$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: 32GzH9Tb8J0yWY2SiiBbYk0p8UqnfncHsM8CqToUSQw= Subject key identifier: E0:FC:4C:1C:C3:09:24:A6:25:B6:BF:33:1D:99:84:AB:7A:DA:13:8A Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 028B Signing time: Mon 27 Apr 2026 01:47:14 +0000 Manifest this update: Mon 27 Apr 2026 01:47:14 +0000 Manifest next update: Mon 04 May 2026 01:47:14 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: asCa4PSE0WBFS8r61vRlYhH/iC5r1m9lH1ALkmG4QAo=) 2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=) 3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Apr 27 01:47:14 2026 GMT Not After : May 4 01:47:14 2026 GMT Subject: CN=69eec022-60c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:13:5a:b7:c1:3a:95:ad:6c:a7:e9:0d:f1: 57:bf:c7:7b:4b:b6:7e:86:5b:3e:b5:07:76:75:c2: f6:6b:cb:fd:67:f8:1a:e3:8b:69:e7:e4:7f:16:a3: 80:54:db:15:b7:14:6b:55:cc:e2:46:86:95:33:1e: 28:9a:28:3e:3e:e4:0b:cb:a2:51:be:08:c2:06:ff: 72:93:3f:c7:ba:7c:6b:36:8e:dc:b3:96:30:50:9f: 85:72:c9:61:59:0b:04:93:75:56:f4:9c:be:c1:82: 98:03:91:87:cb:a3:a9:a6:8b:16:0b:fa:1a:41:91: ec:a3:2e:78:df:fd:ed:7b:bf:d2:91:ad:0b:5f:02: 3b:1a:fe:00:8d:77:a2:cf:4e:0a:8e:a6:3a:3d:17: 34:f3:79:14:25:bf:c8:c0:85:9f:68:4e:13:29:8b: c9:e5:39:84:08:d7:c8:71:52:86:8b:3a:77:24:01: e9:7b:0e:22:97:dd:b1:92:a2:f8:da:4b:a8:2f:1b: 2e:53:0d:38:9d:6f:04:bd:03:25:f8:c5:b2:2f:cb: da:8b:cb:4e:d0:c6:18:46:4c:3e:3a:11:9f:f9:1b: 8d:93:15:1c:a0:2c:85:4b:03:c4:04:6e:d9:c3:e5: 99:dc:21:65:83:96:c3:55:4c:a3:b1:6a:b8:22:23: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FC:4C:1C:C3:09:24:A6:25:B6:BF:33:1D:99:84:AB:7A:DA:13:8A X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:36:d9:db:ef:87:14:8f:f2:9f:b8:0d:84:48:f9:95:71:ab: 74:a3:7a:c2:ac:74:f2:02:ea:0b:db:f0:73:17:f0:ae:d0:32: 2f:c8:67:64:de:30:ad:f7:f5:be:83:fd:38:69:61:d2:70:0b: 4c:ca:d1:8f:dc:b5:e4:53:fa:72:40:70:5a:d5:7d:b5:df:6d: dc:3a:f8:9c:af:a1:74:19:67:9e:fb:52:36:4c:5b:98:cb:d1: 1c:0c:07:08:0e:95:e5:b5:e2:31:d5:2f:ab:80:5b:d5:f0:db: 0a:30:8f:07:d0:70:fc:7e:c7:74:8f:d9:64:be:30:4c:0a:d3: a2:25:95:fa:2a:ee:87:6a:b9:15:74:c4:ae:fa:86:5e:48:ba: 43:98:4f:72:4f:0c:51:61:e7:5a:a3:45:dd:fb:95:9f:8c:c4: 7a:5f:58:26:4d:5a:c5:58:2b:65:be:0c:4c:5e:e1:04:6a:38: 66:50:e3:b1:5c:8f:f5:ec:ad:7a:8e:c8:8a:df:07:ec:a7:bd: c0:2f:af:cc:b5:7e:b4:29:07:19:47:d0:30:b8:6b:c8:ea:94: e7:a1:c5:5e:f4:65:6d:3e:ab:19:ea:54:6b:5d:70:21:5b:35: 39:a2:c3:72:57:d3:dd:aa:c1:74:c6:03:7e:6e:84:64:ec:6b: 41:9e:bc:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjYwNDI3MDE0NzE0WhcNMjYwNTA0MDE0NzE0WjAYMRYwFAYD VQQDEw02OWVlYzAyMi02MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP4TWrfBOpWtbKfpDfFXv8d7S7Z+hls+tQd2dcL2a8v9Z/ga44tp5+R/FqOA VNsVtxRrVcziRoaVMx4omig+PuQLy6JRvgjCBv9ykz/HunxrNo7cs5YwUJ+Fcslh WQsEk3VW9Jy+wYKYA5GHy6OpposWC/oaQZHsoy543/3te7/Ska0LXwI7Gv4AjXei z04KjqY6PRc083kUJb/IwIWfaE4TKYvJ5TmECNfIcVKGizp3JAHpew4il92xkqL4 2kuoLxsuUw04nW8EvQMl+MWyL8vai8tO0MYYRkw+OhGf+RuNkxUcoCyFSwPEBG7Z w+WZ3CFlg5bDVUyjsWq4IiPrTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOD8TBzD CSSmJba/Mx2ZhKt62hOKMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTbZ2++HFI/yn7gNhEj5lXGrdKN6wqx08gLqC9vwcxfwrtAyL8hnZN4wrff1 voP9OGlh0nALTMrRj9y15FP6ckBwWtV9td9t3Dr4nK+hdBlnnvtSNkxbmMvRHAwH CA6V5bXiMdUvq4Bb1fDbCjCPB9Bw/H7HdI/ZZL4wTArToiWV+iruh2q5FXTErvqG Xki6Q5hPck8MUWHnWqNF3fuVn4zEel9YJk1axVgrZb4MTF7hBGo4ZlDjsVyP9eyt eo7Iit8H7Ke9wC+vzLV+tCkHGUfQMLhryOqU56HFXvRlbT6rGepUa11wIVs1OaLD clfT3arBdMYDfm6EZOxrQZ68lA== -----END CERTIFICATE-----Generated at Wed Apr 29 00:01:18 2026 by rpki-client