$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: JYgrDTVYeoF+9wEsz5sLrDdLoPK+jjUzT8s51eTXY70= Subject key identifier: A3:24:66:33:4C:F1:26:6E:7C:DA:2F:3A:36:83:44:19:A7:A8:0B:15 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 1209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11D9 Signing time: Sat 04 Apr 2026 17:03:45 +0000 Manifest this update: Sat 04 Apr 2026 17:03:44 +0000 Manifest next update: Sat 11 Apr 2026 17:03:44 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: FGU3YKIPD4iayFNLV8maiHRaTA8YjUvSWpRRAxdY6J0=) 2: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=) 4: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4617 (0x1209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Apr 4 17:03:44 2026 GMT Not After : Apr 11 17:03:44 2026 GMT Subject: CN=69d14470-49f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:8c:f0:8e:8d:7f:95:9e:a3:a2:64:5a:39: bd:60:fd:02:c1:90:e2:1b:39:22:a3:a8:ed:66:9f: f0:4b:d3:ae:69:53:80:32:b3:15:e1:53:5f:d8:f8: 43:07:0f:9b:40:34:e7:b7:95:68:44:08:a0:4a:13: 28:7f:4c:87:10:85:93:f3:3f:1b:47:1c:0a:0a:c3: 89:ab:8c:be:64:57:43:c5:3c:56:3d:98:7c:9e:81: dd:fb:31:c1:b7:29:d8:b6:de:76:a3:26:17:ce:4c: 28:87:ae:2a:f9:a0:98:2a:5a:5b:b5:7a:6b:9e:cd: 6d:80:60:37:62:ee:66:7d:20:a5:c1:c3:cd:0b:bd: 12:e8:e7:3b:73:eb:46:70:e2:56:72:62:1a:73:2c: 53:04:1f:79:ea:9d:25:6b:f2:27:16:b8:16:32:60: 63:f3:ca:8b:16:a4:8e:56:8e:25:f4:45:25:96:e1: 54:ab:43:9a:de:96:ae:01:09:98:45:81:ab:e4:d7: c8:ab:21:30:f4:ee:83:d5:d2:b0:7d:96:25:ec:c0: d1:ce:94:ca:1a:12:23:a0:b8:6f:78:a2:9c:0e:3d: 77:d6:a8:4b:0f:f4:7e:9d:f1:a6:f6:a3:d1:a0:ab: ce:6d:7f:74:f0:ae:b1:6d:f3:02:e5:f7:58:9b:ca: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:24:66:33:4C:F1:26:6E:7C:DA:2F:3A:36:83:44:19:A7:A8:0B:15 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e8:aa:93:d4:98:82:14:2d:ed:e9:ce:22:db:55:3b:d7:e7: c4:7b:cc:87:3f:92:6d:9c:80:ea:45:c4:3d:a3:49:bc:22:83: 9d:4e:ca:b5:f5:23:56:4e:28:fe:11:89:1d:ec:21:0b:51:13: db:ce:e7:94:bb:25:4b:a8:e0:f8:69:35:2d:00:80:84:88:13: de:ae:a3:38:b9:e9:76:fa:52:85:61:ce:f6:df:d5:2a:e9:04: ae:02:24:37:82:e1:c3:88:02:5f:ba:6e:7f:04:52:0b:b8:3b: 55:ca:33:83:db:c8:01:98:93:44:b0:9b:6e:eb:98:c3:c2:a9: 3e:77:d1:18:b4:76:53:77:ca:86:7f:ee:33:39:a0:86:e8:0b: 49:cf:b7:7c:28:58:82:2c:cc:b6:03:67:2d:42:9f:c7:a4:c2: 10:4f:95:12:23:57:7c:89:13:a1:87:48:85:b6:7a:9a:7a:22: 5c:16:6a:1a:fe:c0:1b:05:ff:ad:83:8b:e4:f9:43:4e:b9:90: 8b:4e:58:15:4d:fc:41:78:7b:43:19:f7:7c:46:d3:9b:e3:ea: 14:ae:c2:2e:e6:76:28:6b:50:69:d5:62:11:21:26:ab:91:2c: 2b:87:73:19:05:63:13:33:e5:3a:75:55:f0:5b:8a:28:a6:28: b9:b5:e8:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjYwNDA0MTcwMzQ0WhcNMjYwNDExMTcwMzQ0WjAYMRYwFAYD VQQDEw02OWQxNDQ3MC00OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq6M8I6Nf5Weo6JkWjm9YP0CwZDiGzkio6jtZp/wS9OuaVOAMrMV4VNf2PhD Bw+bQDTnt5VoRAigShMof0yHEIWT8z8bRxwKCsOJq4y+ZFdDxTxWPZh8noHd+zHB tynYtt52oyYXzkwoh64q+aCYKlpbtXprns1tgGA3Yu5mfSClwcPNC70S6Oc7c+tG cOJWcmIacyxTBB956p0la/InFrgWMmBj88qLFqSOVo4l9EUlluFUq0Oa3pauAQmY RYGr5NfIqyEw9O6D1dKwfZYl7MDRzpTKGhIjoLhveKKcDj131qhLD/R+nfGm9qPR oKvObX908K6xbfMC5fdYm8pt+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMkZjNM 8SZufNovOjaDRBmnqAsVMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKeiqk9SYghQt7enOIttVO9fnxHvMhz+SbZyA6kXEPaNJvCKDnU7KtfUjVk4o /hGJHewhC1ET287nlLslS6jg+Gk1LQCAhIgT3q6jOLnpdvpShWHO9t/VKukErgIk N4Lhw4gCX7pufwRSC7g7Vcozg9vIAZiTRLCbbuuYw8KpPnfRGLR2U3fKhn/uMzmg hugLSc+3fChYgizMtgNnLUKfx6TCEE+VEiNXfIkToYdIhbZ6mnoiXBZqGv7AGwX/ rYOL5PlDTrmQi05YFU38QXh7Qxn3fEbTm+PqFK7CLuZ2KGtQadViESEmq5EsK4dz GQVjEzPlOnVV8FuKKKYoubXowA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:11 2026 by rpki-client