$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: 5J56Ai4KVbx97Q2FfEXGKl9PFjM+wQmgGPBuEIGOTEk= Subject key identifier: 0D:F1:F1:53:85:9F:E8:0F:1C:3D:86:E7:E1:44:50:D9:7D:6F:23:46 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 199D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 1967 Signing time: Sun 26 Apr 2026 16:20:23 +0000 Manifest this update: Sun 26 Apr 2026 16:20:23 +0000 Manifest next update: Sun 03 May 2026 16:20:23 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: lU1naHuTrfrcea0+OAr2JN4bOFMCs2fa7o02kQe9FrQ=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 16:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6557 (0x199d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Apr 26 16:20:23 2026 GMT Not After : May 3 16:20:23 2026 GMT Subject: CN=69ee3b47-db31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:f8:d3:6f:2d:83:d2:d1:36:27:f8:fb:2c: 7d:fa:00:15:8c:ef:7b:8b:e6:2d:04:af:99:85:42: 2a:59:a5:ad:02:0a:ae:aa:5e:74:d0:3f:34:e2:b4: 75:00:32:61:d0:47:63:14:f0:1b:52:88:ae:73:70: 93:90:cf:79:7a:d9:cd:99:b8:8d:c4:61:b0:0f:f3: 7f:fd:2a:29:97:4c:03:d7:6a:83:c5:89:b6:fa:5c: e4:09:ce:6b:08:28:67:bc:42:40:05:ab:cd:11:79: e6:5c:4a:b6:28:7d:64:41:60:a2:b9:c0:7a:18:db: 8c:27:14:09:f9:f1:68:ca:e3:c3:cf:bf:04:fc:23: b8:4d:f9:4b:9a:f8:96:bc:a5:9d:1c:9f:a2:8f:1c: 07:cf:f6:ff:8f:ee:92:30:38:ae:64:4f:e6:46:c9: 06:bc:15:ab:eb:7e:10:22:ac:63:2f:7b:6b:41:91: 48:82:04:ef:61:ca:cd:f0:85:62:a6:e9:43:ed:69: 51:e6:01:8f:ec:cc:35:3c:87:c2:d9:8d:ad:a3:3b: 6a:01:ee:1e:cb:63:17:96:7e:71:e3:1b:dc:be:e6: 4d:c8:47:c4:df:5b:06:82:5c:c0:72:6e:21:d2:d4: 38:08:f7:ff:99:de:8c:18:47:76:84:cf:d9:e3:72: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F1:F1:53:85:9F:E8:0F:1C:3D:86:E7:E1:44:50:D9:7D:6F:23:46 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:13:f5:d3:64:a6:48:ad:e2:f4:73:ac:31:69:f3:e8:f7:ad: 69:36:4b:5b:53:48:7e:57:d6:c8:34:24:0e:44:e5:3e:fb:4f: 77:5b:52:0b:f7:31:fa:c5:db:99:9f:59:d4:34:dd:a6:05:54: c7:19:07:60:4d:6d:db:87:c6:6c:3a:e8:33:86:d9:57:57:a2: cd:38:3f:63:d3:0c:de:aa:a6:9a:46:22:69:65:fe:17:68:b9: a6:dd:d7:55:52:fe:8d:55:46:53:bd:29:5b:37:64:ac:c4:94: 2e:42:bd:e4:cb:4d:f1:71:0d:70:29:ce:a0:b7:d0:34:1d:fb: 38:6c:41:7f:47:b1:43:47:f7:d1:1a:af:97:d9:7d:1b:3c:90: 46:e1:e8:87:b8:b9:44:a0:48:0d:64:de:3b:85:5a:4e:23:4a: b1:24:14:c5:bd:2f:0b:8d:05:a2:ec:17:d3:67:5f:85:19:e9: ae:60:fd:27:26:00:84:31:88:96:8a:7c:3f:a4:8f:5d:5b:c8: 7f:cd:18:a4:85:96:86:4d:76:c9:50:82:80:cc:65:e1:31:4a: f5:8d:26:e1:a2:bf:ba:a2:ee:61:9f:e5:9a:7f:80:0f:1e:02: 8b:5a:90:6a:ee:8f:ae:16:8b:e7:8d:cd:7d:a2:58:13:20:ea: a3:53:27:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjYwNDI2MTYyMDIzWhcNMjYwNTAzMTYyMDIzWjAYMRYwFAYD VQQDEw02OWVlM2I0Ny1kYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKz4028tg9LRNif4+yx9+gAVjO97i+YtBK+ZhUIqWaWtAgquql500D804rR1 ADJh0EdjFPAbUoiuc3CTkM95etnNmbiNxGGwD/N//Sopl0wD12qDxYm2+lzkCc5r CChnvEJABavNEXnmXEq2KH1kQWCiucB6GNuMJxQJ+fFoyuPDz78E/CO4TflLmviW vKWdHJ+ijxwHz/b/j+6SMDiuZE/mRskGvBWr634QIqxjL3trQZFIggTvYcrN8IVi pulD7WlR5gGP7Mw1PIfC2Y2toztqAe4ey2MXln5x4xvcvuZNyEfE31sGglzAcm4h 0tQ4CPf/md6MGEd2hM/Z43LetQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3x8VOF n+gPHD2G5+FEUNl9byNGMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmhP102SmSK3i9HOsMWnz6PetaTZLW1NIflfWyDQkDkTlPvtPd1tSC/cx+sXb mZ9Z1DTdpgVUxxkHYE1t24fGbDroM4bZV1eizTg/Y9MM3qqmmkYiaWX+F2i5pt3X VVL+jVVGU70pWzdkrMSULkK95MtN8XENcCnOoLfQNB37OGxBf0exQ0f30Rqvl9l9 GzyQRuHoh7i5RKBIDWTeO4VaTiNKsSQUxb0vC40FouwX02dfhRnprmD9JyYAhDGI lop8P6SPXVvIf80YpIWWhk12yVCCgMxl4TFK9Y0m4aK/uqLuYZ/lmn+ADx4Ci1qQ au6PrhaL543NfaJYEyDqo1Mn/w== -----END CERTIFICATE-----Generated at Mon Apr 27 02:06:15 2026 by rpki-client