$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: vBIUbK4LisuFHEc/pkjKEhEwT5kzv3N7Q1yCJMcpAVw= Subject key identifier: 1E:AD:9F:9A:DC:7F:57:B6:BC:9F:26:00:B2:B7:19:38:C7:B8:94:F1 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0AED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0AD0 Signing time: Sat 04 Apr 2026 19:15:58 +0000 Manifest this update: Sat 04 Apr 2026 19:15:57 +0000 Manifest next update: Sat 11 Apr 2026 19:15:57 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: O2V8VIoweLvb3dLK43/wfRg5d31D+4JNAoztIQ4qJBY=) 2: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: Jh4Ff7zuJk/wuhEY+gYNdPlenkcVzVFWzJ8Ffm4/pSY=) 3: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: exImyAeQnH2e+Miw5tPRziDVGs9lzMXANWdN6H9jKss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2797 (0xaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Apr 4 19:15:57 2026 GMT Not After : Apr 11 19:15:57 2026 GMT Subject: CN=69d1636e-ae1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:a3:cb:5a:b7:f2:5d:70:e9:46:6b:1a:29: 27:e5:70:38:12:9f:24:97:eb:2f:d7:39:2c:da:ef: 10:1c:24:13:da:b9:cd:cd:b4:dd:ce:35:6a:e4:4b: bf:ae:af:1f:da:5d:67:be:4c:80:80:f8:21:14:cb: 83:44:74:1a:f2:9b:88:50:8b:c4:c6:9c:26:96:3b: 58:06:ea:b7:3c:2e:e1:52:27:ac:43:e7:3a:97:b4: 0f:29:53:20:c7:e1:0b:51:c9:46:08:d1:12:e3:aa: 58:b0:0e:5a:b3:cc:4b:b7:42:fd:1c:d5:85:3c:18: 84:5a:2e:e6:49:ac:54:41:68:d8:bd:fe:62:83:81: 68:33:03:c9:84:ed:a4:d8:90:42:17:06:17:c6:d7: 36:db:0a:16:89:4e:2c:53:81:2c:9b:c8:77:f7:fe: 43:ea:96:8d:87:2e:d0:f6:4e:82:1b:e5:92:57:36: 91:2a:df:05:32:5f:fd:f8:9f:00:0d:90:11:d1:11: bc:41:15:d5:77:76:0a:41:fb:c5:61:c9:e8:89:7e: ac:dd:18:ab:23:89:7b:d7:4c:54:e2:f9:98:8a:ac: 39:d0:c7:2a:30:c3:e4:4c:8e:ce:1e:12:88:46:fa: 68:9f:a6:a3:12:6c:93:f7:96:d5:98:d0:fa:9a:02: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AD:9F:9A:DC:7F:57:B6:BC:9F:26:00:B2:B7:19:38:C7:B8:94:F1 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:9a:a4:9e:e8:b6:c6:6c:a1:41:5a:68:bf:d4:96:39:51:76: 7c:b9:b6:75:26:b6:fe:90:ef:89:be:97:18:f6:98:38:81:07: 27:88:95:1a:cd:0b:05:e1:d7:cf:23:da:70:15:76:95:82:3d: dd:a6:92:f2:3b:ef:f1:a5:33:96:3b:af:48:0e:2e:37:81:e8: 1b:d3:3f:32:de:a6:95:1d:27:e1:af:cc:0b:e0:32:f1:46:5c: b1:90:df:75:4a:cf:8f:2d:a7:02:f1:71:42:47:c7:fb:ea:89: c9:34:ec:b6:98:38:c7:d1:65:e1:bd:d2:e9:2a:ae:52:fb:a8: 0b:4f:e7:26:82:60:30:22:07:82:64:ec:03:fe:4b:de:70:03: f4:94:1e:b0:cf:c5:e1:9c:98:75:1c:f4:64:07:ea:4a:54:a0: e6:a8:1c:33:34:28:fc:75:08:48:ec:3d:54:9e:8f:40:99:d9: 22:d4:43:aa:93:ec:4f:88:0f:4e:26:93:21:1c:82:1f:e2:ee: 26:a4:52:a8:c2:00:f4:bd:aa:5d:93:e9:c0:e6:a4:31:09:99: fe:6e:5f:a4:e7:6b:bf:e5:9e:95:3a:22:36:dc:2d:9a:8b:51: 3d:45:c2:dd:f7:c1:7d:ef:e2:46:74:1e:c9:e6:0e:39:1a:64: b0:f6:0e:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjYwNDA0MTkxNTU3WhcNMjYwNDExMTkxNTU3WjAYMRYwFAYD VQQDEw02OWQxNjM2ZS1hZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFGjy1q38l1w6UZrGikn5XA4Ep8kl+sv1zks2u8QHCQT2rnNzbTdzjVq5Eu/ rq8f2l1nvkyAgPghFMuDRHQa8puIUIvExpwmljtYBuq3PC7hUiesQ+c6l7QPKVMg x+ELUclGCNES46pYsA5as8xLt0L9HNWFPBiEWi7mSaxUQWjYvf5ig4FoMwPJhO2k 2JBCFwYXxtc22woWiU4sU4Esm8h39/5D6paNhy7Q9k6CG+WSVzaRKt8FMl/9+J8A DZAR0RG8QRXVd3YKQfvFYcnoiX6s3RirI4l710xU4vmYiqw50McqMMPkTI7OHhKI Rvpon6ajEmyT95bVmND6mgJfOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6tn5rc f1e2vJ8mALK3GTjHuJTxMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcZqknui2xmyhQVpov9SWOVF2fLm2dSa2/pDvib6XGPaYOIEHJ4iVGs0LBeHX zyPacBV2lYI93aaS8jvv8aUzljuvSA4uN4HoG9M/Mt6mlR0n4a/MC+Ay8UZcsZDf dUrPjy2nAvFxQkfH++qJyTTstpg4x9Fl4b3S6SquUvuoC0/nJoJgMCIHgmTsA/5L 3nAD9JQesM/F4ZyYdRz0ZAfqSlSg5qgcMzQo/HUISOw9VJ6PQJnZItRDqpPsT4gP TiaTIRyCH+LuJqRSqMIA9L2qXZPpwOakMQmZ/m5fpOdrv+WelToiNtwtmotRPUXC 3ffBfe/iRnQeyeYOORpksPYOEw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:20 2026 by rpki-client