$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: ZxSkPuFe/HeGVJVdt8/7fDUnDwJbLdj9clIsblwmo6M= Subject key identifier: F4:20:B7:DB:B6:E7:DD:F4:55:8D:D3:69:3C:1A:9E:38:D1:4F:1B:AE Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 024C Signing time: Sun 05 Apr 2026 01:56:41 +0000 Manifest this update: Sun 05 Apr 2026 01:56:41 +0000 Manifest next update: Sun 12 Apr 2026 01:56:41 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: 2qiKZcxE+bzXlwia1s1tEp1vnXb34mkPA5z3axZy1hI=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 8Y4nrhPY6RsS1NE1gpg04ierg266aCYEgZiZ3ft65yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Apr 5 01:56:41 2026 GMT Not After : Apr 12 01:56:41 2026 GMT Subject: CN=69d1c159-9dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:46:19:a1:21:71:6b:7a:34:5d:55:b2:88: 45:5a:db:2d:a0:bf:46:68:a3:7c:03:c6:95:09:b6: 24:09:c1:67:65:b1:3a:8c:96:15:bb:56:f3:d3:b9: 57:4a:b8:ad:c6:08:4d:53:83:ed:8b:f6:8d:87:a4: b6:e1:51:1f:3b:42:b5:d0:8a:df:60:83:7c:a3:f0: 3a:59:42:d8:fa:61:4a:70:c2:3a:1c:40:c3:50:76: 03:91:8d:09:1d:df:8e:e8:c0:e1:86:d5:1d:8c:61: 57:65:e4:dd:e0:35:0d:77:a4:3b:4f:f8:b7:2b:0c: 51:7a:7b:d7:25:51:ca:aa:b2:13:83:b6:23:53:df: f3:65:4c:96:72:e9:c8:96:a4:d0:81:a5:86:e3:ff: b2:5d:29:2f:f4:97:cf:60:c7:12:3b:20:1f:f4:f3: 6e:61:c5:37:43:21:f9:ee:b3:b2:e4:71:f2:cb:51: 52:5f:91:24:27:1b:65:3a:4f:be:51:c9:bb:66:36: a2:51:35:95:4d:f7:1b:9e:18:38:a9:09:53:e5:78: 8c:05:e9:4b:b5:1b:f1:a2:30:b0:48:d3:8a:3b:67: 24:34:c5:bc:9f:37:59:08:02:28:fb:cd:b4:90:6c: 37:55:d5:58:37:2a:fa:33:b3:89:c7:87:06:6f:2a: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:20:B7:DB:B6:E7:DD:F4:55:8D:D3:69:3C:1A:9E:38:D1:4F:1B:AE X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8d:50:b6:43:0a:c0:b2:53:05:f5:b0:bf:79:e1:38:9a:df: dd:19:d9:19:55:2d:33:18:79:59:82:17:6b:26:25:b5:dc:f6: b7:75:07:0e:a7:26:9f:ed:8a:47:af:15:76:2d:d6:33:f6:05: 58:23:0e:9e:05:53:eb:cd:7d:cc:79:46:30:d6:7a:eb:b4:c5: 19:38:e9:d7:b8:1c:4b:c6:32:15:cd:8b:d4:00:3b:a5:6f:15: c3:a6:02:91:15:a9:53:d6:4f:11:7d:4c:42:bc:46:1e:57:36: 1c:91:a2:16:f3:12:0f:86:67:23:83:9a:98:8e:f1:75:c6:ab: 10:51:6f:37:0e:9e:75:34:68:c3:15:47:cf:34:4a:b1:de:52: ff:9b:e1:40:84:fc:a5:1b:75:93:55:db:f5:d4:78:e9:85:aa: 1e:e6:c6:82:07:ea:7f:f2:1f:60:1b:1c:42:b8:fa:4f:c7:fc: a5:8c:16:23:06:7a:c5:fb:88:ad:18:ae:e9:6e:53:72:40:0a: 62:b8:58:75:45:f9:7a:e5:03:c5:d7:e5:e9:79:db:c2:09:cf: 1e:61:ad:c3:d8:22:d9:b2:de:ac:17:2c:2b:8e:79:98:1d:3e: e2:ee:9c:d2:1b:5b:f6:4d:6d:c7:d9:2b:96:43:68:c8:ac:fa: b0:62:12:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjYwNDA1MDE1NjQxWhcNMjYwNDEyMDE1NjQxWjAYMRYwFAYD VQQDEw02OWQxYzE1OS05ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOhGGaEhcWt6NF1VsohFWtstoL9GaKN8A8aVCbYkCcFnZbE6jJYVu1bz07lX SritxghNU4Pti/aNh6S24VEfO0K10IrfYIN8o/A6WULY+mFKcMI6HEDDUHYDkY0J Hd+O6MDhhtUdjGFXZeTd4DUNd6Q7T/i3KwxRenvXJVHKqrITg7YjU9/zZUyWcunI lqTQgaWG4/+yXSkv9JfPYMcSOyAf9PNuYcU3QyH57rOy5HHyy1FSX5EkJxtlOk++ Ucm7ZjaiUTWVTfcbnhg4qQlT5XiMBelLtRvxojCwSNOKO2ckNMW8nzdZCAIo+820 kGw3VdVYNyr6M7OJx4cGbyqX5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQgt9u2 5930VY3TaTwanjjRTxuuMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOo1QtkMKwLJTBfWwv3nhOJrf3RnZGVUtMxh5WYIXayYltdz2t3UHDqcmn+2K R68Vdi3WM/YFWCMOngVT6819zHlGMNZ667TFGTjp17gcS8YyFc2L1AA7pW8Vw6YC kRWpU9ZPEX1MQrxGHlc2HJGiFvMSD4ZnI4OamI7xdcarEFFvNw6edTRowxVHzzRK sd5S/5vhQIT8pRt1k1Xb9dR46YWqHubGggfqf/IfYBscQrj6T8f8pYwWIwZ6xfuI rRiu6W5TckAKYrhYdUX5euUDxdfl6XnbwgnPHmGtw9gi2bLerBcsK455mB0+4u6c 0htb9k1tx9krlkNoyKz6sGISOQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:37 2026 by rpki-client