$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft File: maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json) Hash identifier: 7EBKUy8SqZYS/9BQTY57043OuiB0MBlmAFhueD+0m4w= Subject key identifier: 12:9F:2B:7B:CD:30:4E:BA:93:17:D0:56:1D:18:CE:48:7F:DA:14:8A Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80 Certificate issuer: /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft Manifest number: 2E2D Signing time: Sat 04 Apr 2026 16:18:24 +0000 Manifest this update: Sat 04 Apr 2026 16:18:24 +0000 Manifest next update: Sat 11 Apr 2026 16:18:24 +0000 Files and hashes: 1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: A+qurN3b50CdBUPudMkBakmijtWAUSCL3TGasVQ1b8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80 Validity Not Before: Apr 4 16:18:24 2026 GMT Not After : Apr 11 16:18:24 2026 GMT Subject: CN=69d139d0-18c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:c8:af:5f:65:4a:f5:a0:24:71:99:47:7f: 65:65:3e:30:dd:f2:de:3c:27:45:51:63:04:5a:67: 64:7a:e2:da:e2:63:66:05:52:f0:b3:21:25:55:f3: 98:72:ca:84:8b:f9:5f:e6:5d:0e:b8:46:d0:e1:f5: 54:3f:30:de:b2:97:92:93:6e:08:82:61:98:13:2a: 90:07:f7:4a:27:c5:01:a1:55:c0:67:92:00:95:32: 51:7f:a8:47:15:df:6d:06:03:57:84:10:19:05:5a: 57:c5:5e:c7:2d:d1:14:fd:ec:e2:72:99:df:20:d8: c2:67:c3:5e:85:39:14:3b:47:34:18:8e:ce:e7:74: 46:9b:a9:c5:c5:5f:b0:19:26:a4:31:6e:e2:f3:68: b3:6c:1a:03:21:06:df:45:ea:3a:61:5e:08:12:a1: 83:be:1f:28:8d:83:93:75:31:86:c4:a1:cd:94:9d: ea:7a:8d:1b:3f:f2:17:5a:0b:be:6a:29:26:8b:26: 4a:8a:4b:a8:68:6b:44:d0:13:b9:74:56:d3:3d:44: be:19:61:bf:b8:a2:0a:27:70:50:5b:62:7b:e1:be: 45:a2:4f:16:28:5f:7c:08:bb:98:72:a7:5b:b2:25: 5d:67:9f:af:29:dc:20:76:10:aa:49:2a:ea:1d:69: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9F:2B:7B:CD:30:4E:BA:93:17:D0:56:1D:18:CE:48:7F:DA:14:8A X509v3 Authority Key Identifier: keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:15:10:91:7b:97:24:90:60:5d:7b:9a:99:e1:88:7a:2f:55: 42:b4:15:fb:30:c5:ea:0c:bb:4c:93:33:cc:51:52:f4:3c:aa: 74:90:e0:23:8e:40:26:d5:08:d8:9b:69:dc:6f:27:d1:3b:b3: 98:03:81:ad:bc:1c:be:11:cd:9c:83:f5:19:a9:9f:1a:6a:f3: d9:c1:ec:37:87:af:e0:dc:69:2e:46:84:ae:ad:16:2e:38:9b: a0:7d:c0:be:95:c2:b2:80:70:0f:85:e6:2b:ec:ae:77:72:67: 45:38:7c:c5:f3:b0:bc:ff:71:ab:22:f9:5f:6c:3a:2a:ea:41: 1b:da:43:59:e9:20:ae:05:ca:12:3a:1b:de:95:45:e5:65:93: 80:43:b8:77:de:22:9d:ed:55:54:f1:ca:4e:71:73:cf:45:a6: df:e3:50:8b:48:a5:fa:62:76:19:33:c5:8c:de:13:7d:80:12: 30:fb:97:71:44:1c:92:aa:57:46:53:7b:e0:fb:eb:5e:31:25: 62:b5:84:35:1a:8f:02:24:a8:20:61:8d:eb:64:24:3f:a4:15: 27:25:fd:98:36:3d:06:23:50:87:79:bf:f1:ee:88:a8:e4:92: 93:40:f0:e9:98:be:6f:cf:72:c5:86:dc:ae:2f:34:59:22:b2: d3:a7:e8:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDk5QTA3NjM2RUVCODAwNzA4MzMwMzE5NkE1OEM0MUJF Q0M2ODhGODAwHhcNMjYwNDA0MTYxODI0WhcNMjYwNDExMTYxODI0WjAYMRYwFAYD VQQDEw02OWQxMzlkMC0xOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vfIr19lSvWgJHGZR39lZT4w3fLePCdFUWMEWmdkeuLa4mNmBVLwsyElVfOY csqEi/lf5l0OuEbQ4fVUPzDespeSk24IgmGYEyqQB/dKJ8UBoVXAZ5IAlTJRf6hH Fd9tBgNXhBAZBVpXxV7HLdEU/ezicpnfINjCZ8NehTkUO0c0GI7O53RGm6nFxV+w GSakMW7i82izbBoDIQbfReo6YV4IEqGDvh8ojYOTdTGGxKHNlJ3qeo0bP/IXWgu+ aikmiyZKikuoaGtE0BO5dFbTPUS+GWG/uKIKJ3BQW2J74b5Fok8WKF98CLuYcqdb siVdZ5+vKdwgdhCqSSrqHWn3CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKfK3vN ME66kxfQVh0Yzkh/2hSKMB8GA1UdIwQYMBaAFJmgdjbuuABwgzAxlqWMQb7MaI+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFIQ0RNREdXcFl4QnZzeG9q NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21hQjJOdTY0QUhDRE1ER1dwWXhCdnN4b2o0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFI Q0RNREdXcFl4QnZzeG9qNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXBUQkXuXJJBgXXuameGIei9VQrQV+zDF6gy7TJMzzFFS9DyqdJDgI45AJtUI 2Jtp3G8n0TuzmAOBrbwcvhHNnIP1GamfGmrz2cHsN4ev4NxpLkaErq0WLjiboH3A vpXCsoBwD4XmK+yud3JnRTh8xfOwvP9xqyL5X2w6KupBG9pDWekgrgXKEjob3pVF 5WWTgEO4d94ine1VVPHKTnFzz0Wm3+NQi0il+mJ2GTPFjN4TfYASMPuXcUQckqpX RlN74PvrXjElYrWENRqPAiSoIGGN62QkP6QVJyX9mDY9BiNQh3m/8e6IqOSSk0Dw 6Zi+b89yxYbcri80WSKy06foIw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:46 2026 by rpki-client