$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: +Saxsl6wSRJ8d8h/GvByVzctbz+yXuNp4aRCZzFyw68= Subject key identifier: A8:91:C2:4E:FF:48:D9:2C:03:D6:B2:E3:F5:FD:7C:91:6F:73:25:8B Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 03EA Signing time: Wed 29 Apr 2026 01:04:16 +0000 Manifest this update: Wed 29 Apr 2026 01:04:15 +0000 Manifest next update: Wed 06 May 2026 01:04:15 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: g1btEPzgQr6HPdDNQl53FSAFj9wV1p8wmOQUPmapWdQ=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 01:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Apr 29 01:04:15 2026 GMT Not After : May 6 01:04:15 2026 GMT Subject: CN=69f15910-d9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:0c:69:2f:cc:6d:85:53:fb:2c:5e:b4:2f: f0:17:f1:f7:bd:54:54:2d:11:b4:fa:0a:50:92:50: 8f:da:94:cb:3c:f3:0d:9d:6b:60:2d:9d:f8:db:85: 3f:44:f2:a1:04:77:d4:ed:ba:aa:25:cb:8d:2b:2e: 2b:31:aa:cd:23:b0:17:5e:76:fd:01:b6:1a:83:a6: 00:d0:e6:a0:43:b5:66:6c:7d:eb:dd:7a:1f:89:e7: 56:4c:7f:1f:b0:0a:df:78:53:d7:ef:36:64:68:4f: 27:b0:7f:78:57:6f:8a:ca:74:5c:c0:4e:a4:e4:3a: f0:db:ed:2d:0d:5a:10:81:3f:a7:1e:f2:d2:79:a8: b8:08:98:32:00:ef:26:1b:17:8f:1d:0b:da:12:b0: ed:ed:4f:d7:d6:05:82:68:49:31:de:dc:be:e2:95: b6:0a:2b:4d:fd:f7:0f:3e:e9:f6:9d:fd:2b:d2:58: 31:aa:de:f4:62:97:22:01:41:56:28:62:f0:d3:32: 89:56:09:d3:ad:49:0a:4b:7a:d3:59:a8:2a:dd:a0: 8f:84:bc:dd:17:75:6c:94:d2:af:19:33:8b:61:58: 91:21:66:b3:03:9f:b0:b6:30:26:0a:c5:63:2e:b8: cb:a4:b6:c3:df:e5:c2:cb:cb:10:53:c6:85:5b:15: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:91:C2:4E:FF:48:D9:2C:03:D6:B2:E3:F5:FD:7C:91:6F:73:25:8B X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f8:86:44:7d:64:bb:59:28:61:1c:29:f2:4d:39:47:5a:6f: 99:20:f8:af:3b:9d:fe:ff:54:ce:d3:eb:a8:a0:80:92:3f:39: bb:2d:89:e8:6a:de:76:65:52:e9:63:8a:94:ee:07:e8:e6:04: c6:46:e2:ab:fa:17:de:1b:ec:ef:95:c5:4b:cd:e5:6d:b6:7f: 57:3c:03:4c:81:c2:0d:7c:4b:da:4f:dd:4c:6a:2b:6a:a9:39: 91:fa:31:13:29:81:ca:86:ec:3a:3c:0d:9c:8d:7c:2f:f7:01: e2:a4:7b:64:5f:63:da:05:14:af:df:a1:c8:33:c4:42:c7:a7: 46:44:ab:6c:b9:d3:d1:c1:ff:15:bd:18:e6:83:09:0c:2d:bb: 96:c9:38:a7:f8:c9:63:57:5b:df:80:01:6e:3d:32:be:11:61: 82:2e:c1:4d:59:3e:90:74:28:0d:c2:a2:b8:af:8f:e1:1f:c1: 59:93:55:9b:32:f4:1f:f4:a8:d3:72:08:eb:7a:5c:63:c3:4a: 6f:d6:f6:92:cc:89:01:af:c2:f7:13:1e:cb:c2:ee:a8:94:0b: 05:e4:17:d2:e9:40:80:da:60:05:36:86:c5:f8:ab:14:9d:1f: 0d:51:a9:92:71:a8:b6:0a:63:a4:f8:7c:b3:c7:cc:7e:39:4d: 3a:86:a0:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjYwNDI5MDEwNDE1WhcNMjYwNTA2MDEwNDE1WjAYMRYwFAYD VQQDEw02OWYxNTkxMC1kOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYkMaS/MbYVT+yxetC/wF/H3vVRULRG0+gpQklCP2pTLPPMNnWtgLZ3424U/ RPKhBHfU7bqqJcuNKy4rMarNI7AXXnb9AbYag6YA0OagQ7VmbH3r3XofiedWTH8f sArfeFPX7zZkaE8nsH94V2+KynRcwE6k5Drw2+0tDVoQgT+nHvLSeai4CJgyAO8m GxePHQvaErDt7U/X1gWCaEkx3ty+4pW2CitN/fcPPun2nf0r0lgxqt70YpciAUFW KGLw0zKJVgnTrUkKS3rTWagq3aCPhLzdF3VslNKvGTOLYViRIWazA5+wtjAmCsVj LrjLpLbD3+XCy8sQU8aFWxWjzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiRwk7/ SNksA9ay4/X9fJFvcyWLMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhPiGRH1ku1koYRwp8k05R1pvmSD4rzud/v9UztPrqKCAkj85uy2J6GredmVS 6WOKlO4H6OYExkbiq/oX3hvs75XFS83lbbZ/VzwDTIHCDXxL2k/dTGoraqk5kfox EymByobsOjwNnI18L/cB4qR7ZF9j2gUUr9+hyDPEQsenRkSrbLnT0cH/Fb0Y5oMJ DC27lsk4p/jJY1db34ABbj0yvhFhgi7BTVk+kHQoDcKiuK+P4R/BWZNVmzL0H/So 03II63pcY8NKb9b2ksyJAa/C9xMey8LuqJQLBeQX0ulAgNpgBTaGxfirFJ0fDVGp knGotgpjpPh8s8fMfjlNOoagzQ== -----END CERTIFICATE-----Generated at Wed Apr 29 17:00:21 2026 by rpki-client