$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: AH8ymsT/l6oWTmJ0Pnt4C/SgpQ5c9/d+8yyb06jjHtc= Subject key identifier: 3F:70:40:B6:AA:8D:14:18:CE:7F:9A:8F:38:DE:1A:48:2B:13:A9:2D Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 0140 Signing time: Mon 27 Apr 2026 05:13:22 +0000 Manifest this update: Mon 27 Apr 2026 05:13:22 +0000 Manifest next update: Mon 04 May 2026 05:13:22 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: KtHhJ7VKQmLgIkjuu7VdCGjsgbkjnkbhFsi6pEi5OKY=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 05:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Apr 27 05:13:22 2026 GMT Not After : May 4 05:13:22 2026 GMT Subject: CN=69eef072-aac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:41:fd:dc:90:b7:00:32:03:ea:95:bf:73: 20:35:18:fd:c0:e8:a7:9b:65:c8:a4:bc:a0:46:9b: 35:cd:e2:7c:0f:48:3d:a4:33:1e:5d:b3:64:8a:05: ea:cf:bd:f0:87:2d:1a:3d:c6:e4:e9:78:76:30:b1: 4e:60:a4:d8:6e:14:46:b5:82:c7:a9:67:1d:6c:0c: 53:d6:09:d7:bc:72:77:85:ba:3f:de:9a:99:d1:22: e5:f7:70:d6:0a:91:39:07:73:ee:cc:3f:bf:72:91: 1e:28:3a:79:dc:dd:bc:f2:52:17:65:51:34:12:ed: c6:f4:93:41:d5:31:c8:40:53:c8:e2:18:ec:4e:cf: 2b:49:e4:ab:75:8c:f8:a2:d4:e1:20:a7:c2:24:5e: 56:d4:6e:cd:da:0c:6a:40:b6:62:69:4f:b6:d4:52: 7a:e3:0a:0a:25:0e:3c:10:e2:4d:b2:7e:87:21:88: dc:1e:d1:6b:a4:22:d5:0f:45:3f:02:14:72:7c:c9: 25:46:77:45:df:83:64:58:ee:c6:7e:6d:8a:59:14: 6e:2e:ca:f5:34:86:b3:62:3c:a6:70:9b:0f:84:30: e7:11:f0:49:bc:91:39:bf:f7:43:06:94:73:ca:d7: 63:1a:10:4f:e1:6c:ed:fc:25:5b:29:b3:62:f3:4e: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:40:B6:AA:8D:14:18:CE:7F:9A:8F:38:DE:1A:48:2B:13:A9:2D X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:71:51:fd:1d:50:52:cd:a0:95:32:70:fb:4e:c8:21:ec:09: 83:2a:76:d3:a2:22:ce:e6:85:67:23:42:92:c0:b5:79:7f:f2: c6:5a:88:2e:96:45:c2:95:90:c8:d0:82:58:25:6d:79:2a:32: 6b:3d:61:7c:32:c1:f1:a9:e3:4e:a6:a4:b3:bb:1d:36:10:f4: b1:3d:7a:bc:73:61:a0:95:07:d1:49:69:f5:d9:90:ff:4a:18: f9:e4:84:ea:19:85:68:6f:ee:7f:68:3a:3b:84:97:43:0d:d6: dc:10:4b:dd:83:4e:c9:0c:88:f4:62:cb:46:85:82:e0:67:54: b6:ce:36:35:26:4a:c9:bb:82:ff:cc:76:2e:ce:05:7e:9a:a6: c9:66:3f:26:4e:1e:08:0d:02:b9:bb:4f:e7:d8:90:0e:c3:8b: fb:30:f6:16:1b:53:07:97:c6:60:27:72:93:14:15:f8:09:55: 01:c9:74:eb:41:97:af:95:97:ff:87:ea:79:b1:f6:e5:89:75: 43:55:75:69:87:06:ce:66:5d:37:9b:03:da:72:da:db:fe:f5: 4e:29:a2:3a:6e:93:8a:76:d0:fb:7b:bc:86:30:32:32:39:25: 20:37:f1:d2:a7:0e:48:0a:7b:d7:c4:38:47:0f:2f:f7:76:9a: 9a:97:77:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjYwNDI3MDUxMzIyWhcNMjYwNTA0MDUxMzIyWjAYMRYwFAYD VQQDEw02OWVlZjA3Mi1hYWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RtB/dyQtwAyA+qVv3MgNRj9wOinm2XIpLygRps1zeJ8D0g9pDMeXbNkigXq z73why0aPcbk6Xh2MLFOYKTYbhRGtYLHqWcdbAxT1gnXvHJ3hbo/3pqZ0SLl93DW CpE5B3PuzD+/cpEeKDp53N288lIXZVE0Eu3G9JNB1THIQFPI4hjsTs8rSeSrdYz4 otThIKfCJF5W1G7N2gxqQLZiaU+21FJ64woKJQ48EOJNsn6HIYjcHtFrpCLVD0U/ AhRyfMklRndF34NkWO7Gfm2KWRRuLsr1NIazYjymcJsPhDDnEfBJvJE5v/dDBpRz ytdjGhBP4Wzt/CVbKbNi8071EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9wQLaq jRQYzn+ajzjeGkgrE6ktMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmHFR/R1QUs2glTJw+07IIewJgyp206IizuaFZyNCksC1eX/yxlqILpZFwpWQ yNCCWCVteSoyaz1hfDLB8anjTqaks7sdNhD0sT16vHNhoJUH0Ulp9dmQ/0oY+eSE 6hmFaG/uf2g6O4SXQw3W3BBL3YNOyQyI9GLLRoWC4GdUts42NSZKybuC/8x2Ls4F fpqmyWY/Jk4eCA0CubtP59iQDsOL+zD2FhtTB5fGYCdykxQV+AlVAcl060GXr5WX /4fqebH25Yl1Q1V1aYcGzmZdN5sD2nLa2/71TimiOm6TinbQ+3u8hjAyMjklIDfx 0qcOSAp718Q4Rw8v93aampd3Uw== -----END CERTIFICATE-----Generated at Tue Apr 28 13:38:27 2026 by rpki-client