$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: CYCSYxzJnvOmuYUZugjW+nC0w6/6UO9s59RKHs53TZo= Subject key identifier: 4A:9D:76:66:8A:6E:5C:77:23:E5:17:49:4C:8C:EC:41:1C:E9:5F:87 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 0441 Signing time: Sun 05 Apr 2026 00:02:41 +0000 Manifest this update: Sun 05 Apr 2026 00:02:41 +0000 Manifest next update: Sun 12 Apr 2026 00:02:41 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: I80+kwTj0Up4sSurd0vPWUoUjvMnBV1SBpwI6suA8Sc=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: oZGxyTLie1HUwZ8S44ij5pZk1xQWTR3lRoLkZphCf9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Apr 5 00:02:41 2026 GMT Not After : Apr 12 00:02:41 2026 GMT Subject: CN=69d1a6a1-4a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:da:3f:c8:56:de:33:cc:43:34:54:80:ed: b6:60:12:3d:c5:e2:e6:04:13:5b:ee:e9:28:04:98: 94:9e:15:08:f1:75:5d:2a:66:c5:6b:29:1a:30:2f: b3:d2:1e:13:88:65:7a:46:14:73:2c:f1:86:24:00: db:87:f6:ca:00:01:76:9a:2d:07:d1:67:82:a0:c4: eb:d3:9c:e6:49:10:35:e0:97:b3:ee:51:e3:c8:69: 76:26:0a:9c:8c:ef:9f:f9:a9:51:07:8a:08:df:a2: 3c:ff:9f:70:18:3e:db:ce:07:da:c6:4c:a6:c6:b0: 9f:c7:30:11:f1:38:2d:e9:ad:93:27:bf:5e:e6:e9: d8:e4:97:6d:02:30:c5:3d:b4:63:f6:16:64:b8:21: 65:65:d3:9b:32:ba:5e:3e:91:46:76:6f:06:0e:c6: de:52:ff:b9:ea:2b:aa:84:4d:57:92:25:98:8b:c5: 0b:97:ec:fc:83:ad:1d:8b:69:15:26:d3:fd:05:09: fc:e3:db:db:e0:c8:2d:31:29:cb:75:ac:5b:2a:f5: 71:f4:b8:19:1d:53:ca:2e:64:75:dd:74:52:c9:f9: 29:a3:6d:a5:18:19:bf:23:4c:f6:43:16:c2:6c:00: 85:b5:70:c8:38:24:32:9d:9c:71:96:2c:de:d8:eb: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9D:76:66:8A:6E:5C:77:23:E5:17:49:4C:8C:EC:41:1C:E9:5F:87 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9b:01:1c:ed:ce:b3:1a:76:74:78:8f:d1:ef:74:83:b6:d3: 69:02:36:98:fa:1d:56:93:d4:4b:c7:23:ea:3f:5c:0a:d0:0a: 18:fb:00:ad:65:2a:93:44:52:ac:e5:02:d5:90:cc:d3:49:10: 7e:1c:d7:08:b4:1f:66:1f:4c:80:4c:7b:39:c7:3b:99:a9:45: 7a:cf:34:66:30:6f:a9:f3:e7:a1:0a:f8:3b:14:0f:d0:8b:69: e9:77:c4:75:3a:f9:36:f0:3b:2d:72:2f:8b:2b:b2:48:a5:b6: 55:dd:34:bb:0c:28:bf:5e:7f:8f:ca:88:00:c4:a7:77:ee:c4: 82:a7:b2:1f:e6:e2:13:e7:75:f4:6b:00:04:95:a3:15:72:35: b4:92:4d:27:31:3e:7c:44:8d:98:47:42:0b:84:cb:a0:7c:cd: c1:94:ea:c8:02:e0:8b:e9:f2:bc:dd:21:19:5f:e4:2e:0f:0d: 79:a2:7d:7c:78:a3:88:b3:0b:5c:07:76:14:13:e6:89:f3:ce: 8f:f3:2f:17:12:19:16:04:83:a7:79:9d:fc:8a:84:e4:78:de: 15:3c:d7:31:73:76:39:ea:31:75:37:48:ba:2d:be:c6:5a:67: 08:f1:07:08:2e:53:04:a6:65:4e:be:ce:32:2f:99:14:f6:aa: 35:9c:95:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjYwNDA1MDAwMjQxWhcNMjYwNDEyMDAwMjQxWjAYMRYwFAYD VQQDEw02OWQxYTZhMS00YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UbaP8hW3jPMQzRUgO22YBI9xeLmBBNb7ukoBJiUnhUI8XVdKmbFaykaMC+z 0h4TiGV6RhRzLPGGJADbh/bKAAF2mi0H0WeCoMTr05zmSRA14Jez7lHjyGl2Jgqc jO+f+alRB4oI36I8/59wGD7bzgfaxkymxrCfxzAR8Tgt6a2TJ79e5unY5JdtAjDF PbRj9hZkuCFlZdObMrpePpFGdm8GDsbeUv+56iuqhE1XkiWYi8ULl+z8g60di2kV JtP9BQn849vb4MgtMSnLdaxbKvVx9LgZHVPKLmR13XRSyfkpo22lGBm/I0z2QxbC bACFtXDIOCQynZxxlize2Os5GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqddmaK blx3I+UXSUyM7EEc6V+HMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmZsBHO3Osxp2dHiP0e90g7bTaQI2mPodVpPUS8cj6j9cCtAKGPsArWUqk0RS rOUC1ZDM00kQfhzXCLQfZh9MgEx7Occ7malFes80ZjBvqfPnoQr4OxQP0Itp6XfE dTr5NvA7LXIviyuySKW2Vd00uwwov15/j8qIAMSnd+7EgqeyH+biE+d19GsABJWj FXI1tJJNJzE+fESNmEdCC4TLoHzNwZTqyALgi+nyvN0hGV/kLg8NeaJ9fHijiLML XAd2FBPmifPOj/MvFxIZFgSDp3md/IqE5HjeFTzXMXN2OeoxdTdIui2+xlpnCPEH CC5TBKZlTr7OMi+ZFPaqNZyVxg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:08 2026 by rpki-client