$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: wfSNsCQUo8rZOdHvMyOf7JcHV1QlE9tbB3EYwfC8pSE= Subject key identifier: 58:BC:E0:2F:E0:D9:B4:2F:E1:95:E0:4E:AB:01:74:AC:A9:33:B8:27 Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 06CC Signing time: Sat 04 Apr 2026 22:03:39 +0000 Manifest this update: Sat 04 Apr 2026 22:03:38 +0000 Manifest next update: Sat 11 Apr 2026 22:03:38 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: jWeWw8tXNvIp4SXXI+pzyHSVVBr8PkFt6QU83iDwk8s=) 2: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: IAGVgWXaDtA7MgPpLTjnDerYepQtYeq654fjcxvmnPw=) 3: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: K7iLZNjUBsTXkR+3cN67qQlcxW/qI+RTqNNea+kXaX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Apr 4 22:03:38 2026 GMT Not After : Apr 11 22:03:38 2026 GMT Subject: CN=69d18abb-f67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:a4:e6:ef:dc:e1:d5:c0:4f:92:05:ff:c4: bf:c7:84:c1:77:4e:60:9d:a3:52:26:f5:57:e0:2d: 63:92:23:91:e8:2f:2c:f7:7b:74:66:4c:93:f7:28: da:af:cd:24:b4:fc:11:d8:a7:c2:56:97:24:f9:75: ff:90:b8:0d:7e:0d:0a:c6:39:02:7f:f0:1f:e5:5c: 49:31:87:9d:d0:84:67:74:a4:09:81:29:7e:d4:79: 8b:cd:48:c0:3a:c9:c0:9d:4c:0e:53:c7:f4:e4:5d: f4:7c:fb:ac:85:ce:b2:b0:ec:a1:5b:9d:1f:5b:a4: 23:0f:57:1b:ee:d9:03:62:67:91:1d:63:ed:44:c2: a5:01:e4:26:52:7b:eb:f4:77:4e:8c:49:c6:75:63: 3b:e7:b9:d1:af:eb:a6:99:f8:a6:73:4f:11:fd:af: 31:ab:2a:70:eb:0a:6e:bd:df:f0:73:0f:c9:e3:d0: 46:6b:0e:a9:9d:81:a8:61:e8:40:b2:96:04:13:54: b5:c0:1e:63:26:bf:2c:5e:6c:3c:70:0f:c6:c2:da: fa:92:1d:be:cf:de:41:e0:16:5a:a2:cc:0b:12:fd: 58:58:56:2b:98:2b:cb:17:16:76:37:38:0b:0e:e0: 63:00:e3:af:b6:38:ea:55:39:95:50:c2:09:5f:0f: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BC:E0:2F:E0:D9:B4:2F:E1:95:E0:4E:AB:01:74:AC:A9:33:B8:27 X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:0f:51:21:41:2c:cc:4c:50:2e:5a:4a:00:63:6b:28:6f:5e: eb:9f:4b:2a:ca:12:6e:cb:48:91:c6:dd:9c:b8:b0:78:3e:38: e3:72:a0:96:e5:2f:6c:10:aa:9e:2f:52:dc:48:bb:8c:1d:b9: 3d:f2:35:32:d2:e9:42:c1:aa:21:52:ac:38:9d:ae:cc:fe:19: 37:f6:8c:50:e2:b7:eb:bc:d1:df:47:1b:92:a5:0d:ce:52:92: 09:f9:ee:f6:4c:ce:ac:44:fd:b4:80:b9:a7:ee:b0:95:02:e9: c9:c0:7c:45:39:a9:37:b3:3c:b7:62:5c:eb:a3:a1:55:c8:9d: 67:fc:c5:b2:5c:35:2a:5e:e1:bc:c7:76:85:39:c2:37:a5:2f: 5d:76:5d:d2:bb:4f:20:06:1c:52:ff:2e:5e:ae:1d:ea:65:9e: 20:95:de:89:07:71:ff:ca:47:47:b2:8f:74:ff:da:5d:26:b2: 59:75:2c:d9:71:e0:0a:26:6f:9d:fd:23:e9:e4:ca:92:7b:87: 76:5d:b5:ec:b4:50:7d:4f:db:45:0b:1b:5f:06:32:de:4f:66: 78:d4:b1:f2:2d:6c:0a:4a:05:91:ef:5c:ae:df:31:e8:16:f2: ab:46:1f:8c:75:95:c3:46:01:bf:63:96:bc:47:f7:a7:f8:61: 5b:df:e9:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjYwNDA0MjIwMzM4WhcNMjYwNDExMjIwMzM4WjAYMRYwFAYD VQQDEw02OWQxOGFiYi1mNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8mk5u/c4dXAT5IF/8S/x4TBd05gnaNSJvVX4C1jkiOR6C8s93t0ZkyT9yja r80ktPwR2KfCVpck+XX/kLgNfg0KxjkCf/Af5VxJMYed0IRndKQJgSl+1HmLzUjA OsnAnUwOU8f05F30fPushc6ysOyhW50fW6QjD1cb7tkDYmeRHWPtRMKlAeQmUnvr 9HdOjEnGdWM757nRr+ummfimc08R/a8xqypw6wpuvd/wcw/J49BGaw6pnYGoYehA spYEE1S1wB5jJr8sXmw8cA/Gwtr6kh2+z95B4BZaoswLEv1YWFYrmCvLFxZ2NzgL DuBjAOOvtjjqVTmVUMIJXw/aXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFi84C/g 2bQv4ZXgTqsBdKypM7gnMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQ9RIUEszExQLlpKAGNrKG9e659LKsoSbstIkcbdnLiweD4443KgluUvbBCq ni9S3Ei7jB25PfI1MtLpQsGqIVKsOJ2uzP4ZN/aMUOK367zR30cbkqUNzlKSCfnu 9kzOrET9tIC5p+6wlQLpycB8RTmpN7M8t2Jc66OhVcidZ/zFslw1Kl7hvMd2hTnC N6UvXXZd0rtPIAYcUv8uXq4d6mWeIJXeiQdx/8pHR7KPdP/aXSayWXUs2XHgCiZv nf0j6eTKknuHdl217LRQfU/bRQsbXwYy3k9meNSx8i1sCkoFke9crt8x6Bbyq0Yf jHWVw0YBv2OWvEf3p/hhW9/pGQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:25 2026 by rpki-client