$ rpki-client -vvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json) Hash identifier: hjZZ0GJsqfNrl5pchTjVBraadfG6TclsX7Byglos4MI= Subject key identifier: B5:99:24:1C:E4:6E:3E:5D:D6:44:DC:84:FD:4C:F2:73:D9:E9:76:B5 Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft Manifest number: 51 Signing time: Sun 05 Apr 2026 07:37:22 +0000 Manifest this update: Sun 05 Apr 2026 07:37:22 +0000 Manifest next update: Sun 12 Apr 2026 07:37:22 +0000 Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: x/9HnspS5gzJkOy0Ff5ZHBAC/G9VtEbnvM1I3ZW/3Jc=) 2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Validity Not Before: Apr 5 07:37:22 2026 GMT Not After : Apr 12 07:37:22 2026 GMT Subject: CN=69d21132-2d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:26:ae:2f:c7:0a:42:d5:e1:1a:6b:79:97: e9:99:d0:7b:de:67:f4:84:27:55:09:74:89:25:8b: 49:6d:2c:f4:a9:56:b9:cf:de:f6:26:3f:74:4f:03: 06:4b:b7:8b:13:07:2e:82:bc:53:b1:b4:44:2e:61: 78:d0:40:20:ce:8a:4f:31:e4:83:48:88:3e:66:5a: fc:e6:04:a4:ba:d8:0f:29:46:5c:37:60:f8:00:12: b4:fd:8e:d3:9e:17:16:57:da:78:00:a9:46:36:da: 95:1c:e8:50:33:a6:d3:9d:f7:fe:20:ee:70:29:d2: 4e:08:3d:23:3b:bf:f3:55:44:24:66:bf:f4:60:69: 18:c0:03:3a:8d:d6:21:67:54:5b:7a:09:dc:c9:6e: c3:a8:83:da:79:13:4c:91:a5:d3:08:0d:3b:e9:f0: 4f:b7:5e:b3:9e:9b:bb:94:5d:31:48:d5:84:e0:99: 8e:5f:60:f5:3f:50:bf:83:21:e2:f7:d1:62:50:83: 13:0a:86:0f:96:58:3a:b4:2a:0f:1b:7b:c7:cd:8d: 77:52:d9:f0:be:b7:d9:0d:8f:99:de:66:af:6c:be: 30:e3:46:52:a3:19:5c:eb:0c:3f:c0:ca:ca:9a:1a: 02:70:14:ed:c3:01:33:9b:5a:97:0b:0c:b6:9f:f9: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:24:1C:E4:6E:3E:5D:D6:44:DC:84:FD:4C:F2:73:D9:E9:76:B5 X509v3 Authority Key Identifier: keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9d:b7:a5:cb:e2:d3:df:c2:a7:ff:cd:e6:8b:d7:d7:a2:52: 07:8e:09:15:cc:fc:df:45:9b:37:11:04:f0:4c:69:65:27:a5: 93:5b:b6:a8:84:c2:bd:19:1f:ff:77:52:07:b3:24:c7:c7:c0: 5f:d7:5a:60:d5:1c:f9:f4:87:fb:ba:89:df:63:e4:f4:ec:05: 17:c9:22:b6:4e:45:43:10:3f:c3:83:30:36:4b:a1:18:23:85: 71:d1:ec:5e:ab:d1:1c:1d:8a:a7:53:dd:52:b1:6c:57:ee:76: d4:d3:ba:65:a2:ea:e8:99:1e:68:0d:e4:ed:96:af:1a:42:d8: 0b:7c:e6:ad:7c:be:91:e1:07:2a:d7:96:bc:fc:36:6d:47:d0: 74:25:12:95:74:dd:f1:1f:25:f0:14:03:b6:09:30:94:8a:ed: 2a:28:30:9a:e5:e4:6c:d8:d9:c7:9e:88:a0:f2:ed:d8:9e:06: 80:8e:d4:7f:1f:8e:51:4c:10:42:4f:65:1c:64:4b:14:0a:01: 3e:33:e3:b8:1c:d1:05:64:ee:8b:be:13:46:4e:b0:90:ea:d4: 82:cb:d9:f4:64:19:d1:fb:3e:a2:db:38:0c:b3:13:38:f4:ac: c0:1f:c0:40:05:1c:6e:39:93:4f:86:d7:b6:ed:df:64:08:3f: 7f:c9:b5:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjMxQzExMC8GA1UEBRMoNjhEMTQ2NjQzMzk1ODQxNkREODFBN0Q0QUJGMkIyNDNF RTdEOEI1NjAeFw0yNjA0MDUwNzM3MjJaFw0yNjA0MTIwNzM3MjJaMBgxFjAUBgNV BAMTDTY5ZDIxMTMyLTJkMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJOyauL8cKQtXhGmt5l+mZ0HveZ/SEJ1UJdIkli0ltLPSpVrnP3vYmP3RPAwZL t4sTBy6CvFOxtEQuYXjQQCDOik8x5INIiD5mWvzmBKS62A8pRlw3YPgAErT9jtOe FxZX2ngAqUY22pUc6FAzptOd9/4g7nAp0k4IPSM7v/NVRCRmv/RgaRjAAzqN1iFn VFt6CdzJbsOog9p5E0yRpdMIDTvp8E+3XrOem7uUXTFI1YTgmY5fYPU/UL+DIeL3 0WJQgxMKhg+WWDq0Kg8be8fNjXdS2fC+t9kNj5neZq9svjDjRlKjGVzrDD/Aysqa GgJwFO3DATObWpcLDLaf+d3HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtZkkHORu Pl3WRNyE/Uzyc9npdrUwHwYDVR0jBBgwFoAUaNFGZDOVhBbdgafUq/KyQ+59i1Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzFDLzI4RTgzRTZBQzQz MDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU5GR1pET1ZoQmJkZ2FmVXFfS3lRLTU5aTFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyL2FORkdaRE9WaEJi ZGdhZlVxX0t5US01OWkxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFnbely+LT38Kn/83mi9fXolIHjgkVzPzfRZs3EQTwTGllJ6WTW7aohMK9GR// d1IHsyTHx8Bf11pg1Rz59If7uonfY+T07AUXySK2TkVDED/DgzA2S6EYI4Vx0exe q9EcHYqnU91SsWxX7nbU07plouromR5oDeTtlq8aQtgLfOatfL6R4Qcq15a8/DZt R9B0JRKVdN3xHyXwFAO2CTCUiu0qKDCa5eRs2NnHnoig8u3YngaAjtR/H45RTBBC T2UcZEsUCgE+M+O4HNEFZO6LvhNGTrCQ6tSCy9n0ZBnR+z6i2zgMsxM49KzAH8BA BRxuOZNPhte27d9kCD9/ybUe -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:16 2026 by rpki-client