$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: Fy5VdP+R7+YkXSiox11LMKDfljiahaWjMDxo3DEuWwY= Subject key identifier: 9F:AB:8A:F9:BD:52:85:83:5A:FD:76:61:88:40:57:BB:4D:60:0F:3D Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 015A Signing time: Sun 05 Apr 2026 04:26:49 +0000 Manifest this update: Sun 05 Apr 2026 04:26:49 +0000 Manifest next update: Sun 12 Apr 2026 04:26:49 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: Iw7/9nrQaDZlWosMZj5fsdkW9+akeYVa2G+D1uXJptk=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: BJNg8mxnr1mdrfP2GwYaqO8V+WhvULLpLynsdsOr+I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Apr 5 04:26:49 2026 GMT Not After : Apr 12 04:26:49 2026 GMT Subject: CN=69d1e489-d97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:f8:3e:74:6f:98:fa:4d:6d:16:6b:a3:7d: 4e:1e:4d:4a:77:21:66:68:51:de:61:49:c1:55:54: a5:eb:06:ad:86:09:e3:65:f9:75:28:de:f5:f8:ca: 90:11:48:e4:66:78:dc:7f:a7:11:52:97:9e:79:dd: 22:f7:02:4f:a9:62:6d:b1:a8:4c:cd:c8:2a:8c:8f: 26:ee:89:e0:b8:1e:a7:3d:3c:39:65:9d:26:92:75: 29:37:44:6b:a5:64:a7:2b:42:55:72:fa:0a:52:53: e2:0f:a1:66:f4:e4:e7:f9:af:5d:d7:40:38:c5:c7: d8:6b:0f:ed:04:11:ad:9c:04:e8:d8:42:fa:61:96: 21:cd:be:27:48:7b:67:4f:78:b5:7c:29:df:8e:99: 48:97:62:3f:58:fc:cd:03:a5:a2:90:be:aa:53:57: d3:c2:52:32:b4:02:7a:10:33:25:c3:5d:c0:96:25: 9f:f9:72:12:5f:4f:56:72:d4:a5:58:8b:6c:59:a5: 80:dd:46:db:6d:7c:ef:48:ac:f4:eb:f7:0d:ea:e5: 98:fe:07:b6:1e:7e:d2:73:e2:a4:b6:f0:a0:70:3a: d0:f4:ea:65:18:3b:64:d7:78:78:c6:96:cc:fd:3e: d3:a4:43:ab:64:36:99:80:fa:e7:5e:34:f4:0a:6a: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AB:8A:F9:BD:52:85:83:5A:FD:76:61:88:40:57:BB:4D:60:0F:3D X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0d:70:1e:94:a8:92:e0:73:59:8a:fc:2c:50:a0:75:4d:ef: 1b:32:e6:29:5d:07:10:9b:19:2e:e3:ab:d9:51:37:5b:6b:1a: f5:6e:36:9b:63:94:fc:60:c0:70:db:7c:d8:42:0f:b6:08:b2: 99:42:f1:3f:20:55:87:61:a0:5c:20:2f:18:e8:c1:52:64:52: c3:cb:74:ac:6d:b3:ca:d5:d7:52:3a:aa:7c:b6:e2:18:38:a7: 7b:7f:18:a1:51:c5:f8:22:cf:28:4b:33:16:bd:16:7a:bd:16: b5:87:17:3f:3c:13:a8:2c:29:5d:97:97:2b:fa:d7:19:b5:17: 49:1f:df:0c:67:29:6b:b3:3c:63:dd:92:83:e6:76:72:2d:99: 37:a5:9b:c0:cd:53:31:29:49:87:40:6d:55:9c:e5:bd:a4:8d: 39:54:d0:95:ee:28:36:97:35:d0:51:ec:f2:62:5e:f6:45:ff: da:39:6d:34:9f:ed:28:2e:4d:5c:68:8e:97:23:6f:f1:c9:66: ae:30:9c:79:5f:e1:5b:c4:f6:7d:57:5c:f5:f8:28:20:4a:5e: 07:da:4a:a3:7b:e6:29:34:a5:8b:18:af:4f:35:da:49:4c:e9: b8:59:8f:17:e4:7a:fc:cf:dc:f2:df:e5:df:19:8f:a2:34:ff: c5:8c:cf:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjYwNDA1MDQyNjQ5WhcNMjYwNDEyMDQyNjQ5WjAYMRYwFAYD VQQDEw02OWQxZTQ4OS1kOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3b4PnRvmPpNbRZro31OHk1KdyFmaFHeYUnBVVSl6wathgnjZfl1KN71+MqQ EUjkZnjcf6cRUpeeed0i9wJPqWJtsahMzcgqjI8m7onguB6nPTw5ZZ0mknUpN0Rr pWSnK0JVcvoKUlPiD6Fm9OTn+a9d10A4xcfYaw/tBBGtnATo2EL6YZYhzb4nSHtn T3i1fCnfjplIl2I/WPzNA6WikL6qU1fTwlIytAJ6EDMlw13AliWf+XISX09WctSl WItsWaWA3UbbbXzvSKz06/cN6uWY/ge2Hn7Sc+KktvCgcDrQ9OplGDtk13h4xpbM /T7TpEOrZDaZgPrnXjT0CmotQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+rivm9 UoWDWv12YYhAV7tNYA89MB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQ1wHpSokuBzWYr8LFCgdU3vGzLmKV0HEJsZLuOr2VE3W2sa9W42m2OU/GDA cNt82EIPtgiymULxPyBVh2GgXCAvGOjBUmRSw8t0rG2zytXXUjqqfLbiGDine38Y oVHF+CLPKEszFr0Wer0WtYcXPzwTqCwpXZeXK/rXGbUXSR/fDGcpa7M8Y92Sg+Z2 ci2ZN6WbwM1TMSlJh0BtVZzlvaSNOVTQle4oNpc10FHs8mJe9kX/2jltNJ/tKC5N XGiOlyNv8clmrjCceV/hW8T2fVdc9fgoIEpeB9pKo3vmKTSlixivTzXaSUzpuFmP F+R6/M/c8t/l3xmPojT/xYzPEg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:59:05 2026 by rpki-client