d1:dd:e9:5b:66:4c:fc:ac:82:a5:57: 4f:47:ba:aa:87:e4:83:3a:5c:4d:30:3f:e3:8a:6a: 53:4e:e5:2e:42:b9:97:04:b3:b0:65:1b:74:cd:9c: 53:4d:66:37:34:4e:b6:2b:ca:e7:46:b8:74:81:56: 0f:b8:eb:2d:a5:04:78:fd:29:75:e3:3a:6e:af:bf: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A8:3A:26:F9:82:DD:77:4D:71:81:49:A9:FA:22:FE:CC:EE:E3:CC X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:89:cb:c2:2a:f0:0e:ad:ee:b1:1f:1c:af:93:c3:98:ae:5d: 1e:fd:6c:26:2a:e5:96:0d:06:1b:9a:52:e5:d6:12:59:5e:fc: 09:fe:10:a8:60:d9:8c:51:8c:3a:08:64:f2:5b:52:c7:50:57: 56:8b:99:d2:54:1f:4e:89:e0:9f:ab:66:6c:91:94:a4:79:20: d0:a6:fa:fe:fe:e9:f2:88:a5:d7:b7:b8:41:ac:41:bb:81:42: 95:d3:15:5b:68:19:e9:30:5a:e6:eb:f1:ed:b2:1b:b3:34:5f: ce:40:82:03:4f:72:d9:fd:f8:12:7e:a3:73:be:9f:7c:e4:0d: a0:9c:d9:d3:f6:0f:12:10:c9:ec:27:e2:48:b9:17:07:37:df: 4c:5c:87:ec:57:5a:3c:22:6a:db:b7:b2:92:f5:1a:89:b2:55: a8:15:9c:f6:5f:bd:a7:f6:eb:3e:66:99:73:23:f5:e6:5e:00: 3c:5d:ef:df:b8:3f:fa:e5:b7:f7:fd:35:c1:98:b4:19:ff:ff: 8d:d7:60:53:69:01:fe:d7:2d:d8:6c:31:c6:49:b7:9e:ab:bf: 35:db:a6:40:6c:14:18:41:bd:bc:e2:e8:81:c5:48:90:b9:56: 81:ca:a5:6c:3c:ae:bd:5e:f7:22:1c:ea:6f:92:53:c3:29:9c: 3c:26:0e:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjYwNDA0MTg1NTQwWhcNMjYwNDExMTg1NTQwWjAYMRYwFAYD VQQDEw02OWQxNWVhZC1kYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gi1x+R+RFR3Ujfj7RrwZPz/AsVP0oxxnCtmOOwXDTAecEndDjTQDvUy/kQh m8tnKn//vBgMqLJHH0uB0QGqIhyXnJCaEj6SC2ky58aTiRnQfTU4tkgZx02aLiTF 3FxkrdXtMcsm1U+lKpMj2E4ZrirTvBdy4WsbIMGq+KrxJgh+IAl7g4axsmfZHl5G e1bD9RRDSX0n+smRWUUaJIXpdYUo3hMz5g2kbsUwd7NoXTUWEuOLwCQY0d3pW2ZM /KyCpVdPR7qqh+SDOlxNMD/jimpTTuUuQrmXBLOwZRt0zZxTTWY3NE62K8rnRrh0 gVYPuOstpQR4/Sl14zpur7+pJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmoOib5 gt13TXGBSan6Iv7M7uPMMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFonLwirwDq3usR8cr5PDmK5dHv1sJirllg0GG5pS5dYSWV78Cf4QqGDZjFGM Oghk8ltSx1BXVouZ0lQfTongn6tmbJGUpHkg0Kb6/v7p8oil17e4QaxBu4FCldMV W2gZ6TBa5uvx7bIbszRfzkCCA09y2f34En6jc76ffOQNoJzZ0/YPEhDJ7CfiSLkX BzffTFyH7FdaPCJq27eykvUaibJVqBWc9l+9p/brPmaZcyP15l4APF3v37g/+uW3 9/01wZi0Gf//jddgU2kB/tct2Gwxxkm3nqu/NdumQGwUGEG9vOLogcVIkLlWgcql bDyuvV73Ihzqb5JTwymcPCYOHg== -----END CERTIFICATE-----Generated at Sun Apr 5 20:59:05 2026 by rpki-client