$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: QOqAFK1utOOLdGR2VOA3JaEwsMby2Zeyw8aI0sdDsUg= Subject key identifier: CD:E6:59:E7:2F:07:E1:F3:EE:84:C7:28:96:0D:AE:DC:7E:1A:54:C0 Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: EA Signing time: Sun 05 Apr 2026 05:52:57 +0000 Manifest this update: Sun 05 Apr 2026 05:52:56 +0000 Manifest next update: Sun 12 Apr 2026 05:52:56 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: dWh+OLXtwDUmejkxCcDZ1C9DSx2XyBIDa5CDZK5GVIU=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Apr 5 05:52:56 2026 GMT Not After : Apr 12 05:52:56 2026 GMT Subject: CN=69d1f8b9-43a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:76:33:b4:6d:e8:76:81:d9:5f:75:65:42: 8f:cd:7e:99:ba:bd:66:c9:bb:b1:04:7f:e4:6d:cc: d0:d1:f9:b4:23:7f:ed:f7:8a:c0:bf:6c:cb:70:a5: c1:13:81:46:14:3e:3d:50:f4:f0:a7:44:7b:70:8a: c9:cf:63:66:57:87:65:1c:9d:c3:e8:5d:d6:6a:ba: d1:9f:a2:9e:9e:b5:7b:24:be:92:d8:63:d8:a1:dc: 4e:15:47:5c:b7:f9:db:54:34:66:4a:fc:59:61:3d: a3:3a:37:38:9c:dd:07:80:10:c5:e0:5c:6c:e5:f8: 7a:ba:ee:f9:a5:43:69:d0:35:0c:f7:a4:97:7c:5b: 87:63:58:8a:cf:8d:02:04:37:f6:a3:ce:74:84:2c: ce:6a:80:1e:5e:37:b7:19:9b:9b:86:89:c5:70:0d: 4b:6a:70:11:3f:04:ba:38:32:e4:cf:a0:81:ad:9c: b7:f6:33:76:89:f4:39:2a:c2:d7:2b:35:dd:37:0d: 3b:0d:37:3c:3f:7c:15:80:5a:05:7c:cb:44:a6:e8: 16:46:83:be:9f:35:af:1e:c4:40:7a:90:df:a1:0c: 9e:d8:37:4d:5a:16:cb:5c:eb:7f:e3:12:17:84:cf: 36:2e:4d:b0:25:a9:0b:53:4f:56:62:4f:73:91:f2: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E6:59:E7:2F:07:E1:F3:EE:84:C7:28:96:0D:AE:DC:7E:1A:54:C0 X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:85:63:b7:4b:08:f9:82:06:db:dc:41:26:5e:80:0d:0c:b6: 81:b5:ac:a1:4b:85:f5:2f:8a:4c:bf:aa:e5:55:64:ff:82:13: 4a:4c:3e:60:97:7e:5e:18:d7:47:86:8a:c5:42:4e:3a:dd:b1: 49:1a:9e:15:f1:36:00:0b:ad:a2:2e:42:8f:a6:44:10:15:ed: ef:e9:0d:77:53:ac:fd:f0:47:f7:f1:c5:e4:79:eb:70:69:dc: da:ff:e2:bf:f4:d8:24:8e:34:34:0d:ce:53:a3:96:ed:52:02: 52:7c:55:37:5d:f8:45:77:93:33:aa:fd:bc:d1:81:ed:22:8c: 64:d4:56:7c:40:91:e1:e4:23:88:b1:c4:d1:dc:39:78:f4:c3: 9e:89:2c:01:e3:4e:22:80:17:53:55:8f:b3:b9:d4:ff:c7:f1: c7:07:b1:96:7b:70:fd:83:0a:47:c5:cd:e2:83:85:59:14:85: 66:85:38:0d:20:3e:e5:3c:62:58:9f:77:a2:e4:f2:cd:14:cf: 97:05:a8:65:9e:9b:5c:44:49:e7:4e:05:5b:42:3c:89:e2:1c: 86:49:52:13:20:55:1e:5c:11:42:1f:7a:16:ff:0c:61:28:66: 9f:b1:ec:9a:58:af:87:59:16:a6:71:f4:8e:dc:8f:2f:85:f1: 4f:ca:63:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEOTMxMTAvBgNVBAUTKEZCQUU0REI5MzkyQzgxOTMyMUFGNTExREM2QjJCNUFB ODk5ODE5RkEwHhcNMjYwNDA1MDU1MjU2WhcNMjYwNDEyMDU1MjU2WjAYMRYwFAYD VQQDEw02OWQxZjhiOS00M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3R2M7Rt6HaB2V91ZUKPzX6Zur1mybuxBH/kbczQ0fm0I3/t94rAv2zLcKXB E4FGFD49UPTwp0R7cIrJz2NmV4dlHJ3D6F3WarrRn6KenrV7JL6S2GPYodxOFUdc t/nbVDRmSvxZYT2jOjc4nN0HgBDF4Fxs5fh6uu75pUNp0DUM96SXfFuHY1iKz40C BDf2o850hCzOaoAeXje3GZubhonFcA1LanARPwS6ODLkz6CBrZy39jN2ifQ5KsLX KzXdNw07DTc8P3wVgFoFfMtEpugWRoO+nzWvHsRAepDfoQye2DdNWhbLXOt/4xIX hM82Lk2wJakLU09WYk9zkfJ3nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3mWecv B+Hz7oTHKJYNrtx+GlTAMB8GA1UdIwQYMBaAFPuuTbk5LIGTIa9RHcaytaqJmBn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkQ5My84MThGREI3OEQ0 NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2daTWhyMUVkeHJLMXFvbVlH Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkQ5My84MThGREI3OEQ0NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2da TWhyMUVkeHJLMXFvbVlHZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4Vjt0sI+YIG29xBJl6ADQy2gbWsoUuF9S+KTL+q5VVk/4ITSkw+YJd+XhjX R4aKxUJOOt2xSRqeFfE2AAutoi5Cj6ZEEBXt7+kNd1Os/fBH9/HF5HnrcGnc2v/i v/TYJI40NA3OU6OW7VICUnxVN134RXeTM6r9vNGB7SKMZNRWfECR4eQjiLHE0dw5 ePTDnoksAeNOIoAXU1WPs7nU/8fxxwexlntw/YMKR8XN4oOFWRSFZoU4DSA+5Txi WJ93ouTyzRTPlwWoZZ6bXERJ504FW0I8ieIchklSEyBVHlwRQh96Fv8MYShmn7Hs mlivh1kWpnH0jtyPL4XxT8pj3A== -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:33 2026 by rpki-client