$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: VxDczZMwbY3kqqTcv/wcH8Yn9GtjptquCqQs5AoFygg= Subject key identifier: C6:6B:24:E2:C6:D8:3B:E0:F0:9D:79:A2:08:DB:53:31:88:4C:8C:09 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 087A Signing time: Sat 04 Apr 2026 20:25:02 +0000 Manifest this update: Sat 04 Apr 2026 20:25:02 +0000 Manifest next update: Sat 11 Apr 2026 20:25:02 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: boVeRqhHUas8odjip2wao5QQ9VxvBL3Bj1h1I2gOQN0=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Apr 4 20:25:02 2026 GMT Not After : Apr 11 20:25:02 2026 GMT Subject: CN=69d1739e-6f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:d8:5a:12:5a:de:e1:89:ed:0e:25:64:11: 11:c2:44:1c:7d:c4:6c:e9:e6:96:92:a2:56:29:0b: d0:42:f9:14:13:0f:4c:49:4f:e0:62:a4:2e:f7:5b: 53:66:8f:2c:56:8a:da:c6:89:14:96:35:7f:8a:b3: 7c:76:18:34:48:31:2a:cb:9b:17:1f:6c:50:8e:46: 71:b3:aa:29:4a:86:fd:b9:b0:10:a9:3a:9f:e2:22: c5:22:32:e2:1c:dd:c3:f2:e6:83:55:6f:fa:eb:2c: 1c:bb:c7:f3:76:9e:44:c4:d9:b7:09:e2:88:82:b9: 11:7f:51:98:e3:b6:36:68:d9:f0:22:9e:e0:ed:46: d6:9b:a7:08:9f:a9:a3:fd:03:71:45:8c:a0:df:c2: ab:93:ad:dc:1a:d5:f0:ee:0c:d3:07:42:80:4e:86: 7d:e9:50:8c:b2:60:62:dd:9b:8d:dd:a0:cd:43:c1: 02:ae:fa:67:6b:b9:c2:e2:22:6d:29:15:73:eb:95: 47:6a:cb:77:7c:51:e1:a4:35:91:c8:cc:f3:c8:82: 13:55:96:0b:a4:68:75:d8:4a:44:b4:d8:d4:c0:f5: 2e:af:56:87:50:17:45:b4:8a:0e:c5:d5:83:5a:fa: 52:5b:6a:67:65:20:0c:ab:03:b5:2f:01:0b:86:24: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:24:E2:C6:D8:3B:E0:F0:9D:79:A2:08:DB:53:31:88:4C:8C:09 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:99:ae:88:8c:d3:37:d6:8a:6f:bf:ab:96:f1:fa:09:60:e2: d7:5b:08:f2:c0:9f:66:b6:8e:51:fe:37:d1:a5:06:9b:d1:33: 5a:44:b9:ea:65:68:83:ab:8e:f2:02:b1:42:4e:29:5d:c0:68: 63:cc:14:f1:a0:33:e6:5c:ee:ea:b8:62:af:ac:6b:be:09:ed: b0:76:c9:1d:b7:19:da:d3:f9:18:a3:38:27:f4:6d:9f:be:b5: db:5b:f7:b4:e5:3b:f4:7e:a0:1e:1d:4d:8f:7c:80:77:34:4d: 1e:47:85:24:25:04:d0:f5:8b:2f:4b:db:db:f9:6d:7b:c4:6d: b4:9a:3f:de:7a:c2:82:1e:69:73:a4:27:42:76:32:ef:33:a5: 3b:43:01:32:e6:42:30:62:99:cf:ff:a0:42:73:d8:3b:98:95: 46:af:20:eb:99:82:f7:d8:6e:dd:72:71:8d:ae:33:b6:fb:ce: f4:d2:33:a2:ab:01:e9:e9:66:36:31:53:71:2f:55:de:42:d9: 2c:6f:18:45:e6:f3:b8:21:32:2f:ef:16:7f:ca:88:63:2e:13: 9a:6d:6c:17:1d:f9:00:fc:4f:fe:0a:b0:88:f8:67:23:a6:75: 11:17:c1:da:55:2b:5f:7b:52:f1:73:8d:59:2b:c1:66:4b:c2: 86:30:f5:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYwNDA0MjAyNTAyWhcNMjYwNDExMjAyNTAyWjAYMRYwFAYD VQQDEw02OWQxNzM5ZS02ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXrYWhJa3uGJ7Q4lZBERwkQcfcRs6eaWkqJWKQvQQvkUEw9MSU/gYqQu91tT Zo8sVoraxokUljV/irN8dhg0SDEqy5sXH2xQjkZxs6opSob9ubAQqTqf4iLFIjLi HN3D8uaDVW/66ywcu8fzdp5ExNm3CeKIgrkRf1GY47Y2aNnwIp7g7UbWm6cIn6mj /QNxRYyg38Krk63cGtXw7gzTB0KAToZ96VCMsmBi3ZuN3aDNQ8ECrvpna7nC4iJt KRVz65VHast3fFHhpDWRyMzzyIITVZYLpGh12EpEtNjUwPUur1aHUBdFtIoOxdWD WvpSW2pnZSAMqwO1LwELhiSSmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZrJOLG 2Dvg8J15ogjbUzGITIwJMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANZmuiIzTN9aKb7+rlvH6CWDi11sI8sCfZraOUf430aUGm9EzWkS56mVog6uO 8gKxQk4pXcBoY8wU8aAz5lzu6rhir6xrvgntsHbJHbcZ2tP5GKM4J/Rtn76121v3 tOU79H6gHh1Nj3yAdzRNHkeFJCUE0PWLL0vb2/lte8RttJo/3nrCgh5pc6QnQnYy 7zOlO0MBMuZCMGKZz/+gQnPYO5iVRq8g65mC99hu3XJxja4ztvvO9NIzoqsB6elm NjFTcS9V3kLZLG8YRebzuCEyL+8Wf8qIYy4Tmm1sFx35APxP/gqwiPhnI6Z1ERfB 2lUrX3tS8XONWSvBZkvChjD1WA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:18 2026 by rpki-client