$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: a3pLDbHlT4VOWd7cQW+pWvVJ/Z1u62gSOj+PtvflBXQ= Subject key identifier: D7:1D:3F:CE:F8:AD:3A:A6:D9:E3:A9:92:88:07:BC:09:D3:3B:46:BF Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 39 Signing time: Tue 21 Apr 2026 08:22:46 +0000 Manifest this update: Tue 21 Apr 2026 08:22:46 +0000 Manifest next update: Tue 28 Apr 2026 08:22:46 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: 9LLihOGOPbt4kU35yW8QXKxyO7wMZqpoy8iHP0iir7A=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Apr 21 08:22:46 2026 GMT Not After : Apr 28 08:22:46 2026 GMT Subject: CN=69e733d6-7a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:5e:2d:44:4f:4e:21:23:45:ce:95:d7:2b: f9:b1:19:b1:2e:ba:f5:46:79:aa:a6:e5:0f:ad:3f: 30:d6:1a:f8:3b:31:b5:88:d7:ab:0d:11:53:b6:1b: 69:84:52:eb:ef:b0:f6:76:a2:9a:83:ea:0f:c3:be: 03:ec:93:f6:4a:71:2b:55:cc:2e:41:2e:24:b5:0b: 36:7c:ba:95:5a:b2:3d:c2:58:b8:b3:86:f8:82:c7: ce:d1:c1:8e:2b:36:b2:6e:3a:b0:a8:5c:3e:55:e6: 79:4a:74:30:fe:01:2f:6b:0c:4d:c9:a0:36:41:46: 20:e4:7a:96:79:6a:53:cc:00:cc:7e:e4:7c:34:ad: b8:49:bf:50:e0:65:b6:3d:39:45:eb:6f:aa:23:d4: 1c:9b:ad:d3:96:cf:92:37:94:f9:42:ec:8c:87:47: 31:63:d2:ce:63:69:ca:cc:b2:18:0b:bd:45:38:80: da:5a:27:28:a1:94:73:8e:7d:1c:16:8b:1d:b9:c6: 9d:79:97:5f:02:ea:8c:d0:48:ef:49:16:2f:fe:3f: d4:67:74:50:d0:5b:7f:d5:45:7b:a7:ee:0d:0a:d2: a2:bc:16:82:47:95:4e:5d:56:a0:56:af:b7:51:a2: d4:a5:13:73:6c:bd:00:d5:91:3b:20:0d:72:b3:2c: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:3F:CE:F8:AD:3A:A6:D9:E3:A9:92:88:07:BC:09:D3:3B:46:BF X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:1f:73:9e:90:50:89:0f:ec:f7:91:1e:c6:1e:86:c3:01:6e: e7:5b:2e:c9:dc:83:21:e4:e6:95:bd:d6:b6:82:ba:7a:c4:9b: 7c:62:98:43:4f:50:86:b8:17:10:d4:15:7c:62:b5:6d:a3:f8: 22:ac:8a:fd:8e:31:1c:ae:88:15:d8:83:db:58:c9:6c:fc:7f: 16:7a:bf:8c:76:b4:1d:30:42:2c:c7:45:37:33:53:2b:ae:27: 50:f9:e8:f8:10:1a:ac:9b:b8:20:d3:14:7c:05:0b:3a:ba:28: 98:d9:de:eb:c8:98:ed:b1:3f:59:e3:96:52:7c:57:19:de:7e: ec:34:eb:eb:70:35:34:a0:9b:1c:47:d6:66:6b:5e:77:6e:8d: d0:1d:56:fe:be:db:3c:b9:19:8a:fd:02:18:0d:25:7d:bd:52: ae:27:49:07:24:77:4d:aa:c4:af:1e:1b:65:fd:c4:6c:98:7a: 24:5d:7e:77:32:90:e4:e2:5b:0f:9a:6f:ab:39:04:ab:00:ae: b6:8d:ca:5f:52:53:6d:f5:96:60:93:f7:2f:28:8f:c1:0b:59: 42:7b:23:e6:73:9d:b1:a4:1a:38:b5:37:f7:de:46:67:8f:e2: 3c:39:ea:40:69:2d:b1:da:c7:e7:72:c0:53:1b:d9:66:8e:48: 2d:4c:20:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjA0MjEwODIyNDZaFw0yNjA0MjgwODIyNDZaMBgxFjAUBgNV BAMTDTY5ZTczM2Q2LTdhMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo/14tRE9OISNFzpXXK/mxGbEuuvVGeaqm5Q+tPzDWGvg7MbWI16sNEVO2G2mE UuvvsPZ2opqD6g/DvgPsk/ZKcStVzC5BLiS1CzZ8upVasj3CWLizhviCx87RwY4r NrJuOrCoXD5V5nlKdDD+AS9rDE3JoDZBRiDkepZ5alPMAMx+5Hw0rbhJv1DgZbY9 OUXrb6oj1BybrdOWz5I3lPlC7IyHRzFj0s5jacrMshgLvUU4gNpaJyihlHOOfRwW ix25xp15l18C6ozQSO9JFi/+P9RndFDQW3/VRXun7g0K0qK8FoJHlU5dVqBWr7dR otSlE3NsvQDVkTsgDXKzLOo9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1x0/zvit OqbZ46mSiAe8CdM7Rr8wHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYH3OekFCJD+z3kR7GHobDAW7nWy7J3IMh5OaVvda2grp6xJt8YphDT1CGuBcQ 1BV8YrVto/girIr9jjEcrogV2IPbWMls/H8Wer+MdrQdMEIsx0U3M1MrridQ+ej4 EBqsm7gg0xR8BQs6uiiY2d7ryJjtsT9Z45ZSfFcZ3n7sNOvrcDU0oJscR9Zma153 bo3QHVb+vts8uRmK/QIYDSV9vVKuJ0kHJHdNqsSvHhtl/cRsmHokXX53MpDk4lsP mm+rOQSrAK62jcpfUlNt9ZZgk/cvKI/BC1lCeyPmc52xpBo4tTf33kZnj+I8OepA aS2x2sfncsBTG9lmjkgtTCCX -----END CERTIFICATE-----Generated at Wed Apr 22 01:43:25 2026 by rpki-client