$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft File: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json) Hash identifier: wxKoOUECOdy8IXfqdd1x+RJMslJaxU41DK+1YVWsTW8= Subject key identifier: BC:8E:80:7B:36:0C:67:5A:A9:F8:E7:DB:F3:6A:42:53:29:92:62:0A Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54 Certificate issuer: /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft Manifest number: 4A Signing time: Sun 05 Apr 2026 07:39:17 +0000 Manifest this update: Sun 05 Apr 2026 07:39:17 +0000 Manifest next update: Sun 12 Apr 2026 07:39:17 +0000 Files and hashes: 1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: 1+X9p9NIeaC58a0MNUJedQ4+/LC9gwADG//ewjC8jT8=) 2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54 Validity Not Before: Apr 5 07:39:17 2026 GMT Not After : Apr 12 07:39:17 2026 GMT Subject: CN=69d211a5-0848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:fb:11:a4:90:8b:68:2d:54:74:3c:95:ad: be:0c:bd:68:fa:c6:f4:e8:fa:e4:13:69:fd:d5:28: ea:44:88:c0:0c:91:ba:07:31:e2:0a:f6:82:7a:f0: dd:39:8b:0e:ba:c0:c9:6e:4d:52:1b:40:a6:aa:27: 8a:73:a9:27:6c:e9:37:76:a4:60:a2:71:ae:68:ba: 92:73:22:01:c7:d7:87:05:3b:84:38:47:ee:0f:bd: bf:85:11:c7:e2:59:f0:2a:5a:9f:01:9e:d1:91:90: 21:01:49:e4:3e:96:ee:f7:55:5f:d3:e1:2d:15:09: 4a:18:60:df:73:20:bf:70:28:68:4d:38:d9:a5:e7: b3:63:68:85:48:d1:d4:ba:f9:69:a0:bd:44:3a:a4: da:84:3d:d1:01:3e:a2:5e:52:7e:14:79:6c:b8:7b: b3:aa:6c:16:23:1e:2c:45:d5:bb:00:0f:6d:4a:c1: eb:7c:9e:2a:c7:bf:f5:06:dc:62:20:3a:2a:74:d5: 01:12:d5:83:e5:38:a0:8d:0f:61:2e:97:d5:30:77: 0e:8a:a9:0e:d1:c0:89:98:d2:99:42:15:d7:1c:85: d1:8a:2d:6d:2a:92:d6:c2:ea:e1:1d:c6:4b:e5:a0: 20:1a:bd:74:e5:64:ee:c8:f7:c9:d5:f5:3f:7a:ec: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8E:80:7B:36:0C:67:5A:A9:F8:E7:DB:F3:6A:42:53:29:92:62:0A X509v3 Authority Key Identifier: keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f0:ef:32:84:b2:32:a8:39:61:00:08:c5:be:fd:13:b1:b7: 4f:36:0d:fe:72:0e:9c:b1:bf:0c:bf:77:fa:83:21:55:dd:e6: 25:94:3a:b5:8e:48:69:5a:d9:62:5b:5e:5b:81:a1:94:58:d5: 4c:30:66:6b:e5:44:ca:75:b8:1f:cb:06:27:f1:0d:66:1a:18: 11:ff:00:ef:34:95:1c:ba:66:5a:ac:d9:af:0d:4c:da:b3:5a: 4c:0d:52:8b:26:0b:b9:f2:52:43:0e:67:aa:34:c8:f1:97:e8: 0d:17:fc:c5:ec:7e:44:e5:b8:28:4c:bc:5e:e5:3e:95:05:17: c8:f1:3e:50:72:d3:86:39:e8:c8:6f:f5:c7:fe:ae:b9:42:ec: 42:9a:f3:b9:03:e4:24:bd:3a:a3:74:ba:3e:15:c4:d1:e2:45: 14:c5:88:58:27:3f:a2:2d:d1:56:07:41:fc:17:bc:e2:28:8e: 17:45:9c:dd:7b:81:35:ae:d2:c1:b7:a4:1e:40:60:28:63:8b: c5:fb:35:85:da:84:72:63:60:9e:a8:d3:d9:f1:ef:4c:48:8e: a6:56:ce:43:ea:5b:b0:86:d8:d6:d9:6e:d7:5c:bd:fc:59:c0: 5d:e0:49:25:c5:47:78:e3:38:2e:09:79:98:f1:b7:8b:8b:af: 28:3f:37:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTJCNTExMC8GA1UEBRMoRUQyM0E4RTg5RTU2QkNCREExQzAwRTQ5N0M0ODgzRDc5 NUU1MkQ1NDAeFw0yNjA0MDUwNzM5MTdaFw0yNjA0MTIwNzM5MTdaMBgxFjAUBgNV BAMTDTY5ZDIxMWE1LTA4NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3u/sRpJCLaC1UdDyVrb4MvWj6xvTo+uQTaf3VKOpEiMAMkboHMeIK9oJ68N05 iw66wMluTVIbQKaqJ4pzqSds6Td2pGCica5oupJzIgHH14cFO4Q4R+4Pvb+FEcfi WfAqWp8BntGRkCEBSeQ+lu73VV/T4S0VCUoYYN9zIL9wKGhNONml57NjaIVI0dS6 +WmgvUQ6pNqEPdEBPqJeUn4UeWy4e7OqbBYjHixF1bsAD21Kwet8nirHv/UG3GIg Oip01QES1YPlOKCND2Eul9Uwdw6KqQ7RwImY0plCFdcchdGKLW0qktbC6uEdxkvl oCAavXTlZO7I98nV9T967C13AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvI6AezYM Z1qp+Ofb82pCUymSYgowHwYDVR0jBBgwFoAU7SOo6J5WvL2hwA5JfEiD15XlLVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MkI1LzZGRkI2MjRBQzVC MjExRjA5NEEwNzkyQkM0RjlBRTAyLzdTT282SjVXdkwyaHdBNUpmRWlEMTVYbExW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1NPbzZKNVd2TDJod0E1SmZFaUQxNVhsTFZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MkI1LzZGRkI2MjRBQzVCMjExRjA5NEEwNzkyQkM0RjlBRTAyLzdTT282SjVXdkwy aHdBNUpmRWlEMTVYbExWUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCI8O8yhLIyqDlhAAjFvv0TsbdPNg3+cg6csb8Mv3f6gyFV3eYllDq1jkhpWtli W15bgaGUWNVMMGZr5UTKdbgfywYn8Q1mGhgR/wDvNJUcumZarNmvDUzas1pMDVKL Jgu58lJDDmeqNMjxl+gNF/zF7H5E5bgoTLxe5T6VBRfI8T5QctOGOejIb/XH/q65 QuxCmvO5A+QkvTqjdLo+FcTR4kUUxYhYJz+iLdFWB0H8F7ziKI4XRZzde4E1rtLB t6QeQGAoY4vF+zWF2oRyY2CeqNPZ8e9MSI6mVs5D6luwhtjW2W7XXL38WcBd4Ekl xUd44zguCXmY8beLi68oPzeY -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:48 2026 by rpki-client