$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft File: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft (raw, json) Hash identifier: Dja3Z9DPfHZllvoW4GqxDMgLSqEu6L0VoISvat3P6ms= Subject key identifier: 00:EA:4F:1F:39:45:8B:3F:0C:A9:8F:B1:7A:10:72:C1:56:A0:02:67 Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 Certificate issuer: /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft Manifest number: 87 Signing time: Sun 05 Apr 2026 07:00:14 +0000 Manifest this update: Sun 05 Apr 2026 07:00:14 +0000 Manifest next update: Sun 12 Apr 2026 07:00:14 +0000 Files and hashes: 1: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl (hash: srhsuqCeaEshE6WHkT5H9B38XFAU7szbVkKCrVihGXs=) 2: 44E524C6660611F0AC01FC4FC4F9AE02.roa (hash: IZAEj6W6QOuR8H1nZarqOKRBQJYHaDrF6ES808DOjWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Validity Not Before: Apr 5 07:00:14 2026 GMT Not After : Apr 12 07:00:14 2026 GMT Subject: CN=69d2087e-3dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:3b:85:9e:a7:04:d3:6e:cf:40:78:ef:8f: 66:ae:f5:c9:7c:58:a0:61:5b:26:57:30:5d:43:d6: c6:92:af:d5:ef:f8:24:06:a0:2e:0d:b8:cd:11:8d: f1:50:82:c6:13:53:f8:e4:f1:8d:43:51:5f:5b:67: 91:e1:09:7a:64:b1:ad:57:47:44:79:60:5e:14:a4: 95:1a:88:5d:92:82:4d:bf:e1:4d:79:ff:b1:a6:69: 78:a9:9a:44:5b:56:49:49:96:5f:2e:82:6d:68:85: 4d:41:10:93:23:a0:57:88:8e:f7:b3:23:bc:f4:a8: 95:57:61:2a:db:0b:5c:c7:ae:4f:a2:0d:f5:fa:5a: 83:51:c2:27:47:f8:b4:f5:91:f9:78:c8:38:94:c8: f1:f9:00:2a:1c:1e:d6:47:0f:6f:4a:db:94:ff:57: e2:7b:bc:0f:af:1c:77:aa:e6:06:fe:88:15:92:f0: d1:c3:47:e4:07:83:32:3d:4b:21:e8:27:40:18:22: f9:05:85:1a:d9:98:b3:36:8d:09:f3:0f:a9:22:1e: 00:8a:7c:df:6b:60:9a:19:e2:7e:5c:c5:ff:1c:39: f8:7d:aa:69:f9:c7:c7:9c:d5:9c:af:e3:ea:c2:89: 33:d5:f8:fe:22:7e:4f:28:47:48:5d:0f:53:87:33: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EA:4F:1F:39:45:8B:3F:0C:A9:8F:B1:7A:10:72:C1:56:A0:02:67 X509v3 Authority Key Identifier: keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:fa:bb:83:62:7f:03:8b:0c:f2:24:74:f0:db:13:b7:60: 09:0a:36:f8:47:81:c3:1a:f8:da:5e:d8:b8:c5:40:d4:e5:95: 14:df:db:b1:87:6d:de:1b:85:00:9c:60:f1:c8:97:60:dd:76: 2b:b7:6a:f3:b3:0e:1d:77:1c:b7:0c:9b:ce:7e:e5:2a:58:c6: e9:7a:12:0a:fd:c9:62:a0:00:47:51:7d:a2:c3:4d:45:73:2d: eb:a2:ae:3f:e0:06:52:2d:b8:29:ea:13:60:99:2a:2c:98:18: ff:21:d9:64:a9:a8:80:7f:c7:2b:9a:eb:b5:08:a3:95:da:03: 6c:fa:42:24:1b:05:41:f3:94:d1:81:c4:8b:20:24:a7:00:08: 39:06:42:ab:ea:8b:0b:ed:3d:e7:3d:91:a9:90:3b:0a:37:c8: 71:4f:5f:18:ed:5f:17:06:8d:36:ec:6c:37:d2:4d:40:12:07: 46:63:86:d7:b8:20:0c:89:f5:34:21:8e:71:af:38:b3:89:19: a5:0c:25:04:1c:51:93:f7:f8:16:55:16:2c:20:f4:6e:12:cb: d7:60:fa:46:84:5f:b2:c1:40:5e:dc:0b:f6:1a:9b:9d:72:5d: 14:b1:d7:08:3d:11:50:54:56:cc:a4:c8:5c:e4:3d:df:bc:43: f0:4e:6c:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDVBRkJCOUNCQkM2NTQ2QkQ1NTFEMTcyNjMwMTkwQUU4 MUE5QUYxMjcwHhcNMjYwNDA1MDcwMDE0WhcNMjYwNDEyMDcwMDE0WjAYMRYwFAYD VQQDEw02OWQyMDg3ZS0zZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBU7hZ6nBNNuz0B4749mrvXJfFigYVsmVzBdQ9bGkq/V7/gkBqAuDbjNEY3x UILGE1P45PGNQ1FfW2eR4Ql6ZLGtV0dEeWBeFKSVGohdkoJNv+FNef+xpml4qZpE W1ZJSZZfLoJtaIVNQRCTI6BXiI73syO89KiVV2Eq2wtcx65Pog31+lqDUcInR/i0 9ZH5eMg4lMjx+QAqHB7WRw9vStuU/1fie7wPrxx3quYG/ogVkvDRw0fkB4MyPUsh 6CdAGCL5BYUa2ZizNo0J8w+pIh4Ainzfa2CaGeJ+XMX/HDn4fapp+cfHnNWcr+Pq wokz1fj+In5PKEdIXQ9ThzOxowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADqTx85 RYs/DKmPsXoQcsFWoAJnMB8GA1UdIwQYMBaAFFr7ucu8ZUa9VR0XJjAZCugamvEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yQzk3MTRFRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9XdnU1eTd4bFJyMVZIUmNtTUJrSzZCcWE4 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d2dTV5N3hsUnIxVkhSY21NQmtLNkJxYThTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yQzk3MTRFRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9XdnU1eTd4bFJy MVZIUmNtTUJrSzZCcWE4U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUKL6u4NifwOLDPIkdPDbE7dgCQo2+EeBwxr42l7YuMVA1OWVFN/bsYdt3huF AJxg8ciXYN12K7dq87MOHXcctwybzn7lKljG6XoSCv3JYqAAR1F9osNNRXMt66Ku P+AGUi24KeoTYJkqLJgY/yHZZKmogH/HK5rrtQijldoDbPpCJBsFQfOU0YHEiyAk pwAIOQZCq+qLC+095z2RqZA7CjfIcU9fGO1fFwaNNuxsN9JNQBIHRmOG17ggDIn1 NCGOca84s4kZpQwlBBxRk/f4FlUWLCD0bhLL12D6RoRfssFAXtwL9hqbnXJdFLHX CD0RUFRWzKTIXOQ937xD8E5sRg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:04 2026 by rpki-client