$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: pZK3i8EteKDfK6tlkXcr1go/SdiQPjK73MDvPA3No6k= Subject key identifier: 06:CF:06:BA:28:BD:A0:A6:C7:84:E4:DF:97:D9:80:6B:FF:00:A4:1E Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: 9C Signing time: Mon 06 Apr 2026 09:00:42 +0000 Manifest this update: Mon 06 Apr 2026 09:00:41 +0000 Manifest next update: Mon 13 Apr 2026 09:00:41 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: Mlnjdo7e7u4TFjK4wbL9fRWudIg8uwifRMZAcgY2b+M=) 2: 14201780319711F18CC67F1EAC833773.roa (hash: rmQmGHW+PcZ7eabQimG8Wo2e37zYIDwJm/8G4jj1kT0=) 3: C4BE139C1AE211F1803B92B5413D8C67.roa (hash: VzCemJ05XamlG2jC7L0XFu1bU7etE5348AhdfPH2ivQ=) 4: C3DF78B21AE211F1803B92B5413D8C67.roa (hash: f0xjufQzH23hX++xN0IK4TKpbvdzfPVrSADqxwu7+Kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Apr 6 09:00:41 2026 GMT Not After : Apr 13 09:00:41 2026 GMT Subject: CN=69d3763a-5af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:b6:22:eb:58:c2:18:62:7e:96:b6:93:1f: 63:bc:3f:ff:04:0c:ce:dc:5f:9c:d4:a7:c7:83:28: 2a:32:77:b7:87:6a:93:42:c0:d7:1f:a5:2e:c3:ca: 9b:d0:ad:1a:ed:08:44:ee:3b:e7:0d:04:c1:09:77: 46:67:15:78:68:41:f7:38:b1:70:32:d0:df:71:eb: df:00:67:f9:3e:c6:87:da:a5:2f:f4:bc:d2:46:1b: ff:17:30:5a:52:40:20:4f:df:24:bd:49:e8:b6:13: 3f:29:22:9a:e1:bb:4f:ce:56:0b:25:81:fc:9a:33: 75:ea:4f:e3:fc:2a:1e:0a:50:48:81:6b:f3:95:37: 07:9e:f4:6b:54:b8:2c:85:96:ce:77:60:ab:8f:c7: 8b:73:c2:65:69:0b:6d:57:1e:13:cc:73:af:dc:03: e5:b6:ca:c8:92:1b:c0:da:92:aa:fe:d1:23:4a:3f: db:79:b8:84:a9:41:a5:32:23:da:0f:c8:11:45:26: 6a:85:e1:7c:f9:b0:1a:8c:f5:0a:45:a0:08:b8:42: e6:e0:e4:81:59:8d:8a:56:3c:51:9c:70:76:d8:fe: da:be:d4:30:1c:2d:a4:89:f6:fd:ff:0f:d5:22:f4: dd:cb:c4:58:f8:ab:ef:8e:21:ee:10:a6:42:5b:4f: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:06:BA:28:BD:A0:A6:C7:84:E4:DF:97:D9:80:6B:FF:00:A4:1E X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7e:9e:f8:be:3d:a6:b1:e6:fe:fc:ce:a4:4f:0f:b7:de:b0: f9:39:75:c3:a3:62:49:e1:e2:f1:2c:66:ae:82:5d:6e:01:dd: 51:18:63:9a:13:82:ba:0e:49:9d:e4:d5:02:eb:7f:39:0a:1c: b4:6d:3b:59:b2:2e:0d:22:f2:05:a0:64:eb:7b:89:83:83:92: 63:c4:ef:97:b1:c1:e7:0e:93:d8:8b:86:5f:c2:13:4b:39:b6: 87:6c:a5:e9:cd:3e:63:a2:73:7e:51:23:5d:00:12:d2:8f:9d: 96:2a:7d:a6:10:c0:d5:85:14:e2:b9:ac:89:4e:6f:67:d6:b6: 7d:d9:7f:d6:2d:26:cc:63:29:17:2b:ec:ce:84:fa:20:f4:4d: b3:51:b8:97:05:2e:1f:2a:f0:73:66:c6:eb:f5:c8:a1:69:1f: b8:31:86:13:8d:ab:8d:17:c7:ae:41:92:c7:72:60:4d:70:e9: 57:57:42:e3:1a:ca:4e:46:47:68:79:4a:73:90:48:1e:d2:d6: ef:6d:92:d2:eb:9c:fa:74:20:22:f4:29:8e:26:77:0a:2e:c8: e4:c7:1a:2e:e1:b1:4a:e2:62:cc:7d:b1:b9:ca:11:7e:7f:8c: a1:c8:47:a1:c0:71:0d:dd:37:97:87:f3:5c:97:37:74:dd:a1: 22:62:09:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFRjIxMTAvBgNVBAUTKDlCOUQzOTcyNUIyN0Q0MjAyODEzODUxNjM0OTJGRjc1 RjE1MTEzREEwHhcNMjYwNDA2MDkwMDQxWhcNMjYwNDEzMDkwMDQxWjAYMRYwFAYD VQQDEw02OWQzNzYzYS01YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSa2IutYwhhifpa2kx9jvD//BAzO3F+c1KfHgygqMne3h2qTQsDXH6Uuw8qb 0K0a7QhE7jvnDQTBCXdGZxV4aEH3OLFwMtDfcevfAGf5PsaH2qUv9LzSRhv/FzBa UkAgT98kvUnothM/KSKa4btPzlYLJYH8mjN16k/j/CoeClBIgWvzlTcHnvRrVLgs hZbOd2Crj8eLc8JlaQttVx4TzHOv3APltsrIkhvA2pKq/tEjSj/bebiEqUGlMiPa D8gRRSZqheF8+bAajPUKRaAIuELm4OSBWY2KVjxRnHB22P7avtQwHC2kifb9/w/V IvTdy8RY+KvvjiHuEKZCW0/KXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbPBroo vaCmx4Tk35fZgGv/AKQeMB8GA1UdIwQYMBaAFJudOXJbJ9QgKBOFFjSS/3XxURPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82MjI2QzkzNjYz ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9tNTA1Y2xzbjFDQW9FNFVXTkpMX2RmRlJF OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0VGMi82MjI2QzkzNjYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9tNTA1Y2xzbjFD QW9FNFVXTkpMX2RmRlJFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo36e+L49prHm/vzOpE8Pt96w+Tl1w6NiSeHi8SxmroJdbgHdURhjmhOCug5J neTVAut/OQoctG07WbIuDSLyBaBk63uJg4OSY8Tvl7HB5w6T2IuGX8ITSzm2h2yl 6c0+Y6JzflEjXQAS0o+dlip9phDA1YUU4rmsiU5vZ9a2fdl/1i0mzGMpFyvszoT6 IPRNs1G4lwUuHyrwc2bG6/XIoWkfuDGGE42rjRfHrkGSx3JgTXDpV1dC4xrKTkZH aHlKc5BIHtLW722S0uuc+nQgIvQpjiZ3Ci7I5McaLuGxSuJizH2xucoRfn+MochH ocBxDd03l4fzXJc3dN2hImIJnQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:54:21 2026 by rpki-client