$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: PtfvCpxagTqejfgYU4ejx5AYVtGi1lvCJsDuae6zuX8= Subject key identifier: 67:ED:8A:B8:1E:2B:1C:2D:F6:53:38:C3:44:79:78:9E:80:28:77:2C Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 05ED Signing time: Mon 20 Apr 2026 22:58:37 +0000 Manifest this update: Mon 20 Apr 2026 22:58:36 +0000 Manifest next update: Mon 27 Apr 2026 22:58:36 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: iQgwHbyBiejLj1BjGnvFXcGpnL6icvxAl/V83uLELrM=) 2: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: ahWWs0kZBjkLDlGiJDE5aUNwMLJFe7OoP0FqUJEFa+k=) 3: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: tNb9AqniNMGiccuAfhw4fufXJvoKBwPNTf9UHPrYX8U=) 4: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: BJpks1gOb51AQCv2clwa4s1WpHhotp2F+Z4P3kGOQPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Apr 20 22:58:36 2026 GMT Not After : Apr 27 22:58:36 2026 GMT Subject: CN=69e6af9d-b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:4d:e6:0e:6e:30:cf:a3:e7:80:45:77:f4: 5f:8b:d9:5e:f2:08:95:33:2e:b9:1b:95:23:b8:25: dc:12:f3:8d:1f:64:aa:8d:6f:8a:10:cb:63:a9:c6: f2:f2:d6:67:19:26:06:0c:fe:1a:49:8c:6a:50:8b: 55:52:97:f0:74:e9:60:4a:54:6b:72:3d:22:2d:37: bf:00:25:ae:0b:88:d3:de:ee:de:ec:40:f9:95:7b: ac:17:dc:c7:9e:71:9a:d0:ce:74:fd:55:f6:46:17: d2:ba:45:ee:6f:c2:b8:c7:d9:63:0a:51:82:55:d6: 4c:ad:08:96:33:b0:2f:49:7c:74:3a:aa:2c:c8:9c: e7:3e:a1:4e:45:87:6b:43:7d:ff:b9:c6:55:d2:a1: da:bc:6d:00:44:2c:0b:04:21:5c:bb:3c:3d:aa:09: dc:68:b2:9b:cc:c7:91:cc:84:88:31:0e:39:a4:70: a0:36:6a:ae:88:d4:d0:47:1f:e4:c5:a2:d9:40:fb: f2:51:50:59:5e:69:dc:db:e3:eb:2e:7a:76:09:17: 63:dc:a9:15:b2:fa:05:7c:99:70:08:f9:8d:f8:a9: f8:7a:b1:98:dc:24:25:c8:7e:33:dd:82:45:0e:9a: 56:fa:8f:dd:16:2b:5b:78:a6:55:d6:0b:89:ce:b4: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:8A:B8:1E:2B:1C:2D:F6:53:38:C3:44:79:78:9E:80:28:77:2C X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:84:1d:de:8f:49:72:69:69:61:a0:58:53:be:c0:19:15: 20:af:b7:75:88:57:12:fa:6b:aa:d2:b3:7c:bb:5c:ab:23:c8: 2d:9a:2c:32:a2:f9:be:b7:24:6c:5e:2b:6d:08:d9:1e:27:1f: 52:03:82:3f:ba:0b:6c:d9:67:cd:45:13:a9:4c:35:76:bf:05: cf:30:6d:08:e4:d8:98:97:a2:20:99:9b:7f:bf:f5:91:4f:c2: bc:24:19:69:14:ae:44:e8:41:bc:48:7d:f6:ce:16:d0:36:e9: cf:e5:85:6f:dc:07:db:d7:76:2d:a3:ad:e2:5b:07:7d:44:1e: b3:ff:93:0b:0c:4f:d4:e9:03:3c:27:79:b1:70:f7:e0:ad:7b: 02:11:b5:8f:db:75:fc:7a:4e:68:41:f2:ba:94:74:12:32:27: 05:02:16:ca:40:28:4a:3b:9c:a8:31:95:48:dd:88:c2:b4:f1: 19:82:f3:78:a1:be:4d:73:18:10:68:83:bc:de:d9:a0:d1:5e: 1f:1c:de:f8:00:a6:e8:9c:d9:ca:e0:a3:c0:a3:74:72:af:e8: 13:ed:17:ff:41:aa:e4:33:bc:49:76:73:f6:e9:7e:e0:a7:9b: ad:7b:37:4e:e1:f0:5b:30:12:16:26:99:16:a9:dd:f3:bc:cb: ac:77:8c:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjYwNDIwMjI1ODM2WhcNMjYwNDI3MjI1ODM2WjAYMRYwFAYD VQQDEw02OWU2YWY5ZC1iOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGBN5g5uMM+j54BFd/Rfi9le8giVMy65G5UjuCXcEvONH2SqjW+KEMtjqcby 8tZnGSYGDP4aSYxqUItVUpfwdOlgSlRrcj0iLTe/ACWuC4jT3u7e7ED5lXusF9zH nnGa0M50/VX2RhfSukXub8K4x9ljClGCVdZMrQiWM7AvSXx0OqosyJznPqFORYdr Q33/ucZV0qHavG0ARCwLBCFcuzw9qgncaLKbzMeRzISIMQ45pHCgNmquiNTQRx/k xaLZQPvyUVBZXmnc2+PrLnp2CRdj3KkVsvoFfJlwCPmN+Kn4erGY3CQlyH4z3YJF DppW+o/dFitbeKZV1guJzrQLZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGftirge Kxwt9lM4w0R5eJ6AKHcsMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQeEHd6PSXJpaWGgWFO+wBkVIK+3dYhXEvprqtKzfLtcqyPILZosMqL5vrck bF4rbQjZHicfUgOCP7oLbNlnzUUTqUw1dr8FzzBtCOTYmJeiIJmbf7/1kU/CvCQZ aRSuROhBvEh99s4W0Dbpz+WFb9wH29d2LaOt4lsHfUQes/+TCwxP1OkDPCd5sXD3 4K17AhG1j9t1/HpOaEHyupR0EjInBQIWykAoSjucqDGVSN2IwrTxGYLzeKG+TXMY EGiDvN7ZoNFeHxze+ACm6JzZyuCjwKN0cq/oE+0X/0Gq5DO8SXZz9ul+4KebrXs3 TuHwWzASFiaZFqnd87zLrHeMQw== -----END CERTIFICATE-----Generated at Wed Apr 22 04:09:24 2026 by rpki-client