$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: HHSNS4FEXrdRuKCNbAb/X2R+JYoK2ApGaJpPoPsCGbw= Subject key identifier: 97:FA:F7:A5:17:B0:8F:72:9B:3B:1C:04:E7:1A:76:1E:BE:9D:99:46 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 09C4 Signing time: Sat 04 Apr 2026 19:43:33 +0000 Manifest this update: Sat 04 Apr 2026 19:43:32 +0000 Manifest next update: Sat 11 Apr 2026 19:43:32 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: XwYmWyC9rly2NU+7z2+CuLnk6/huRrJ7SqeUjsseYt0=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: cNrjBilbrF0h5gqh8r2I8xpeSdxfHL1i6pc3sR9uCdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Apr 4 19:43:32 2026 GMT Not After : Apr 11 19:43:32 2026 GMT Subject: CN=69d169e4-309e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:69:a7:da:44:d8:9f:31:e2:20:c3:87:03: ed:6e:51:86:df:44:98:65:9b:48:93:08:f5:76:83: b6:eb:4d:7b:98:aa:94:47:2a:e5:96:e6:96:83:5e: 06:cc:46:ab:fe:17:39:3b:a8:95:81:0d:e4:ae:05: 13:39:58:f9:f0:03:fb:9c:dc:d0:30:36:8b:66:21: 31:d2:78:9e:09:45:56:9e:e1:1d:6a:f5:34:15:f1: b2:5c:67:b0:b1:41:91:ab:72:0a:c3:ca:92:0b:bd: 4f:57:48:d7:6e:c3:a5:4a:94:ac:37:f9:38:27:f5: 34:ee:d4:0b:2a:4b:da:f8:9f:f1:fa:5c:24:77:3c: b3:5f:87:a0:cd:e2:73:35:72:ff:9e:9d:c1:62:ed: a0:6c:4f:cf:5d:48:bc:09:ee:9d:f5:c0:8e:cb:2b: b5:25:62:42:36:7a:1c:f9:44:69:69:f9:e9:29:08: 5d:a3:c8:e6:57:72:e1:6a:8d:37:44:9b:ec:fa:e7: 00:12:eb:24:e2:10:99:20:fb:05:8a:c5:56:29:a1: ad:f9:f0:6c:50:53:18:4b:f3:a6:3c:38:17:68:d5: da:df:da:5c:9b:56:dd:da:4a:5a:59:fe:5b:2c:42: 37:83:92:7f:c6:c9:ad:6a:c9:35:d3:c8:ab:6a:e6: f3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FA:F7:A5:17:B0:8F:72:9B:3B:1C:04:E7:1A:76:1E:BE:9D:99:46 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4b:37:ef:67:fe:76:83:ab:76:91:ac:b8:b6:b2:78:cd:d3: 44:70:8e:a2:6a:b2:b3:05:ec:d2:ee:2d:25:98:6d:b5:c1:7d: ba:f0:6a:62:f1:7a:59:64:7f:5b:37:4e:93:47:8d:52:61:e1: 39:6c:94:48:28:e4:3d:1a:ca:a8:43:59:fc:ec:b1:12:9e:4a: e0:9c:0f:49:a6:c1:b7:a1:02:c9:51:b1:b1:b1:7e:2b:0a:89: c5:0f:2d:80:b3:06:c6:1f:07:42:ad:cd:58:56:d6:37:fb:44: f2:c2:e9:c9:e7:9d:b8:91:45:1a:4e:f8:2b:61:ef:b3:bb:83: c4:83:3c:c9:5d:38:b7:56:ff:a5:99:da:ec:3b:9f:78:d0:ef: 8d:e9:2e:12:05:25:3a:e1:8e:e4:eb:7c:4f:c8:0d:00:64:83: 3d:b7:40:c5:c9:5d:25:7c:b7:f2:5b:27:2a:0a:96:1f:5a:e8: 7e:a8:53:fd:02:4f:9d:7e:8d:10:cf:99:c9:eb:b5:b6:ad:60: a6:44:b4:36:29:d2:43:e1:92:36:01:d6:96:dc:d8:2c:e1:02: 26:20:fa:f6:9e:8f:1a:f7:92:43:47:0b:9c:41:e2:69:56:bc: b7:c9:c8:a4:5f:6a:1c:3c:b0:96:60:dc:01:86:f0:a0:5d:7e: c6:a8:b4:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjYwNDA0MTk0MzMyWhcNMjYwNDExMTk0MzMyWjAYMRYwFAYD VQQDEw02OWQxNjllNC0zMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKhpp9pE2J8x4iDDhwPtblGG30SYZZtIkwj1doO26017mKqURyrlluaWg14G zEar/hc5O6iVgQ3krgUTOVj58AP7nNzQMDaLZiEx0nieCUVWnuEdavU0FfGyXGew sUGRq3IKw8qSC71PV0jXbsOlSpSsN/k4J/U07tQLKkva+J/x+lwkdzyzX4egzeJz NXL/np3BYu2gbE/PXUi8Ce6d9cCOyyu1JWJCNnoc+URpafnpKQhdo8jmV3Lhao03 RJvs+ucAEusk4hCZIPsFisVWKaGt+fBsUFMYS/OmPDgXaNXa39pcm1bd2kpaWf5b LEI3g5J/xsmtask108iraubzBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJf696UX sI9ymzscBOcadh6+nZlGMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOEs372f+doOrdpGsuLayeM3TRHCOomqyswXs0u4tJZhttcF9uvBqYvF6WWR/ WzdOk0eNUmHhOWyUSCjkPRrKqENZ/OyxEp5K4JwPSabBt6ECyVGxsbF+KwqJxQ8t gLMGxh8HQq3NWFbWN/tE8sLpyeeduJFFGk74K2Hvs7uDxIM8yV04t1b/pZna7Duf eNDvjekuEgUlOuGO5Ot8T8gNAGSDPbdAxcldJXy38lsnKgqWH1rofqhT/QJPnX6N EM+Zyeu1tq1gpkS0NinSQ+GSNgHWltzYLOECJiD69p6PGveSQ0cLnEHiaVa8t8nI pF9qHDywlmDcAYbwoF1+xqi0WA== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:36 2026 by rpki-client