$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: /oKjEV9KhK6B7nXLNv+kacOd6OerKjoSCo6gwbWaHT0= Subject key identifier: 69:2F:B3:AD:E8:AA:5D:07:9F:09:A9:FA:4C:4B:55:CC:B2:CA:15:BE Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0CF4 Signing time: Sat 18 Apr 2026 18:06:52 +0000 Manifest this update: Sat 18 Apr 2026 18:06:52 +0000 Manifest next update: Sat 25 Apr 2026 18:06:52 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: ZlNEYoXDComWs2VeOFgIM1A62d27xQ6HhYMeUpu24PE=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2fSA/Xuks+HjnmqBwbLjNPpAQRgRqBJVlHexUjGLyjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Apr 18 18:06:52 2026 GMT Not After : Apr 25 18:06:52 2026 GMT Subject: CN=69e3c83c-06de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:23:59:d6:7f:98:0d:a0:de:e7:9c:58:8c: 03:19:81:f0:98:b6:a5:de:07:b4:dc:ed:eb:c5:90: 42:77:a3:d5:26:8f:91:ac:3b:12:e5:2d:b6:32:67: ad:c1:e1:aa:50:84:95:a3:fd:71:28:9e:a9:63:f6: 24:88:13:b0:6d:9f:6e:b7:48:11:36:3d:a9:ec:7e: 42:8c:d7:b9:c6:43:e8:20:16:37:6c:d4:cd:58:b0: d7:c8:00:dc:e6:40:54:7e:b5:66:a0:df:a2:da:95: ea:fb:94:fb:f5:86:0a:c0:c0:39:03:a6:69:c1:ba: df:03:c6:33:c5:81:55:9a:ec:66:d5:84:53:78:42: 5d:dd:3d:09:c2:df:19:0a:f3:71:89:27:1a:ff:77: 6d:5b:5c:f6:89:f4:bc:e6:0f:7e:5e:eb:9c:71:4c: a9:40:2e:3f:15:5e:5d:da:25:48:e4:c1:7a:e1:7b: f9:e8:f2:10:e9:82:cf:8f:c7:f2:90:00:c7:ea:5b: 26:c3:b0:b9:0e:76:4b:4d:00:7b:6b:fa:97:5d:8e: a4:4f:96:12:98:93:d4:b4:30:e3:13:a7:b2:d9:c8: 28:c4:cf:54:12:9b:53:4e:08:dc:f8:09:d5:4b:5e: ca:6c:2a:ab:4b:31:75:66:18:7b:11:c5:17:b2:dc: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:B3:AD:E8:AA:5D:07:9F:09:A9:FA:4C:4B:55:CC:B2:CA:15:BE X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:99:77:5c:49:20:8d:b2:b2:ab:45:65:c1:ce:3e:03:93:69: 22:85:e9:47:06:a0:bb:6c:1a:6f:7a:d3:fe:6c:0a:28:44:2f: 92:22:83:05:7e:92:38:e8:be:08:dd:05:75:3e:a1:3d:a3:40: ac:55:bb:09:ed:3c:b0:0c:9d:28:0f:41:22:cc:ac:92:7b:8a: 3d:67:85:a4:c2:2d:c7:01:c3:d6:cb:50:b6:dc:9c:cf:8e:c2: 2a:0e:33:79:c5:f2:c4:8a:64:96:53:be:c0:48:77:3f:63:c3: fe:ca:02:88:70:ab:95:ff:21:ac:cf:21:28:9f:27:0f:2e:33: 98:8b:0a:0c:2c:51:8e:8f:74:d9:0f:20:9e:db:36:08:7f:bb: cc:bf:1e:9f:a2:c0:9a:78:80:ab:fa:99:92:d1:c0:29:b5:40: 19:a9:bf:12:a5:f1:3d:5a:42:04:f7:90:2d:dc:6a:c3:d3:78: d9:72:0b:51:c1:b4:12:31:5d:ac:62:51:a3:41:b4:0a:3a:b9: 39:61:e5:61:4b:da:3d:6c:33:66:c9:2c:10:4e:69:fa:2b:59: 68:8b:3a:e1:36:8d:c7:28:36:ce:45:23:ea:4b:87:1f:e8:dc: f8:1c:37:f0:e3:ec:01:08:b2:28:47:f7:97:ac:ea:a8:46:5a: 50:47:64:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjYwNDE4MTgwNjUyWhcNMjYwNDI1MTgwNjUyWjAYMRYwFAYD VQQDEw02OWUzYzgzYy0wNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlUjWdZ/mA2g3uecWIwDGYHwmLal3ge03O3rxZBCd6PVJo+RrDsS5S22Mmet weGqUISVo/1xKJ6pY/YkiBOwbZ9ut0gRNj2p7H5CjNe5xkPoIBY3bNTNWLDXyADc 5kBUfrVmoN+i2pXq+5T79YYKwMA5A6ZpwbrfA8YzxYFVmuxm1YRTeEJd3T0Jwt8Z CvNxiSca/3dtW1z2ifS85g9+XuuccUypQC4/FV5d2iVI5MF64Xv56PIQ6YLPj8fy kADH6lsmw7C5DnZLTQB7a/qXXY6kT5YSmJPUtDDjE6ey2cgoxM9UEptTTgjc+AnV S17KbCqrSzF1Zhh7EcUXstx7kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkvs63o ql0Hnwmp+kxLVcyyyhW+MB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5l3XEkgjbKyq0Vlwc4+A5NpIoXpRwagu2wab3rT/mwKKEQvkiKDBX6SOOi+ CN0FdT6hPaNArFW7Ce08sAydKA9BIsysknuKPWeFpMItxwHD1stQttycz47CKg4z ecXyxIpkllO+wEh3P2PD/soCiHCrlf8hrM8hKJ8nDy4zmIsKDCxRjo902Q8gnts2 CH+7zL8en6LAmniAq/qZktHAKbVAGam/EqXxPVpCBPeQLdxqw9N42XILUcG0EjFd rGJRo0G0Cjq5OWHlYUvaPWwzZsksEE5p+itZaIs64TaNxyg2zkUj6kuHH+jc+Bw3 8OPsAQiyKEf3l6zqqEZaUEdk6Q== -----END CERTIFICATE-----Generated at Sun Apr 19 02:19:00 2026 by rpki-client