$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: gTWXkMBhVF+htZV8mlVdcKeig3cExtlh6/U+oHp1PjU= Subject key identifier: 8F:22:57:C3:F8:BA:CA:46:48:D0:FA:55:14:35:57:78:2E:88:35:FC Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 06D9 Signing time: Sat 04 Apr 2026 22:04:49 +0000 Manifest this update: Sat 04 Apr 2026 22:04:48 +0000 Manifest next update: Sat 11 Apr 2026 22:04:48 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: 08EIOj+HDFDzW2tFBl6E2VdVkQE+fzHWcCb+XRBGccU=) 2: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=) 3: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=) 4: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Apr 4 22:04:48 2026 GMT Not After : Apr 11 22:04:48 2026 GMT Subject: CN=69d18b01-2cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:c5:f3:dc:64:34:41:a8:f0:ed:89:c6:7c: 87:a1:d7:11:59:a8:83:4b:60:49:28:e5:60:57:df: 09:d0:73:8c:78:2d:b0:67:89:aa:24:06:84:10:68: 14:5a:b6:a9:b0:88:ff:d1:d4:8e:84:c6:d0:b2:a2: 5c:68:7c:7c:78:12:24:d2:03:0e:93:09:dd:40:4d: ee:3c:d8:06:1a:e5:6c:84:9c:49:77:23:e7:68:92: e8:3c:95:94:0d:c8:13:9d:01:27:06:63:33:58:bc: c0:f1:56:32:5b:07:d7:cf:de:a4:d0:34:00:59:83: b8:2b:be:83:80:34:bd:a7:08:be:9c:62:55:96:f6: 3b:dc:ad:87:7a:4c:4b:6c:5e:89:24:71:31:a0:3e: f7:f7:f9:fc:83:de:05:b3:d9:a2:d4:a6:d7:6b:c4: 10:50:63:18:28:d8:c9:73:7c:87:11:16:ca:96:ec: cb:6b:4e:a1:3b:94:04:6a:56:d2:60:06:70:06:e5: 56:a8:19:c1:bc:86:12:52:f4:3b:05:ad:b1:46:2f: 65:3f:79:82:8d:de:22:23:58:61:67:d6:b4:ef:70: b7:a5:c4:11:7e:fa:49:76:4b:11:0c:af:59:70:1f: 60:dd:9c:a8:da:5a:a0:9e:c4:07:b4:7a:c9:77:ce: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:22:57:C3:F8:BA:CA:46:48:D0:FA:55:14:35:57:78:2E:88:35:FC X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b7:b4:2e:88:bc:5d:33:08:f1:af:5f:1f:6e:b2:70:1d:95: d6:fa:c4:ee:c2:c0:7a:9a:2a:b8:6d:7d:24:f4:4e:bb:0d:06: eb:98:9b:c3:ca:1b:43:8e:72:1b:ba:28:17:f1:1e:33:e6:60: ec:4b:24:2f:d9:1b:42:40:77:6b:97:20:c5:29:b5:8f:90:73: 87:d4:7b:80:84:34:59:77:46:88:54:19:c7:b3:7f:0c:ee:7a: 1a:94:9e:d7:48:4b:03:18:9c:b9:34:d4:8a:ba:46:6d:2f:fd: 56:6a:1b:d6:24:12:ec:e9:37:fb:cc:87:6e:2f:bb:d8:6f:30: d0:33:72:1f:a5:10:95:75:52:ad:b6:6e:91:38:f8:38:27:45: 35:5b:0b:4d:15:84:d3:2d:1b:2f:6c:aa:b2:e5:11:db:95:e3: 75:02:f8:c3:f4:7a:ca:ab:40:56:30:44:99:9d:8d:4a:eb:b3: e8:78:fa:7a:31:74:1d:fe:5e:1d:ee:ca:e2:66:ec:1e:5a:15: 00:ad:42:e4:ce:5e:33:fc:f6:c1:99:9c:2e:33:3c:40:27:22: 4c:c1:82:4a:82:11:86:d6:9f:27:29:c7:4a:3c:ae:74:f4:9a: 3a:59:df:19:63:d9:71:5d:13:b7:68:dd:11:11:4c:a9:dd:7a: fb:21:82:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjYwNDA0MjIwNDQ4WhcNMjYwNDExMjIwNDQ4WjAYMRYwFAYD VQQDEw02OWQxOGIwMS0yY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK/F89xkNEGo8O2JxnyHodcRWaiDS2BJKOVgV98J0HOMeC2wZ4mqJAaEEGgU WrapsIj/0dSOhMbQsqJcaHx8eBIk0gMOkwndQE3uPNgGGuVshJxJdyPnaJLoPJWU DcgTnQEnBmMzWLzA8VYyWwfXz96k0DQAWYO4K76DgDS9pwi+nGJVlvY73K2HekxL bF6JJHExoD739/n8g94Fs9mi1KbXa8QQUGMYKNjJc3yHERbKluzLa06hO5QEalbS YAZwBuVWqBnBvIYSUvQ7Ba2xRi9lP3mCjd4iI1hhZ9a073C3pcQRfvpJdksRDK9Z cB9g3Zyo2lqgnsQHtHrJd84w8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8iV8P4 uspGSND6VRQ1V3guiDX8MB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7e0Loi8XTMI8a9fH26ycB2V1vrE7sLAepoquG19JPROuw0G65ibw8obQ45y G7ooF/EeM+Zg7EskL9kbQkB3a5cgxSm1j5Bzh9R7gIQ0WXdGiFQZx7N/DO56GpSe 10hLAxicuTTUirpGbS/9Vmob1iQS7Ok3+8yHbi+72G8w0DNyH6UQlXVSrbZukTj4 OCdFNVsLTRWE0y0bL2yqsuUR25XjdQL4w/R6yqtAVjBEmZ2NSuuz6Hj6ejF0Hf5e He7K4mbsHloVAK1C5M5eM/z2wZmcLjM8QCciTMGCSoIRhtafJynHSjyudPSaOlnf GWPZcV0Tt2jdERFMqd16+yGCeg== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:32 2026 by rpki-client