$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: HSVpeXkIZjDsT7hk7GTXuxyAIUKt65ee77NGh53U5FU= Subject key identifier: 77:00:E1:9B:D8:5B:75:20:63:48:77:89:E2:59:86:A7:0A:26:96:BA Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0398 Signing time: Sun 05 Apr 2026 01:57:16 +0000 Manifest this update: Sun 05 Apr 2026 01:57:16 +0000 Manifest next update: Sun 12 Apr 2026 01:57:16 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: G8oEQW4PROuCZ9CzVLImiqNcfeHBGX6IeQqa5jeDbXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Apr 5 01:57:16 2026 GMT Not After : Apr 12 01:57:16 2026 GMT Subject: CN=69d1c17c-807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:ec:7c:8b:d2:ae:d2:f6:26:f0:60:92:5b: 20:c5:30:6a:d3:5a:90:5f:df:05:6e:ce:cd:95:69: c1:f0:35:4e:94:58:ff:f1:e6:b1:1a:9e:b2:af:af: 03:f4:31:aa:ed:c5:49:d5:32:cf:e7:33:2c:28:b6: f9:03:b3:c8:a2:3f:28:33:d1:8d:b9:24:f9:ad:60: 64:a2:29:dc:e4:6b:4a:b9:ee:f0:51:9f:41:ed:3b: a2:c0:05:b0:41:1a:ef:a7:cd:49:4f:14:b5:d5:6f: 5a:d9:8e:be:a8:61:ed:d3:63:c2:6c:92:2c:5d:b1: 67:f8:df:f3:7a:70:6d:b0:96:31:7c:ef:8d:0e:3f: ed:53:b8:7b:3d:f0:23:e2:af:72:e9:b6:d9:ff:b5: 79:8f:eb:26:af:3f:e6:0e:8c:1a:ab:65:14:1a:59: 9d:97:7e:60:91:8e:a8:0e:8a:62:9d:d7:f1:84:f0: 15:ec:e2:f6:ed:ee:42:0a:2d:60:42:56:81:33:25: 92:2c:09:dd:79:3d:c8:12:71:f8:75:3a:7a:8a:d9: 31:3e:5e:43:9d:ef:17:1c:54:33:3a:7a:f9:ac:64: 60:31:48:05:ab:eb:50:fc:33:4e:c3:72:2f:80:d9: 7b:a5:dd:47:a1:23:ce:07:1e:23:54:ac:b5:ca:7d: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:E1:9B:D8:5B:75:20:63:48:77:89:E2:59:86:A7:0A:26:96:BA X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9b:45:dc:8c:f5:57:27:15:2b:77:d3:77:d1:f5:5d:94:df: 96:91:4c:91:87:6a:b6:43:46:8a:a2:12:bc:e5:54:1a:4d:cf: 75:8e:fd:f4:9c:77:9e:0a:7b:0a:b6:89:a3:3c:d8:cf:2c:0e: 38:96:25:ee:c9:74:64:13:02:c6:05:6a:b8:90:20:a0:7a:40: 7c:ec:db:ac:ae:ea:ee:f4:15:bf:0b:15:af:8a:a7:90:04:9d: 64:fa:ed:4a:21:c7:7c:aa:02:fc:56:3e:c7:88:a1:b7:0f:82: 53:8a:9a:30:a4:2b:f4:16:8f:57:79:f6:67:a3:06:db:d3:a7: 6d:e7:e7:2d:21:d4:84:8e:ae:37:7e:3e:fc:34:71:83:2a:a6: 4f:ec:40:cf:2a:02:32:de:fd:c8:06:3c:d7:ff:76:33:46:55: 65:c7:72:6b:01:9b:f9:e5:36:13:48:22:4f:85:21:90:fa:bd: 68:a1:60:f9:b6:26:6d:af:25:19:a1:9b:d5:c6:9f:e6:79:ba: 4e:bf:2a:39:9a:7d:87:3d:9c:f7:14:8e:c5:ca:1c:cb:29:14: ae:f1:a5:ad:b8:28:7d:c7:dd:c3:47:85:7e:92:81:3c:91:cb: 96:82:c6:0e:51:96:fd:78:c8:2a:2b:17:df:91:db:c9:0f:5a: 35:66:7c:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjYwNDA1MDE1NzE2WhcNMjYwNDEyMDE1NzE2WjAYMRYwFAYD VQQDEw02OWQxYzE3Yy04MDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrbsfIvSrtL2JvBgklsgxTBq01qQX98Fbs7NlWnB8DVOlFj/8eaxGp6yr68D 9DGq7cVJ1TLP5zMsKLb5A7PIoj8oM9GNuST5rWBkoinc5GtKue7wUZ9B7TuiwAWw QRrvp81JTxS11W9a2Y6+qGHt02PCbJIsXbFn+N/zenBtsJYxfO+NDj/tU7h7PfAj 4q9y6bbZ/7V5j+smrz/mDowaq2UUGlmdl35gkY6oDopindfxhPAV7OL27e5CCi1g QlaBMyWSLAndeT3IEnH4dTp6itkxPl5Dne8XHFQzOnr5rGRgMUgFq+tQ/DNOw3Iv gNl7pd1HoSPOBx4jVKy1yn28+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcA4ZvY W3UgY0h3ieJZhqcKJpa6MB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIZtF3Iz1VycVK3fTd9H1XZTflpFMkYdqtkNGiqISvOVUGk3PdY799Jx3ngp7 CraJozzYzywOOJYl7sl0ZBMCxgVquJAgoHpAfOzbrK7q7vQVvwsVr4qnkASdZPrt SiHHfKoC/FY+x4ihtw+CU4qaMKQr9BaPV3n2Z6MG29OnbefnLSHUhI6uN34+/DRx gyqmT+xAzyoCMt79yAY81/92M0ZVZcdyawGb+eU2E0giT4UhkPq9aKFg+bYmba8l GaGb1caf5nm6Tr8qOZp9hz2c9xSOxcocyykUrvGlrbgofcfdw0eFfpKBPJHLloLG DlGW/XjIKisX35HbyQ9aNWZ8Lw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:23 2026 by rpki-client