$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: l/iMDni35HeL32Vgv51ZjUfihqeQRp7IEQijwWBbeCY= Subject key identifier: F1:65:17:65:71:40:50:F1:4F:1B:67:DC:A7:DA:E4:69:58:56:13:05 Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 0991 Signing time: Mon 20 Apr 2026 19:55:47 +0000 Manifest this update: Mon 20 Apr 2026 19:55:46 +0000 Manifest next update: Mon 27 Apr 2026 19:55:46 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: 0tIWzWOJi1cXEerFu6Pe5WBMHhg+gxtN12weU4HSn34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 19:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Apr 20 19:55:46 2026 GMT Not After : Apr 27 19:55:46 2026 GMT Subject: CN=69e684c3-a085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:dd:96:93:31:1f:52:32:60:4b:a4:be:b7: 9a:a2:f8:ad:a7:24:20:99:24:df:af:bd:1c:e4:f8: 16:d5:fa:5d:3e:ae:b1:dc:96:1a:f8:08:47:59:1c: 55:8b:2a:c9:14:ba:33:e1:2d:e2:a9:d8:9d:c7:71: 89:33:05:da:0e:a5:a0:b9:15:5c:d1:88:38:a3:d1: fd:5d:9f:81:15:1b:71:c1:c5:6a:74:18:97:98:ed: ac:60:95:26:37:13:98:43:ce:48:04:36:0a:0d:37: 25:db:99:b3:19:1f:d5:2d:a1:bb:7c:a2:c6:3a:3b: f5:27:e9:6c:e1:1c:a9:8c:e4:a2:b0:3d:d6:cd:5e: 90:49:99:e0:4a:4c:a2:6f:8b:81:70:56:0c:92:a7: 82:15:7b:74:90:3f:b6:9e:3d:3d:6e:f2:ec:ad:e2: 32:b2:df:17:38:c8:06:ab:8b:8b:fa:88:db:16:c0: 77:13:b9:39:b6:d0:ab:f0:8d:0e:1b:ff:09:8d:bd: ff:81:9d:0e:af:c3:99:61:21:fc:8c:7a:2b:f1:cf: 3a:e5:e0:97:75:0c:16:e3:05:4b:39:3e:67:25:83: e6:8a:e4:68:71:77:1d:1e:aa:f9:95:61:4a:c6:16: 96:8f:a4:97:d2:35:9c:11:f0:77:36:39:d5:9f:b7: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:17:65:71:40:50:F1:4F:1B:67:DC:A7:DA:E4:69:58:56:13:05 X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:21:c9:04:1f:88:8e:b0:7a:e7:d8:e5:ac:62:30:3a:e3:bb: 17:7c:85:ed:b3:42:26:b1:e3:17:c5:ba:8a:85:6e:ae:d6:31: 45:d6:63:96:70:95:2b:95:28:39:84:f3:50:a1:de:89:1c:70: e5:b5:c7:de:24:c2:5f:ae:03:88:b0:01:c4:a2:c0:c2:a0:23: dc:26:ab:c1:fb:94:17:7c:4a:fc:49:42:53:0b:c8:a1:d9:98: 41:d4:09:ca:84:4e:04:16:98:23:aa:26:96:1d:28:13:23:49: df:08:22:92:b6:fa:32:c0:66:19:77:53:71:50:d3:83:36:3b: ef:c3:27:fe:af:8c:ba:96:91:38:eb:ba:dc:37:44:14:29:9f: ab:3a:3f:bf:4e:44:db:e6:ce:14:33:80:05:33:aa:b7:b3:5b: 1c:00:a1:1e:35:e0:d1:37:cf:ac:69:e9:ad:8d:2c:26:17:2b: 7d:58:68:ec:75:dc:58:9e:9f:90:e3:cf:7d:30:00:d9:59:73: af:87:4f:8c:55:29:9a:39:ba:24:d1:50:54:99:2b:23:92:8b: ad:5a:c5:4a:d7:70:e5:c4:dc:5b:86:d8:32:81:c8:d3:20:b2: a0:28:39:9b:18:34:ba:12:e8:dc:e6:7a:6a:bd:07:c2:2d:8b: 88:5a:57:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjYwNDIwMTk1NTQ2WhcNMjYwNDI3MTk1NTQ2WjAYMRYwFAYD VQQDEw02OWU2ODRjMy1hMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+7dlpMxH1IyYEukvreaovitpyQgmSTfr70c5PgW1fpdPq6x3JYa+AhHWRxV iyrJFLoz4S3iqdidx3GJMwXaDqWguRVc0Yg4o9H9XZ+BFRtxwcVqdBiXmO2sYJUm NxOYQ85IBDYKDTcl25mzGR/VLaG7fKLGOjv1J+ls4RypjOSisD3WzV6QSZngSkyi b4uBcFYMkqeCFXt0kD+2nj09bvLsreIyst8XOMgGq4uL+ojbFsB3E7k5ttCr8I0O G/8Jjb3/gZ0Or8OZYSH8jHor8c865eCXdQwW4wVLOT5nJYPmiuRocXcdHqr5lWFK xhaWj6SX0jWcEfB3NjnVn7eMIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFlF2Vx QFDxTxtn3Kfa5GlYVhMFMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUiHJBB+IjrB659jlrGIwOuO7F3yF7bNCJrHjF8W6ioVurtYxRdZjlnCVK5Uo OYTzUKHeiRxw5bXH3iTCX64DiLABxKLAwqAj3CarwfuUF3xK/ElCUwvIodmYQdQJ yoROBBaYI6omlh0oEyNJ3wgikrb6MsBmGXdTcVDTgzY778Mn/q+MupaROOu63DdE FCmfqzo/v05E2+bOFDOABTOqt7NbHAChHjXg0TfPrGnprY0sJhcrfVho7HXcWJ6f kOPPfTAA2Vlzr4dPjFUpmjm6JNFQVJkrI5KLrVrFStdw5cTcW4bYMoHI0yCyoCg5 mxg0uhLo3OZ6ar0Hwi2LiFpXJw== -----END CERTIFICATE-----Generated at Tue Apr 21 21:34:49 2026 by rpki-client