$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: T9uo0OTQvnrmyrRlKYPmaR4Kc8EznMCIqR+5uLkh28I= Subject key identifier: 26:02:B0:3D:FC:F5:64:28:21:BD:97:82:7B:E2:6A:22:03:B4:1F:E9 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 3539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3532 Signing time: Sat 18 Apr 2026 15:01:14 +0000 Manifest this update: Sat 18 Apr 2026 15:01:14 +0000 Manifest next update: Sat 25 Apr 2026 15:01:14 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: O+9tRSOWis2d/UH47IILNKcwmf6wQ3hML05HTupngNo=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: 2kB+l6pOb5zT/KlsA2xEtLzgFrgfMDCnlHiA1i2V1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Apr 18 15:01:14 2026 GMT Not After : Apr 25 15:01:14 2026 GMT Subject: CN=69e39cba-8321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4b:f8:1e:da:9c:83:ff:ed:b4:83:08:04:a7: a1:75:1e:a3:f7:6e:b0:cd:70:4a:7f:b6:58:43:bd: 49:04:93:81:74:47:b6:9b:b5:c4:7b:97:bc:c2:cb: ca:84:96:ec:68:e2:71:a7:93:1f:92:97:c8:3a:af: 2c:05:1d:fa:90:f9:b9:56:3e:d2:5a:d6:76:cb:e3: e2:54:0b:cd:bd:de:80:e3:3d:24:52:ae:c8:b1:67: 88:ff:59:81:9d:fb:c9:5b:56:e2:ca:b8:8e:ae:9c: 8c:69:52:a7:a5:ca:5c:4b:d5:57:d2:28:61:f6:fc: 85:8b:f5:2c:96:6e:a5:c0:64:82:95:94:1b:a2:87: 76:a7:2f:b9:76:f4:75:5a:6e:92:d9:5a:2d:93:f3: d0:c8:02:3e:a9:95:fd:fb:de:25:4a:6d:1c:01:bc: c2:63:72:fc:6c:cb:93:15:d3:ea:76:9d:c0:93:31: a1:4e:55:54:3e:a7:48:4c:a9:de:9c:cf:49:b6:7c: d5:5b:05:61:a4:ca:25:82:d5:db:87:de:ba:b4:8a: b0:a3:1b:e9:2a:65:b7:80:3b:5d:fe:f8:32:1d:e5: 10:4b:62:bb:87:a6:60:3a:18:f3:5c:43:8a:ca:ed: d2:cb:89:8f:06:de:36:9b:7d:9a:f1:b9:e8:f6:ed: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:B0:3D:FC:F5:64:28:21:BD:97:82:7B:E2:6A:22:03:B4:1F:E9 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:a1:ba:9f:2f:7d:46:ee:10:e6:41:00:d1:ab:08:c4:9c:d6: 7d:a7:09:81:f8:ae:d3:56:1b:51:6e:41:71:12:de:af:aa:86: 6e:7c:f5:ea:29:5d:69:8a:54:e0:bf:96:57:18:ca:0d:51:be: 29:a6:a4:13:06:9c:b4:d2:81:2c:5b:26:02:95:11:e2:4c:d9: b0:88:b5:44:dd:f4:89:a4:ad:00:38:cb:1c:ac:eb:72:d1:ba: 6e:12:41:f3:3a:35:dc:2d:d2:d9:65:1c:dc:ce:97:6d:a8:c9: a4:52:56:47:99:1d:ce:1f:fc:23:e9:46:19:72:1d:c5:05:9d: d1:1c:36:2c:73:3e:f6:26:3e:ae:74:a0:4b:0a:0d:2c:b2:43: 9d:8b:7a:de:c6:21:cb:bc:81:b5:6d:90:1e:f2:1e:06:ea:f3: bc:ad:5e:5f:f2:60:fb:d4:1c:d8:1c:78:d9:1f:08:18:e9:a4: 8f:1a:3c:dc:97:9a:a9:6f:fe:12:fc:86:22:e0:a7:57:53:33: e6:55:73:17:15:24:99:a3:a6:c3:9f:b6:8e:ec:3f:57:21:90: 4f:88:c7:de:06:e8:cc:05:7f:15:63:ad:56:d4:82:31:64:ea: e7:e8:8b:3a:bf:0a:81:e6:f0:fd:28:1d:5a:dd:35:56:cf:b3: 16:6b:3b:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYwNDE4MTUwMTE0WhcNMjYwNDI1MTUwMTE0WjAYMRYwFAYD VQQDEw02OWUzOWNiYS04MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Uv4Htqcg//ttIMIBKehdR6j926wzXBKf7ZYQ71JBJOBdEe2m7XEe5e8wsvK hJbsaOJxp5MfkpfIOq8sBR36kPm5Vj7SWtZ2y+PiVAvNvd6A4z0kUq7IsWeI/1mB nfvJW1biyriOrpyMaVKnpcpcS9VX0ihh9vyFi/Uslm6lwGSClZQbood2py+5dvR1 Wm6S2Votk/PQyAI+qZX9+94lSm0cAbzCY3L8bMuTFdPqdp3AkzGhTlVUPqdITKne nM9JtnzVWwVhpMolgtXbh966tIqwoxvpKmW3gDtd/vgyHeUQS2K7h6ZgOhjzXEOK yu3Sy4mPBt42m32a8bno9u0GlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYCsD38 9WQoIb2XgnviaiIDtB/pMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA36G6ny99Ru4Q5kEA0asIxJzWfacJgfiu01YbUW5BcRLer6qGbnz16ildaYpU 4L+WVxjKDVG+KaakEwactNKBLFsmApUR4kzZsIi1RN30iaStADjLHKzrctG6bhJB 8zo13C3S2WUc3M6XbajJpFJWR5kdzh/8I+lGGXIdxQWd0Rw2LHM+9iY+rnSgSwoN LLJDnYt63sYhy7yBtW2QHvIeBurzvK1eX/Jg+9Qc2Bx42R8IGOmkjxo83JeaqW/+ EvyGIuCnV1Mz5lVzFxUkmaOmw5+2juw/VyGQT4jH3gbozAV/FWOtVtSCMWTq5+iL Or8Kgebw/SgdWt01Vs+zFms7Og== -----END CERTIFICATE-----Generated at Sun Apr 19 03:43:59 2026 by rpki-client