$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: J5rwi8lxOBg9mDT+ThYHzAsc7riGMnEA1HI7h6pPo0Q= Subject key identifier: AF:2E:12:3C:01:B5:FE:C7:80:A5:49:2B:E9:32:C8:AE:06:EE:CD:D7 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: 6B Signing time: Fri 17 Apr 2026 07:36:34 +0000 Manifest this update: Fri 17 Apr 2026 07:36:34 +0000 Manifest next update: Fri 24 Apr 2026 07:36:34 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: i8uKbmgSTNSLA8iy5x3yaUc2eSF2PCyWcuGh9i6zzAU=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Apr 17 07:36:34 2026 GMT Not After : Apr 24 07:36:34 2026 GMT Subject: CN=69e1e302-fa0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:d9:51:8f:06:7a:0a:d8:3c:e2:8c:96:31: 0a:13:a1:92:9b:7d:89:30:c6:09:05:93:7e:ee:fb: 8a:c5:e4:c9:3f:71:1e:ee:2c:1f:db:46:a7:f7:3d: c9:d7:07:ba:1e:ef:15:e7:a6:03:26:a9:9e:01:25: c9:c6:a2:df:0b:d2:22:e4:77:96:76:f5:ce:2c:27: 1d:2f:2e:0e:d0:d4:b9:12:26:e9:b9:78:d5:fb:be: cc:8c:7a:5e:c3:a4:dc:d5:de:18:07:80:3a:0f:b1: 74:09:29:35:a5:8a:f3:d4:80:b9:84:24:ae:b0:dd: cd:a4:8d:9d:89:69:7d:9e:72:0f:3a:45:10:83:9d: 82:75:86:f0:47:cf:ae:fd:af:49:74:8c:c5:c2:d5: fd:95:5d:b0:61:e7:82:14:bb:f6:5d:37:55:f2:b5: 4b:44:c9:a4:2e:bc:3f:4d:d1:77:dd:1f:97:32:0d: 45:2e:00:55:b4:05:b5:6f:33:27:e1:58:b7:9f:7a: 71:cb:e3:cf:40:f4:b7:62:c6:dd:26:ac:be:99:41: 9b:6c:0c:eb:31:5e:6b:0c:d4:4a:c9:ca:a7:28:27: 68:74:f5:3a:c2:9e:b0:cf:1d:5a:b2:2e:4c:41:60: b4:f7:0f:58:e6:79:3b:15:b0:2b:6a:35:5a:5e:f9: 18:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:12:3C:01:B5:FE:C7:80:A5:49:2B:E9:32:C8:AE:06:EE:CD:D7 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:30:5a:1b:91:25:e9:94:2e:00:7b:98:f9:c4:f2:0d:23:2e: 54:62:90:81:9c:f3:ca:35:ff:4e:91:7e:be:2a:9e:cc:bd:eb: 48:fa:a2:09:aa:d2:d6:dc:57:17:0e:4f:b1:c3:d8:f9:64:52: cd:fb:16:c1:5a:94:98:c4:72:a9:07:58:ee:a8:70:7d:a4:b1: c6:f0:1d:a4:90:b8:d4:32:f9:de:af:88:1e:9b:fe:38:e2:df: 60:c7:cd:50:26:d5:17:c1:65:8b:01:7c:56:eb:03:6e:29:6e: 59:d6:cf:9a:de:7b:33:ee:b4:f7:35:25:6a:f1:37:6e:82:ca: 55:08:4b:bf:60:0d:91:76:a4:ae:53:57:db:b4:3b:bd:ed:f0: 13:5b:f2:40:0f:78:0f:be:12:4c:27:8c:a6:90:ba:0d:70:e5: 0e:a2:19:84:e7:5e:34:09:9b:93:f8:be:49:a5:99:2c:d2:0f: a5:3a:bb:c9:26:48:7e:61:e2:15:ab:cd:ca:07:39:01:d3:16: 5a:2f:94:22:0f:7e:6d:b2:1a:c6:ba:74:c8:41:11:27:e5:cc: 15:73:35:27:41:86:c0:d1:ec:52:d8:78:30:f2:64:cc:be:eb: c2:66:c3:7d:8b:f3:5d:08:87:59:5b:3b:99:01:2c:9d:13:9d: e4:01:03:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTFDQzExMC8GA1UEBRMoOUMxRTQ1QTgwODRDMzExREQ1MDA0NEExNzM2MDVFOEVF M0M0Q0M5NTAeFw0yNjA0MTcwNzM2MzRaFw0yNjA0MjQwNzM2MzRaMBgxFjAUBgNV BAMTDTY5ZTFlMzAyLWZhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl/NlRjwZ6Ctg84oyWMQoToZKbfYkwxgkFk37u+4rF5Mk/cR7uLB/bRqf3PcnX B7oe7xXnpgMmqZ4BJcnGot8L0iLkd5Z29c4sJx0vLg7Q1LkSJum5eNX7vsyMel7D pNzV3hgHgDoPsXQJKTWlivPUgLmEJK6w3c2kjZ2JaX2ecg86RRCDnYJ1hvBHz679 r0l0jMXC1f2VXbBh54IUu/ZdN1XytUtEyaQuvD9N0XfdH5cyDUUuAFW0BbVvMyfh WLefenHL489A9Ldixt0mrL6ZQZtsDOsxXmsM1ErJyqcoJ2h09TrCnrDPHVqyLkxB YLT3D1jmeTsVsCtqNVpe+RhRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUry4SPAG1 /seApUkr6TLIrgbuzdcwHwYDVR0jBBgwFoAUnB5FqAhMMR3VAEShc2BejuPEzJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDLzlERjA3RTQ0OUEw RTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkI1RnFBaE1NUjNWQUVTaGMyQmVqdVBFekpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MUNDLzlERjA3RTQ0OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIz VkFFU2hjMkJlanVQRXpKVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgMFobkSXplC4Ae5j5xPINIy5UYpCBnPPKNf9OkX6+Kp7MvetI+qIJqtLW3FcX Dk+xw9j5ZFLN+xbBWpSYxHKpB1juqHB9pLHG8B2kkLjUMvner4gem/444t9gx81Q JtUXwWWLAXxW6wNuKW5Z1s+a3nsz7rT3NSVq8TdugspVCEu/YA2RdqSuU1fbtDu9 7fATW/JAD3gPvhJMJ4ymkLoNcOUOohmE5140CZuT+L5JpZks0g+lOrvJJkh+YeIV q83KBzkB0xZaL5QiD35tshrGunTIQREn5cwVczUnQYbA0exS2Hgw8mTMvuvCZsN9 i/NdCIdZWzuZASydE53kAQMW -----END CERTIFICATE-----Generated at Sat Apr 18 21:05:51 2026 by rpki-client