$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: Gkurel+DJtmgC3TF2m4/3nAcPxAOdE4gfA/g72z/Avs= Subject key identifier: E6:8E:CD:E5:3E:40:2C:2F:DE:71:F3:A7:3F:26:FA:2F:3D:2B:7A:04 Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 1A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 1A06 Signing time: Mon 20 Apr 2026 16:17:57 +0000 Manifest this update: Mon 20 Apr 2026 16:17:57 +0000 Manifest next update: Mon 27 Apr 2026 16:17:57 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: Xc4nAsoMlz8HMWziIJDMkDCuOz2Meaof+2Fpu8aBY08=) 2: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=) 3: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=) 4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 16:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6697 (0x1a29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: Apr 20 16:17:57 2026 GMT Not After : Apr 27 16:17:57 2026 GMT Subject: CN=69e651b5-f3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:88:b1:0c:54:e6:e8:ef:d3:60:17:78:7f: be:8a:f1:bd:dc:31:f9:ce:4a:07:e8:5e:8c:ee:24: 38:94:b9:ba:9d:b0:6a:b4:d6:96:3b:ff:90:38:f2: c4:c7:4a:67:d0:90:07:d1:9e:77:3d:c2:d8:9c:e2: 46:44:d1:b3:11:38:8b:30:f4:a7:3b:d6:fa:22:b7: c5:57:b1:6d:f8:a7:0f:85:81:05:a1:0f:37:89:66: 80:31:db:f9:a7:ce:8a:d7:c3:c7:04:d9:92:77:67: 12:c1:21:77:9e:2e:7a:c4:5b:c7:ac:68:a3:df:26: 96:1a:ed:e7:af:cf:0d:57:48:19:6e:d8:37:bf:1a: 4d:35:16:47:0b:c0:87:b0:e8:97:3c:e5:91:74:f0: 60:a2:2e:76:00:6f:29:20:53:16:97:28:51:53:b1: 4a:3e:c7:31:c7:65:04:97:02:32:71:38:51:28:17: 57:f5:36:aa:8c:aa:9e:8a:d9:11:36:9b:e0:de:80: 64:bd:48:bf:64:92:f4:18:d8:47:36:0b:14:41:ac: 50:70:c9:3d:ba:4b:46:d9:51:64:86:e7:ff:53:65: 55:f1:c4:c3:63:63:99:8c:55:e0:76:e6:ab:35:cb: 77:80:cb:6d:1a:e2:f1:50:8c:44:3c:9c:26:7c:39: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8E:CD:E5:3E:40:2C:2F:DE:71:F3:A7:3F:26:FA:2F:3D:2B:7A:04 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:28:cf:b0:25:ea:4b:7f:fc:e9:1d:2c:c8:ed:68:6f:d2:c1: 36:7d:0f:b9:9d:4d:06:33:c3:67:b9:18:12:09:78:84:a8:34: 59:1a:80:a4:f3:d1:26:eb:78:f3:d0:c6:43:1e:72:1d:0f:80: 5d:f0:a5:23:e7:15:ad:8e:73:fc:ad:03:0d:39:26:f3:4b:16: 5c:17:29:2a:8f:3a:63:ac:e5:f2:49:d3:8b:ed:50:77:c9:d4: 03:ed:e7:a1:96:f9:fa:0a:53:47:a6:ed:6e:35:f5:21:72:c9: e1:af:55:49:75:2b:9d:21:ac:42:7a:73:5d:66:5e:af:d3:e2: de:f8:54:6c:bc:ba:93:1c:6e:3d:81:96:f3:64:0e:54:d7:6e: 6c:7f:3f:d8:6e:8d:93:ab:58:af:24:95:75:72:b5:31:a0:47: 2b:b2:9e:26:07:db:3e:1a:7c:a0:24:08:2f:87:ac:3f:a2:8e: 17:9a:04:9d:44:b0:7b:bd:fd:e1:cb:30:db:9f:ff:3a:98:ca: 3d:a8:0a:4b:7b:9b:f0:3b:e8:c9:ce:55:07:01:3e:bb:c2:77: c1:00:75:e2:b4:a5:1c:ca:e9:00:2b:77:2f:68:d5:f6:bb:69: e3:cc:31:45:72:e6:c0:13:8e:f2:9c:61:0b:14:35:93:3a:6a: 43:4d:3e:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjYwNDIwMTYxNzU3WhcNMjYwNDI3MTYxNzU3WjAYMRYwFAYD VQQDEw02OWU2NTFiNS1mM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY+IsQxU5ujv02AXeH++ivG93DH5zkoH6F6M7iQ4lLm6nbBqtNaWO/+QOPLE x0pn0JAH0Z53PcLYnOJGRNGzETiLMPSnO9b6IrfFV7Ft+KcPhYEFoQ83iWaAMdv5 p86K18PHBNmSd2cSwSF3ni56xFvHrGij3yaWGu3nr88NV0gZbtg3vxpNNRZHC8CH sOiXPOWRdPBgoi52AG8pIFMWlyhRU7FKPscxx2UElwIycThRKBdX9TaqjKqeitkR Npvg3oBkvUi/ZJL0GNhHNgsUQaxQcMk9uktG2VFkhuf/U2VV8cTDY2OZjFXgduar Nct3gMttGuLxUIxEPJwmfDm66wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaOzeU+ QCwv3nHzpz8m+i89K3oEMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7CjPsCXqS3/86R0syO1ob9LBNn0PuZ1NBjPDZ7kYEgl4hKg0WRqApPPRJut4 89DGQx5yHQ+AXfClI+cVrY5z/K0DDTkm80sWXBcpKo86Y6zl8knTi+1Qd8nUA+3n oZb5+gpTR6btbjX1IXLJ4a9VSXUrnSGsQnpzXWZer9Pi3vhUbLy6kxxuPYGW82QO VNdubH8/2G6Nk6tYrySVdXK1MaBHK7KeJgfbPhp8oCQIL4esP6KOF5oEnUSwe739 4csw25//OpjKPagKS3ub8Dvoyc5VBwE+u8J3wQB14rSlHMrpACt3L2jV9rtp48wx RXLmwBOO8pxhCxQ1kzpqQ00+vQ== -----END CERTIFICATE-----Generated at Wed Apr 22 09:21:12 2026 by rpki-client