$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: 26cgWegVi/Xzyak8buGvbtuFXLdGzpwUJju+KPyN3c0= Subject key identifier: 70:4A:12:99:01:FA:41:3A:DC:C2:25:65:30:99:C7:5F:F7:B8:D9:B6 Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 024B Signing time: Sun 05 Apr 2026 01:56:55 +0000 Manifest this update: Sun 05 Apr 2026 01:56:54 +0000 Manifest next update: Sun 12 Apr 2026 01:56:54 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: C5oGRlVZJLKF6kvDzNaf8mKQ+0nRAYHNagQhBsWAajQ=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: ylQZgSxpoYGOK3QMYk3CFuQ9Ou8gBsooYQ9v1rokCT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Apr 5 01:56:54 2026 GMT Not After : Apr 12 01:56:54 2026 GMT Subject: CN=69d1c166-962d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:f6:61:aa:f9:d2:9b:0e:71:b3:71:21:ea: 1b:3b:df:e6:5a:69:fe:82:16:4e:2f:a6:d7:c4:c6: e4:a5:4c:65:3b:5b:c8:2d:e5:36:f4:06:5a:26:59: 0d:5f:1c:7b:13:31:f8:84:cf:45:09:d6:bf:f2:64: de:c8:6d:dd:27:4b:84:76:c8:33:ae:d7:d4:1e:cc: e9:5e:63:d7:72:28:4d:22:a3:8b:5c:d0:50:c2:01: b3:9d:59:aa:a2:33:60:7e:1f:3f:0f:f7:0b:7d:71: b7:f3:70:3e:b8:04:d7:a8:c0:e9:02:dc:1e:f3:6b: 3d:ff:37:01:f2:e1:fc:83:f3:65:79:60:38:ab:72: 07:de:0d:f2:ff:92:1f:f3:55:51:a8:4f:3d:c4:e4: ae:34:24:c7:94:e4:64:bb:79:b7:29:f9:3b:e2:11: 19:da:25:a2:0a:2c:54:39:ce:df:6b:5a:a7:24:f4: 2e:c0:80:dc:b5:3d:01:69:d6:3e:4b:a4:5e:99:a4: c1:01:c5:28:80:1d:0c:5b:d5:ed:ed:a6:04:b8:67: fa:11:90:64:88:99:da:f8:46:24:4b:6b:0e:d2:e6: 7e:7a:0d:14:5d:d9:6e:30:69:49:5d:07:5d:b2:4c: 0e:f0:de:bf:a6:2d:bc:9e:fb:bd:3c:e0:1b:a6:95: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4A:12:99:01:FA:41:3A:DC:C2:25:65:30:99:C7:5F:F7:B8:D9:B6 X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8c:02:74:22:4b:51:69:99:a5:9e:aa:e0:35:50:fd:d6:26: 22:f6:fd:cb:09:fa:72:92:4a:f1:08:95:ee:a4:52:80:18:a9: 93:92:84:06:0e:b6:8c:4f:c1:83:48:58:d3:a9:3e:74:1e:ee: 6b:83:fc:81:93:75:d9:e9:23:7b:88:8c:e9:33:25:4f:b3:6b: 1d:85:bd:4c:a5:9d:87:bc:3c:d1:ee:19:ad:07:74:c6:31:af: 12:18:01:93:1a:aa:1c:b8:ed:84:56:60:3a:ba:c6:06:cf:38: 05:84:b5:30:5b:a7:8e:48:07:1a:78:40:8f:25:12:a7:4e:4e: 64:70:9b:2d:70:91:75:ad:c4:f7:bb:b1:f4:43:48:33:d7:42: 99:bc:d1:e9:6e:a0:fa:45:bb:b5:6d:3e:83:cc:2f:c1:2b:72: 6c:b0:00:ec:f7:ed:fa:05:5f:e5:fc:a7:aa:b9:07:7c:86:aa: cf:05:18:7d:c4:8c:0c:41:b0:2c:a4:92:d5:fe:fe:38:72:bc: 2c:8e:f6:11:b5:5e:ff:c3:9a:4b:c9:3f:7e:1f:57:72:16:4e: 6b:fb:b4:87:3b:3d:af:4a:cc:7d:57:5d:77:5b:18:b1:d3:0c: 27:4f:8a:4f:5b:c4:aa:fb:28:4a:84:11:a2:6f:4d:b9:38:46: 60:f0:b2:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjYwNDA1MDE1NjU0WhcNMjYwNDEyMDE1NjU0WjAYMRYwFAYD VQQDEw02OWQxYzE2Ni05NjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ub2Yar50psOcbNxIeobO9/mWmn+ghZOL6bXxMbkpUxlO1vILeU29AZaJlkN Xxx7EzH4hM9FCda/8mTeyG3dJ0uEdsgzrtfUHszpXmPXcihNIqOLXNBQwgGznVmq ojNgfh8/D/cLfXG383A+uATXqMDpAtwe82s9/zcB8uH8g/NleWA4q3IH3g3y/5If 81VRqE89xOSuNCTHlORku3m3Kfk74hEZ2iWiCixUOc7fa1qnJPQuwIDctT0BadY+ S6RemaTBAcUogB0MW9Xt7aYEuGf6EZBkiJna+EYkS2sO0uZ+eg0UXdluMGlJXQdd skwO8N6/pi28nvu9POAbppWu0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBKEpkB +kE63MIlZTCZx1/3uNm2MB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbYwCdCJLUWmZpZ6q4DVQ/dYmIvb9ywn6cpJK8QiV7qRSgBipk5KEBg62jE/B g0hY06k+dB7ua4P8gZN12ekje4iM6TMlT7NrHYW9TKWdh7w80e4ZrQd0xjGvEhgB kxqqHLjthFZgOrrGBs84BYS1MFunjkgHGnhAjyUSp05OZHCbLXCRda3E97ux9ENI M9dCmbzR6W6g+kW7tW0+g8wvwStybLAA7Pft+gVf5fynqrkHfIaqzwUYfcSMDEGw LKSS1f7+OHK8LI72EbVe/8OaS8k/fh9XchZOa/u0hzs9r0rMfVddd1sYsdMMJ0+K T1vEqvsoSoQRom9NuThGYPCyeA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:20:04 2026 by rpki-client