$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: jON6tNYDOcJoB1Z5rHfkL79BD4RYLdzA4S1xyxtehWA= Subject key identifier: 1A:78:63:22:48:08:09:10:D6:2A:D6:CC:2B:94:08:43:ED:AB:4D:56 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 01DA Signing time: Sun 05 Apr 2026 03:00:44 +0000 Manifest this update: Sun 05 Apr 2026 03:00:43 +0000 Manifest next update: Sun 12 Apr 2026 03:00:43 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: FknZC1GXK1rujTl41y22t3mJZvFB+m80ivR2BXzKv/4=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: H4qSPCS4a424OujhWGbHGAYZCjn8O2kfiMo1t1dyle0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Apr 5 03:00:43 2026 GMT Not After : Apr 12 03:00:43 2026 GMT Subject: CN=69d1d05c-be9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:f1:84:47:c6:70:1e:3b:5f:10:8f:d2:65: a7:59:d9:77:ce:40:86:7c:01:8e:9a:ef:62:bc:a9: 8a:dc:5f:91:14:a9:f9:5d:e2:45:89:d6:91:a7:39: ce:58:ae:b6:0a:78:a1:98:e7:82:2c:7b:e4:f3:4c: 4c:13:51:1a:04:f6:1f:95:4a:ca:18:a6:fa:2d:29: 1a:b5:19:97:5a:9b:a8:70:f8:00:a1:0c:46:72:de: 0c:06:75:8e:9e:26:1c:11:23:01:80:54:40:19:e9: 9d:25:bc:dd:f9:d8:78:ad:12:5b:a2:32:e4:52:fd: 8a:6c:be:48:3d:21:3f:07:84:75:ed:16:4b:62:f0: fd:44:16:2f:d5:d4:6f:27:93:b8:ba:86:d5:8f:05: fd:6f:c6:d0:4d:31:f1:a1:9d:4e:92:16:6b:d4:cd: b3:f4:d0:7c:9c:81:d9:d1:26:fb:8a:51:50:70:87: 27:78:53:52:23:ce:90:e2:2e:1f:8a:39:8a:65:75: a3:d6:04:2b:90:af:a8:77:9e:2b:f2:ca:c9:0a:93: e6:4c:29:f4:f7:90:f7:85:ce:2d:e1:f4:fc:91:b8: 49:a1:6d:c3:7e:4b:5f:ca:ea:b2:5c:8a:a2:70:4d: 48:78:21:de:1b:14:a3:4c:39:d2:9d:d6:f4:b2:f3: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:63:22:48:08:09:10:D6:2A:D6:CC:2B:94:08:43:ED:AB:4D:56 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b7:29:6a:e2:a2:b1:dc:c2:04:2a:f7:17:32:29:ea:0c:cf: 14:49:26:cd:08:61:9f:e8:38:6b:b2:fd:ab:61:82:5f:a7:52: 01:db:3b:a8:6e:8c:4d:3d:c3:bd:c0:a9:56:33:34:df:f7:21: 29:b4:b5:34:b5:f0:20:de:76:fd:42:39:42:ff:30:17:3f:a3: a9:91:ab:0a:66:fd:d3:0b:ba:ec:8b:ad:21:0c:b4:2b:dd:2b: 11:ae:1c:39:81:80:f8:2b:92:32:97:f6:fd:57:90:de:a9:a1: dc:a2:d3:9e:be:1c:de:46:54:fb:2c:6c:6a:78:81:c2:7c:49: 28:9b:22:84:97:98:58:bb:d4:e0:d4:bc:b8:29:cc:78:77:75: 60:41:ff:af:79:36:55:0c:86:fb:b5:18:42:11:9e:26:03:17: 2e:2b:1c:9e:9f:a2:1a:d8:5d:eb:0c:f2:e9:46:cb:fa:98:96: 54:80:40:5b:b4:7b:01:a3:77:02:3d:24:87:43:a1:62:e0:a4: 52:33:91:a9:ba:7d:2a:2e:85:f8:b3:e0:2c:f5:1b:09:ff:db: 8d:d2:7a:98:2c:81:88:99:84:83:97:7d:6d:80:73:76:59:53: 01:4a:c7:55:e9:75:e5:b2:c0:96:c8:54:65:ad:b2:2a:6c:52: a8:45:d2:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjYwNDA1MDMwMDQzWhcNMjYwNDEyMDMwMDQzWjAYMRYwFAYD VQQDEw02OWQxZDA1Yy1iZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkQvxhEfGcB47XxCP0mWnWdl3zkCGfAGOmu9ivKmK3F+RFKn5XeJFidaRpznO WK62CnihmOeCLHvk80xME1EaBPYflUrKGKb6LSkatRmXWpuocPgAoQxGct4MBnWO niYcESMBgFRAGemdJbzd+dh4rRJbojLkUv2KbL5IPSE/B4R17RZLYvD9RBYv1dRv J5O4uobVjwX9b8bQTTHxoZ1OkhZr1M2z9NB8nIHZ0Sb7ilFQcIcneFNSI86Q4i4f ijmKZXWj1gQrkK+od54r8srJCpPmTCn095D3hc4t4fT8kbhJoW3DfktfyuqyXIqi cE1IeCHeGxSjTDnSndb0svNJ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBp4YyJI CAkQ1irWzCuUCEPtq01WMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7cpauKisdzCBCr3FzIp6gzPFEkmzQhhn+g4a7L9q2GCX6dSAds7qG6MTT3D vcCpVjM03/chKbS1NLXwIN52/UI5Qv8wFz+jqZGrCmb90wu67IutIQy0K90rEa4c OYGA+CuSMpf2/VeQ3qmh3KLTnr4c3kZU+yxsaniBwnxJKJsihJeYWLvU4NS8uCnM eHd1YEH/r3k2VQyG+7UYQhGeJgMXLiscnp+iGthd6wzy6UbL+piWVIBAW7R7AaN3 Aj0kh0OhYuCkUjORqbp9Ki6F+LPgLPUbCf/bjdJ6mCyBiJmEg5d9bYBzdllTAUrH Vel15bLAlshUZa2yKmxSqEXSfQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:12 2026 by rpki-client