$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: +w5jna4kn/KhGsZAT4YBB8kFZulepa8zjVGGg7vm0GY= Subject key identifier: 1C:A5:4E:29:86:7A:D9:CB:D3:95:D8:7C:2D:FA:49:1E:4B:29:1B:3D Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 354E Signing time: Mon 20 Apr 2026 14:16:11 +0000 Manifest this update: Mon 20 Apr 2026 14:16:11 +0000 Manifest next update: Mon 27 Apr 2026 14:16:11 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: 4eXQ1ikbkZJImlu+AcU9C411qpO/gnp5datf527fNAM=) 2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=) 3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Apr 20 14:16:11 2026 GMT Not After : Apr 27 14:16:11 2026 GMT Subject: CN=69e6352b-9083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:76:17:c0:0c:73:77:9e:e9:7a:38:f1:d7: a9:81:2d:d0:01:ee:d6:c2:b0:ce:d0:69:20:bb:75: 18:07:15:88:1d:25:8e:39:ad:60:f6:f0:fd:6e:0f: 14:60:63:33:87:8d:28:11:7e:f6:51:29:dd:a3:66: 5c:eb:ec:3b:ee:a8:af:ce:0a:42:fe:d3:a0:88:47: c5:73:49:26:72:b8:27:94:2b:5c:53:ef:60:48:b4: ef:8e:fe:c9:7f:61:da:5b:60:76:b1:5e:23:5a:2c: 51:9f:f4:a1:24:12:f9:4f:dd:3d:27:19:2f:aa:b4: c2:06:b7:76:a6:03:09:ab:88:5f:de:fe:16:62:c4: 35:f1:74:55:0e:b7:ca:74:25:ab:73:23:3d:c1:a4: 3a:e6:68:30:be:4f:8c:33:b0:a2:ae:fd:72:bc:db: 94:09:06:10:b9:4b:b4:8f:7a:35:b0:75:88:0c:7a: fb:8e:ec:b4:b1:1c:9a:96:37:00:3a:80:85:05:d2: c9:46:9b:12:d0:b8:e5:89:56:e9:e9:ab:ec:87:1c: c9:c2:aa:2c:4a:a4:d1:ed:5f:6e:1a:af:84:45:db: 16:eb:48:a4:5f:23:7a:29:94:36:20:52:0f:aa:c4: 84:84:cc:fb:48:e5:df:2c:97:3c:7f:c9:b7:e9:de: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A5:4E:29:86:7A:D9:CB:D3:95:D8:7C:2D:FA:49:1E:4B:29:1B:3D X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:42:3a:51:84:5b:be:06:a8:85:6b:73:83:00:c1:fc:85:87: a5:48:2e:8c:ea:9f:b2:fd:4d:a8:2a:c5:0c:bd:17:07:5c:51: 55:90:8d:dd:d9:08:5f:b5:7f:80:59:fa:0f:af:af:04:a7:c8: 9d:df:0c:23:4b:5b:ab:73:11:a8:fb:ca:d4:17:57:3c:98:31: ce:22:69:e9:65:b4:a7:01:90:3c:80:1e:07:e2:fb:84:85:f9: 9e:ff:bf:91:c7:46:ae:ce:cd:17:dc:a9:0a:d6:bb:04:cb:b2: 9b:ad:8f:7a:a6:00:e4:ca:d5:1e:db:97:52:4c:9c:cf:a9:dd: 11:f2:46:19:2c:b1:00:ba:bd:1b:ef:bb:d0:60:b3:db:19:b9: 7a:9a:41:dc:71:67:6d:62:83:51:a3:33:1e:47:0a:c1:1c:15: e4:e9:54:d2:5c:9c:36:88:0f:d3:e7:7d:08:94:80:a8:f7:22: 69:7a:7c:52:56:8b:6d:63:9c:7f:47:35:74:6d:65:b1:fd:f7: 11:db:56:ef:73:6d:7e:59:d2:6b:5a:e5:96:0b:03:75:2a:92: 34:81:ab:e1:54:9b:04:da:f6:4a:1e:e0:b7:2c:7e:d2:46:84: 94:3b:84:b5:af:21:a8:31:ec:6c:d1:c6:ea:1c:87:5e:b5:90: 43:32:58:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjYwNDIwMTQxNjExWhcNMjYwNDI3MTQxNjExWjAYMRYwFAYD VQQDEw02OWU2MzUyYi05MDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7h2F8AMc3ee6Xo48depgS3QAe7WwrDO0Gkgu3UYBxWIHSWOOa1g9vD9bg8U YGMzh40oEX72USndo2Zc6+w77qivzgpC/tOgiEfFc0kmcrgnlCtcU+9gSLTvjv7J f2HaW2B2sV4jWixRn/ShJBL5T909JxkvqrTCBrd2pgMJq4hf3v4WYsQ18XRVDrfK dCWrcyM9waQ65mgwvk+MM7Cirv1yvNuUCQYQuUu0j3o1sHWIDHr7juy0sRyaljcA OoCFBdLJRpsS0LjliVbp6avshxzJwqosSqTR7V9uGq+ERdsW60ikXyN6KZQ2IFIP qsSEhMz7SOXfLJc8f8m36d4x1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBylTimG etnL05XYfC36SR5LKRs9MB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs0I6UYRbvgaohWtzgwDB/IWHpUgujOqfsv1NqCrFDL0XB1xRVZCN3dkIX7V/ gFn6D6+vBKfInd8MI0tbq3MRqPvK1BdXPJgxziJp6WW0pwGQPIAeB+L7hIX5nv+/ kcdGrs7NF9ypCta7BMuym62PeqYA5MrVHtuXUkycz6ndEfJGGSyxALq9G++70GCz 2xm5eppB3HFnbWKDUaMzHkcKwRwV5OlU0lycNogP0+d9CJSAqPciaXp8UlaLbWOc f0c1dG1lsf33EdtW73NtflnSa1rllgsDdSqSNIGr4VSbBNr2Sh7gtyx+0kaElDuE ta8hqDHsbNHG6hyHXrWQQzJYMA== -----END CERTIFICATE-----Generated at Tue Apr 21 19:04:13 2026 by rpki-client