$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json) Hash identifier: fQPBKGNsMF2xzpAvQ6HchH6o0Wl/1jtmE/TQgTevY2U= Subject key identifier: FB:DF:5D:0F:7B:EB:CD:BC:3C:37:73:9F:78:69:6F:A5:37:C1:3C:9F Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft Manifest number: 48 Signing time: Sun 05 Apr 2026 07:42:10 +0000 Manifest this update: Sun 05 Apr 2026 07:42:10 +0000 Manifest next update: Sun 12 Apr 2026 07:42:10 +0000 Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: 92qEjCTmtHQ3DWVE/iCM7bjvYqBCe56VQbEVLhSJzRc=) 2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Validity Not Before: Apr 5 07:42:10 2026 GMT Not After : Apr 12 07:42:10 2026 GMT Subject: CN=69d21252-25a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:89:46:b9:91:ef:f4:bc:fe:a8:51:ec:75: 02:a4:fe:f1:9f:aa:f6:91:01:a1:ce:3a:ad:92:b9: d4:f7:60:25:4d:37:d2:26:44:39:b7:21:5e:60:8b: dd:fd:af:78:55:ab:df:f9:79:30:b5:77:8a:7b:ab: 29:e9:6b:39:36:6b:e5:00:ad:74:db:95:c4:6c:b5: 10:2d:4d:8d:88:25:b8:5e:2c:7b:8c:0c:2f:b1:30: c8:5f:50:80:b8:3f:90:8d:73:34:18:59:1b:76:72: d7:27:60:ea:ee:8e:0c:4c:7f:5a:79:36:cd:d4:0d: 97:b2:21:55:81:46:0b:50:13:0a:58:fd:fe:22:47: 1c:71:83:0d:0e:94:ba:5f:74:e0:90:4f:ba:ef:c0: b3:34:87:0f:88:85:de:1d:5b:0a:ba:79:f7:0e:d5: a5:40:72:7f:d3:a9:41:93:1c:3d:1e:b3:e1:e7:ed: a0:22:8a:be:30:e8:c6:74:65:e8:62:7f:e6:5b:b6: 5a:ce:ab:33:44:73:8d:5d:a2:0d:66:79:0c:48:2a: b5:09:38:f3:41:1f:b0:6d:1c:ef:7f:ad:75:46:b7: d4:66:a8:2d:8e:62:64:e5:e8:0b:51:5e:92:7a:2c: 27:9d:da:a3:8f:c5:23:5b:f5:65:f6:0e:70:e6:d0: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DF:5D:0F:7B:EB:CD:BC:3C:37:73:9F:78:69:6F:A5:37:C1:3C:9F X509v3 Authority Key Identifier: keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9d:1c:3a:7b:8f:8b:20:96:9b:24:7c:41:ce:c5:98:e7:e6: a1:f4:a0:8f:a5:94:7f:ce:a0:5a:53:89:8e:d9:ce:00:84:cf: df:23:5d:ee:04:d2:29:72:83:22:3a:3e:a5:38:8d:52:51:0b: 28:d8:4c:18:b3:76:96:cc:d3:34:71:7f:ea:c0:26:c6:59:97: 60:e0:1d:22:98:ba:3b:ae:e9:2a:59:1c:17:dc:f2:b4:69:c3: e2:22:02:d1:5d:36:e7:79:87:71:8e:0f:5a:27:19:46:94:3b: 91:00:3e:9c:1d:eb:6b:26:4a:da:24:27:90:fa:a9:50:02:53: ba:9a:fd:5b:da:fb:5b:74:49:46:36:3b:ec:fc:bc:e4:80:05: 28:a5:89:60:a2:4e:2d:b4:0a:6f:a9:8b:f4:fb:b7:a1:80:96: 32:ac:73:c9:fd:b6:f8:6f:df:4c:68:0a:8a:3c:87:74:d7:09: 66:8a:a6:d5:9d:24:1b:ba:85:73:7b:de:ce:f1:3d:81:86:e0: 25:9d:20:01:9f:6a:47:85:cf:4f:c8:53:c3:dd:e4:fc:b6:29: 4d:5e:81:a0:64:86:d0:49:b2:8f:62:6d:de:4b:3a:4f:44:4e: aa:f4:51:90:45:32:a7:b0:b3:2b:3b:f8:a5:5f:e6:6b:e7:50: 73:95:0d:8a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDJEODExMC8GA1UEBRMoQTJEMEU3REY4OEFCNjlEQjZFMDU5QTMwNjRFNEREQzFF NkZDOUQxOTAeFw0yNjA0MDUwNzQyMTBaFw0yNjA0MTIwNzQyMTBaMBgxFjAUBgNV BAMTDTY5ZDIxMjUyLTI1YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC93IlGuZHv9Lz+qFHsdQKk/vGfqvaRAaHOOq2SudT3YCVNN9ImRDm3IV5gi939 r3hVq9/5eTC1d4p7qynpazk2a+UArXTblcRstRAtTY2IJbheLHuMDC+xMMhfUIC4 P5CNczQYWRt2ctcnYOrujgxMf1p5Ns3UDZeyIVWBRgtQEwpY/f4iRxxxgw0OlLpf dOCQT7rvwLM0hw+Ihd4dWwq6efcO1aVAcn/TqUGTHD0es+Hn7aAiir4w6MZ0Zehi f+ZbtlrOqzNEc41dog1meQxIKrUJOPNBH7BtHO9/rXVGt9RmqC2OYmTl6AtRXpJ6 LCed2qOPxSNb9WX2DnDm0KV/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+99dD3vr zbw8N3OfeGlvpTfBPJ8wHwYDVR0jBBgwFoAUotDn34iradtuBZowZOTdweb8nRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMkQ4Lzk0OTZENzRFQzkx MTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3REbjM0aXJhZHR1Qlpvd1pPVGR3ZWI4blJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0 dUJab3daT1Rkd2ViOG5Say5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACnRw6e4+LIJabJHxBzsWY5+ah9KCPpZR/zqBaU4mO2c4AhM/fI13uBNIpcoMi Oj6lOI1SUQso2EwYs3aWzNM0cX/qwCbGWZdg4B0imLo7rukqWRwX3PK0acPiIgLR XTbneYdxjg9aJxlGlDuRAD6cHetrJkraJCeQ+qlQAlO6mv1b2vtbdElGNjvs/Lzk gAUopYlgok4ttApvqYv0+7ehgJYyrHPJ/bb4b99MaAqKPId01wlmiqbVnSQbuoVz e97O8T2BhuAlnSABn2pHhc9PyFPD3eT8tilNXoGgZIbQSbKPYm3eSzpPRE6q9FGQ RTKnsLMrO/ilX+Zr51BzlQ2K -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:45 2026 by rpki-client