$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: ISpi6wdvg4GL0r+SE398YljNeDALdSPQRIeHyR+5xWA= Subject key identifier: 43:90:18:6B:83:E0:8A:7F:78:15:FB:4F:8B:69:89:61:53:0B:A6:C5 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 0209 Signing time: Mon 27 Apr 2026 02:58:42 +0000 Manifest this update: Mon 27 Apr 2026 02:58:42 +0000 Manifest next update: Mon 04 May 2026 02:58:42 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: D+hQ3NR2ujQVQVYAtiehLtcWagh6wuFgDdD6igpCyhE=) 2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=) 3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 02:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Apr 27 02:58:42 2026 GMT Not After : May 4 02:58:42 2026 GMT Subject: CN=69eed0e2-f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:77:20:73:e8:49:8d:ce:ec:4b:f1:50:4f: 49:6f:0e:fc:ed:cf:59:ee:6f:12:ef:19:ad:59:6a: cb:34:df:3d:8c:55:d0:43:36:fa:9a:75:19:74:d2: 21:16:11:08:d2:ee:a0:e7:98:e3:1f:0c:17:84:9c: 8b:4c:ee:91:05:9e:98:ad:e0:d4:b8:fc:9a:06:6f: f9:1d:22:cc:64:48:c6:df:d7:40:4b:9c:c2:b6:04: 17:92:5d:9b:1e:45:44:37:83:39:f3:0c:4c:a9:b2: 5f:c3:c0:89:7c:2d:ed:cf:c8:ae:1e:d4:53:09:40: c1:15:3d:23:d3:0e:55:c1:b9:96:f8:b8:19:cd:5e: 7f:a3:c5:9e:52:4b:72:5d:9f:dd:bf:32:90:ff:df: 24:84:7a:4e:fa:c1:64:78:9e:51:aa:81:a9:27:12: 0e:f1:0d:0b:c2:d0:e8:4d:b4:6f:db:b2:db:fa:b7: 73:fe:07:d8:c5:e8:e1:c5:71:20:74:bc:55:cb:64: dd:4e:67:bc:74:43:cb:cc:60:48:6c:0f:cc:3f:66: 59:72:ca:d0:4c:02:87:9e:b1:b9:f9:dd:4d:36:a7: d4:75:82:6d:f1:c3:ac:ae:21:01:a3:4c:c1:a9:54: c4:f2:c7:99:93:ae:11:0e:e8:6c:a8:ad:ea:ef:c2: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:18:6B:83:E0:8A:7F:78:15:FB:4F:8B:69:89:61:53:0B:A6:C5 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:39:09:02:ab:e4:55:5a:93:41:da:2f:ba:ee:37:6c:68: ec:9d:6f:54:ac:28:84:ee:66:74:6e:2e:2f:fa:b5:83:b8:d5: 78:40:01:3e:b0:06:a7:0e:c2:da:1d:12:08:f6:3b:3e:1b:ab: 5a:5e:06:f5:e6:c4:5a:36:ef:bd:e3:56:a0:96:4e:9d:9e:d3: 27:92:3d:3a:b8:69:26:e5:66:ad:64:f2:1a:88:2b:b7:99:5f: 9a:65:0a:9a:11:54:7b:b4:2b:03:10:2f:3d:e0:bc:97:86:f1: 2d:e3:58:39:78:16:a0:41:57:ae:a3:65:a9:e3:fd:ae:13:82: d1:e3:4c:c7:54:4c:21:a6:23:5c:cf:54:04:3e:be:d3:de:f3: d5:c2:dd:e3:70:c5:18:1d:d1:82:ab:6e:1b:69:cb:b1:8e:c5: b4:eb:04:77:31:c2:d1:ca:d5:13:e2:3c:28:e0:55:ef:8d:c5: e3:96:78:ba:b1:fe:8b:f8:63:9d:6d:2b:aa:57:fc:d3:db:fb: ad:1c:42:ee:00:39:a2:b5:9c:5a:6a:e7:59:95:c0:cf:aa:a1: 9c:b9:12:80:3a:23:d5:70:8b:fe:53:0f:75:f6:61:a1:e1:f9: 04:e7:05:31:53:a7:9b:4c:81:cf:16:dd:b5:44:91:94:74:4b: cd:e3:b6:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYwNDI3MDI1ODQyWhcNMjYwNTA0MDI1ODQyWjAYMRYwFAYD VQQDEw02OWVlZDBlMi1mOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvJ3IHPoSY3O7EvxUE9Jbw787c9Z7m8S7xmtWWrLNN89jFXQQzb6mnUZdNIh FhEI0u6g55jjHwwXhJyLTO6RBZ6YreDUuPyaBm/5HSLMZEjG39dAS5zCtgQXkl2b HkVEN4M58wxMqbJfw8CJfC3tz8iuHtRTCUDBFT0j0w5VwbmW+LgZzV5/o8WeUkty XZ/dvzKQ/98khHpO+sFkeJ5RqoGpJxIO8Q0LwtDoTbRv27Lb+rdz/gfYxejhxXEg dLxVy2TdTme8dEPLzGBIbA/MP2ZZcsrQTAKHnrG5+d1NNqfUdYJt8cOsriEBo0zB qVTE8seZk64RDuhsqK3q78LU1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOQGGuD 4Ip/eBX7T4tpiWFTC6bFMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlMc5CQKr5FVak0HaL7ruN2xo7J1vVKwohO5mdG4uL/q1g7jVeEABPrAGpw7C 2h0SCPY7PhurWl4G9ebEWjbvveNWoJZOnZ7TJ5I9OrhpJuVmrWTyGogrt5lfmmUK mhFUe7QrAxAvPeC8l4bxLeNYOXgWoEFXrqNlqeP9rhOC0eNMx1RMIaYjXM9UBD6+ 097z1cLd43DFGB3RgqtuG2nLsY7FtOsEdzHC0crVE+I8KOBV743F45Z4urH+i/hj nW0rqlf809v7rRxC7gA5orWcWmrnWZXAz6qhnLkSgDoj1XCL/lMPdfZhoeH5BOcF MVOnm0yBzxbdtUSRlHRLzeO2Bw== -----END CERTIFICATE-----Generated at Tue Apr 28 08:55:50 2026 by rpki-client