$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: yZwv7MEQrnOtcV1j4GXowAzd+0pqSdU1/azwPyo/WTM= Subject key identifier: 45:AC:2C:98:0C:B0:BF:E4:3C:32:DE:A4:A5:CB:69:0F:35:3B:5D:3E Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 0A48 Signing time: Sat 04 Apr 2026 19:31:02 +0000 Manifest this update: Sat 04 Apr 2026 19:31:01 +0000 Manifest next update: Sat 11 Apr 2026 19:31:01 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: e77obRIG8B7pbtu4yAq4JrD4yLCpRIK2ylzLU2zCs/4=) 2: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: 5L+qG7S9tkiI9oResfgYtFZwd1jvISkOSfCq4CpLueQ=) 3: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: ayMh+xPpKV4MDa+xi4w8R4KTWxdFNv6TJ0EMYBEcXjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Apr 4 19:31:01 2026 GMT Not After : Apr 11 19:31:01 2026 GMT Subject: CN=69d166f6-99c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:8a:1b:1f:3f:65:83:24:07:8c:f3:7d:e5: d2:9f:57:45:b6:a9:2f:13:f0:c2:9b:eb:67:64:ed: ac:3f:34:b7:e1:a2:b9:a5:80:11:5e:cb:38:03:b9: 69:fc:77:fc:18:ef:9b:bc:fb:75:6b:8a:ed:fc:9f: 34:83:8f:ec:05:37:df:fa:9f:be:b5:66:42:ac:5a: b9:63:d8:4a:c4:a2:eb:1e:b8:fd:f0:48:aa:76:70: 91:24:dc:08:9e:ab:f4:cc:76:43:13:3c:58:fc:0b: 69:d2:a3:89:dd:a8:49:86:33:ee:7f:a8:22:57:90: 0a:41:d3:bd:e2:a2:f7:53:d5:65:c6:da:cd:d8:35: 9d:13:83:54:a2:d5:32:fc:87:36:d5:89:2e:4b:9e: a7:1c:52:e2:e5:6a:16:21:1b:b3:73:1d:e4:6e:76: e5:f1:4a:f8:c9:66:e9:15:04:56:7a:74:f8:eb:e9: bd:fa:45:84:01:37:e1:8b:27:cf:82:5c:c4:a4:24: 58:1f:c7:f1:22:28:ad:d4:fe:27:a8:c8:c5:c0:d0: 26:cb:c9:d1:40:a4:b3:a2:02:53:70:94:40:14:7c: 18:b8:22:68:e5:cd:fc:82:ed:df:71:2f:c2:fb:21: 6f:5e:75:0e:5a:21:74:aa:4f:83:2c:8a:8d:3c:88: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AC:2C:98:0C:B0:BF:E4:3C:32:DE:A4:A5:CB:69:0F:35:3B:5D:3E X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ad:08:4a:6e:d5:b4:b6:4c:8d:80:89:19:6f:ee:60:6e:78: e2:6f:73:a9:cb:08:87:96:1b:44:5f:b0:89:12:c1:71:c0:3d: 2c:ed:31:cc:d1:6b:8d:d7:f1:7f:9f:e1:79:68:1a:46:a1:8c: 28:09:40:7c:12:f0:0e:64:2e:b2:94:b7:4b:56:5e:88:5f:10: 16:d0:a5:32:ee:05:32:0d:37:2d:92:86:7b:b7:93:44:77:bd: ff:a3:45:da:57:49:52:49:fd:2d:12:04:e3:2d:5d:94:e6:04: 84:3c:ed:ca:ab:24:99:2c:80:75:df:4f:e2:e8:84:c9:80:a1: de:bf:dd:50:36:7f:71:1b:e1:8e:7a:c6:3b:26:ce:cb:c2:ba: d0:d3:13:07:e1:f4:a8:d1:cb:6e:a4:60:b4:d7:eb:06:cd:e4: 1e:3d:dd:eb:e3:4f:52:24:d1:8b:da:f0:aa:5a:f7:30:0d:79: 6e:b1:bb:e5:73:d2:f1:1e:27:a8:f9:f7:a5:7c:15:b6:17:d4: fe:7b:2d:6f:e2:f6:e6:e3:26:6f:52:8b:de:33:05:61:9d:52: 10:6b:87:0c:2a:28:68:a4:70:dc:ad:17:53:e9:88:12:42:17: 84:af:a1:1c:0a:8b:d0:c1:3b:08:28:5f:05:41:a5:06:86:14: 55:18:53:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjYwNDA0MTkzMTAxWhcNMjYwNDExMTkzMTAxWjAYMRYwFAYD VQQDEw02OWQxNjZmNi05OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NCKGx8/ZYMkB4zzfeXSn1dFtqkvE/DCm+tnZO2sPzS34aK5pYARXss4A7lp /Hf8GO+bvPt1a4rt/J80g4/sBTff+p++tWZCrFq5Y9hKxKLrHrj98EiqdnCRJNwI nqv0zHZDEzxY/Atp0qOJ3ahJhjPuf6giV5AKQdO94qL3U9VlxtrN2DWdE4NUotUy /Ic21YkuS56nHFLi5WoWIRuzcx3kbnbl8Ur4yWbpFQRWenT46+m9+kWEATfhiyfP glzEpCRYH8fxIiit1P4nqMjFwNAmy8nRQKSzogJTcJRAFHwYuCJo5c38gu3fcS/C +yFvXnUOWiF0qk+DLIqNPIiMawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWsLJgM sL/kPDLepKXLaQ81O10+MB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAa0ISm7VtLZMjYCJGW/uYG544m9zqcsIh5YbRF+wiRLBccA9LO0xzNFrjdfx f5/heWgaRqGMKAlAfBLwDmQuspS3S1ZeiF8QFtClMu4FMg03LZKGe7eTRHe9/6NF 2ldJUkn9LRIE4y1dlOYEhDztyqskmSyAdd9P4uiEyYCh3r/dUDZ/cRvhjnrGOybO y8K60NMTB+H0qNHLbqRgtNfrBs3kHj3d6+NPUiTRi9rwqlr3MA15brG75XPS8R4n qPn3pXwVthfU/nstb+L25uMmb1KL3jMFYZ1SEGuHDCooaKRw3K0XU+mIEkIXhK+h HAqL0ME7CChfBUGlBoYUVRhTQQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:57 2026 by rpki-client