$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json) Hash identifier: LmgeCze2Z6kb7Xt/ptgMpWXK7jIJq2QNVr4TBRZ5d+U= Subject key identifier: E1:45:1C:0A:5B:D8:42:D0:86:60:79:E9:50:E1:37:16:9B:81:DB:7C Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft Manifest number: 1E Signing time: Tue 21 Apr 2026 08:43:38 +0000 Manifest this update: Tue 21 Apr 2026 08:43:37 +0000 Manifest next update: Tue 28 Apr 2026 08:43:37 +0000 Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: jvRDgovZAKDGXaezYsd/LF/54NEAgkhZZARedFZDD+Q=) 2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Validity Not Before: Apr 21 08:43:37 2026 GMT Not After : Apr 28 08:43:37 2026 GMT Subject: CN=69e738ba-1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:14:8b:73:bb:ec:31:26:b1:22:e2:48:58: b9:87:65:68:63:9e:e7:f7:06:26:f5:39:4c:d9:fa: 6a:f6:64:a3:9f:c1:da:44:02:fe:71:5a:83:e3:be: 1c:ff:cc:dc:a1:99:8c:5d:d6:2e:a6:dc:15:7c:f8: 92:6d:fe:ac:3e:49:5c:64:f7:37:8f:bf:6f:cb:2a: 4b:39:89:22:59:d9:f1:c5:61:65:fc:e7:f4:0c:70: 91:fa:27:36:76:97:0e:a6:5b:c2:a2:8a:42:6d:e8: 27:69:cb:f4:70:ef:7d:6d:e0:16:b3:81:fe:07:ac: a7:be:2a:89:d5:5b:c2:0a:aa:32:e9:55:d8:65:99: a6:2a:ad:e5:53:99:aa:d2:6e:37:cf:5f:2b:de:6d: c6:73:69:03:aa:ab:73:6e:ef:ce:c3:c2:72:a1:14: 10:e8:56:8e:cc:ee:68:d8:34:2d:24:df:3f:01:be: fe:36:04:5b:b5:5b:23:ea:36:a7:88:8d:dd:80:2d: 71:53:1d:89:c5:c7:26:9d:22:05:0e:26:a1:88:ee: bb:8a:f2:16:71:62:f1:05:fa:b6:1f:2e:1f:87:b4: 78:6d:91:e8:fd:a9:e5:d5:ee:1d:af:16:41:13:f1: 7b:51:86:9d:a5:36:94:d3:95:93:7c:a6:f7:29:9a: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:45:1C:0A:5B:D8:42:D0:86:60:79:E9:50:E1:37:16:9B:81:DB:7C X509v3 Authority Key Identifier: keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:6e:22:63:59:47:26:9e:ee:8c:ae:cf:96:3d:3c:ac:33: a3:fb:76:ac:66:d2:a2:a9:6e:a9:bd:8f:44:b2:cb:c7:f5:0f: 20:d5:91:01:50:b1:47:5b:ed:f5:97:eb:42:7f:95:51:37:06: 59:77:ec:5a:40:9a:91:e8:c8:39:48:5c:f6:2b:a2:87:cb:e5: 41:8d:f9:a7:ed:61:08:6d:29:8d:20:33:4d:b0:6e:c2:ba:a5: 8f:3d:02:1d:ba:62:cf:30:69:06:79:51:d0:6a:49:e6:77:e8: df:e4:a4:d1:39:b4:89:2e:1d:b1:25:5a:57:a3:07:07:30:4b: 3f:39:a3:2e:a9:26:78:8b:89:db:99:85:6f:af:16:19:09:15: 11:09:75:67:a7:eb:6a:df:9d:32:5d:b9:b1:b8:76:aa:fe:33: a7:bd:31:20:27:77:26:25:b8:1d:62:4c:f8:3a:c2:28:9d:34: 7d:2a:4a:4b:65:48:aa:5c:dc:67:3e:77:0d:d5:2a:dc:23:1e: b4:fd:ae:49:b6:6b:86:fe:c0:0c:c9:0f:00:ee:66:a6:e6:f2: 9e:f7:11:8d:64:ae:3e:f2:be:93:0c:5c:31:0a:fc:a8:54:f6: 4a:e4:b0:14:64:c7:d4:d6:98:a1:ce:84:5a:82:c8:de:a4:3e: 69:01:95:2b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoQjJFM0M2RjdBOTA0NTRBMjI3NDczN0IwNTJDQkEzNUYx OUY1RDVBMDAeFw0yNjA0MjEwODQzMzdaFw0yNjA0MjgwODQzMzdaMBgxFjAUBgNV BAMTDTY5ZTczOGJhLTE5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCneRSLc7vsMSaxIuJIWLmHZWhjnuf3Bib1OUzZ+mr2ZKOfwdpEAv5xWoPjvhz/ zNyhmYxd1i6m3BV8+JJt/qw+SVxk9zePv2/LKks5iSJZ2fHFYWX85/QMcJH6JzZ2 lw6mW8KiikJt6Cdpy/Rw731t4Bazgf4HrKe+KonVW8IKqjLpVdhlmaYqreVTmarS bjfPXyvebcZzaQOqq3Nu787DwnKhFBDoVo7M7mjYNC0k3z8Bvv42BFu1WyPqNqeI jd2ALXFTHYnFxyadIgUOJqGI7ruK8hZxYvEF+rYfLh+HtHhtkej9qeXV7h2vFkET 8XtRhp2lNpTTlZN8pvcpmvcXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4UUcClvY QtCGYHnpUOE3FpuB23wwHwYDVR0jBBgwFoAUsuPG96kEVKInRzewUsujXxn11aAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzBENzMxREI4MTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJblJ6ZXdVc3VqWHhuMTFh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3VQRzk2a0VWS0luUnpld1VzdWpYeG4xMWFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzBENzMxREI4MTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJ blJ6ZXdVc3VqWHhuMTFhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBF+m4iY1lHJp7ujK7Plj08rDOj+3asZtKiqW6pvY9EssvH9Q8g1ZEBULFHW+31 l+tCf5VRNwZZd+xaQJqR6Mg5SFz2K6KHy+VBjfmn7WEIbSmNIDNNsG7CuqWPPQId umLPMGkGeVHQaknmd+jf5KTRObSJLh2xJVpXowcHMEs/OaMuqSZ4i4nbmYVvrxYZ CRURCXVnp+tq350yXbmxuHaq/jOnvTEgJ3cmJbgdYkz4OsIonTR9KkpLZUiqXNxn PncN1SrcIx60/a5JtmuG/sAMyQ8A7mam5vKe9xGNZK4+8r6TDFwxCvyoVPZK5LAU ZMfU1pihzoRagsjepD5pAZUr -----END CERTIFICATE-----Generated at Wed Apr 22 03:03:27 2026 by rpki-client