$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: l4k5XdV7pYvlkU6KqupUVb6p/cA3oMoLuhFcZv+/9Ro= Subject key identifier: E2:AE:4C:A6:44:0E:B2:50:C9:C3:CC:7A:6A:F9:90:C3:C0:2B:64:38 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 0812 Signing time: Sat 18 Apr 2026 21:06:11 +0000 Manifest this update: Sat 18 Apr 2026 21:06:10 +0000 Manifest next update: Sat 25 Apr 2026 21:06:10 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: MY2itbmwjk1vpnrqgwVMUV8dgWWgmCm0UkmsoDDQw/0=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: xYotCNT5gCNIUjui/L3r9m3hvbE/2pZfHJK9qEIIwa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 21:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Apr 18 21:06:10 2026 GMT Not After : Apr 25 21:06:10 2026 GMT Subject: CN=69e3f243-69c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:4b:b6:b6:e0:33:7d:bf:23:ed:c9:b1:d1: 0a:46:87:3e:89:59:c9:35:41:57:be:96:2b:94:4b: db:36:cc:98:7d:25:f1:3d:e4:14:78:80:21:f8:1a: 72:4b:44:7c:de:54:7b:eb:f2:1e:14:15:27:89:4e: 91:fe:1b:54:b0:b2:86:ce:47:86:bf:22:d0:59:bc: 43:bd:65:b9:18:87:09:f1:15:8f:eb:44:e3:8a:2b: e0:28:5d:ec:90:e7:d1:dd:f9:2e:e1:1e:f8:b5:99: 40:57:a3:0d:f5:84:51:37:b2:5f:34:36:c2:9f:0b: e8:25:51:35:e1:a3:38:ca:e8:78:e4:9f:66:95:36: f5:01:7a:56:8c:89:fb:70:db:d3:c8:ea:47:38:0c: 35:db:6b:3e:08:af:59:cb:b4:54:1b:bd:9c:e5:5b: 1a:c6:93:7e:6f:ab:be:a7:96:01:c7:fe:01:b9:9e: c3:ec:55:69:1f:80:cd:56:fb:7c:10:a0:30:5c:b6: db:7e:00:6d:8c:3a:f0:a3:56:1e:4a:40:18:c1:a9: 07:77:4a:0b:c0:d3:89:73:63:e6:3a:5e:49:fb:c6: 88:8c:15:c9:5f:f5:ae:2a:d8:57:e0:29:3b:37:28: 39:cc:2c:69:12:e7:e9:44:61:f9:6e:5b:49:94:7d: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:4C:A6:44:0E:B2:50:C9:C3:CC:7A:6A:F9:90:C3:C0:2B:64:38 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:97:d2:b7:12:ca:d4:60:04:a0:76:43:f2:89:9c:6d:5a:4d: 69:74:e3:13:84:86:ce:8c:0a:c0:8c:bd:67:c6:d9:67:da:d2: d3:2b:72:2f:df:ad:42:05:4f:8a:85:7c:bc:83:a2:76:ef:89: 93:e5:d2:35:2a:ca:92:bd:51:34:01:29:52:93:82:61:1d:ff: da:4a:98:f8:78:4d:bd:98:0c:63:25:9e:ac:03:51:df:a3:17: 35:cd:eb:dc:4e:a7:73:b2:bb:ee:e7:51:d4:c5:10:f8:0c:95: bd:ab:23:31:54:ff:4c:74:77:37:4d:f8:f5:d2:29:f3:6c:4c: f4:1b:57:6e:d8:b9:c0:7d:fc:f6:d2:ce:56:12:b4:f0:e5:f4: 01:ca:e3:88:4b:5c:4c:31:5a:cc:3a:82:99:7d:6b:be:96:8d: 3b:1d:7b:9e:be:fc:78:44:ca:ed:22:46:0b:a3:f6:13:2a:78: 8a:4f:85:8c:a0:78:95:29:e4:7d:2f:3f:df:64:35:4b:49:64: 55:d1:02:72:fd:1c:d5:f7:8d:f5:8f:6d:52:b7:d3:82:be:6a: 21:48:d5:36:03:17:7e:51:95:18:5f:ee:25:c9:c8:db:3c:d2: 5d:f4:b8:0b:ca:91:05:c0:bb:c7:fe:f8:87:d0:89:de:22:bf: 1d:8e:f2:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjYwNDE4MjEwNjEwWhcNMjYwNDI1MjEwNjEwWjAYMRYwFAYD VQQDEw02OWUzZjI0My02OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtlLtrbgM32/I+3JsdEKRoc+iVnJNUFXvpYrlEvbNsyYfSXxPeQUeIAh+Bpy S0R83lR76/IeFBUniU6R/htUsLKGzkeGvyLQWbxDvWW5GIcJ8RWP60TjiivgKF3s kOfR3fku4R74tZlAV6MN9YRRN7JfNDbCnwvoJVE14aM4yuh45J9mlTb1AXpWjIn7 cNvTyOpHOAw122s+CK9Zy7RUG72c5VsaxpN+b6u+p5YBx/4BuZ7D7FVpH4DNVvt8 EKAwXLbbfgBtjDrwo1YeSkAYwakHd0oLwNOJc2PmOl5J+8aIjBXJX/WuKthX4Ck7 Nyg5zCxpEufpRGH5bltJlH0SGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKuTKZE DrJQycPMemr5kMPAK2Q4MB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuZfStxLK1GAEoHZD8omcbVpNaXTjE4SGzowKwIy9Z8bZZ9rS0ytyL9+tQgVP ioV8vIOidu+Jk+XSNSrKkr1RNAEpUpOCYR3/2kqY+HhNvZgMYyWerANR36MXNc3r 3E6nc7K77udR1MUQ+AyVvasjMVT/THR3N0349dIp82xM9BtXbti5wH389tLOVhK0 8OX0AcrjiEtcTDFazDqCmX1rvpaNOx17nr78eETK7SJGC6P2Eyp4ik+FjKB4lSnk fS8/32Q1S0lkVdECcv0c1feN9Y9tUrfTgr5qIUjVNgMXflGVGF/uJcnI2zzSXfS4 C8qRBcC7x/74h9CJ3iK/HY7yGw== -----END CERTIFICATE-----Generated at Sun Apr 19 02:44:49 2026 by rpki-client