$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: wmMGjO3kCpRjVuLhqPhlSXNQJLVJLXocLqXs+I7g2SA= Subject key identifier: B3:84:93:68:62:9B:32:67:59:2C:42:29:81:1B:CE:3A:7B:69:FF:8D Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0DEA Signing time: Sat 04 Apr 2026 17:43:38 +0000 Manifest this update: Sat 04 Apr 2026 17:43:38 +0000 Manifest next update: Sat 11 Apr 2026 17:43:38 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: VHVMxryoMYXayHQdyAeUv0D644HAHH+RMYVlDprxemY=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: egC6j0/L+vNrahwqS7R8sgu3NxXeX9dmJPD7oQ0uOyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Apr 4 17:43:38 2026 GMT Not After : Apr 11 17:43:38 2026 GMT Subject: CN=69d14dca-dbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:56:eb:06:58:b7:27:f5:4f:3f:5f:fc:49: 36:ad:ed:a7:7b:fb:ce:4b:37:c1:4b:c1:2c:de:31: 12:30:86:15:5d:83:f8:64:b9:9b:e8:3e:f4:87:99: 3d:4a:19:6d:f2:34:d2:14:28:f3:c3:63:d2:45:3c: b6:7d:47:97:a2:6a:56:1c:73:6b:8e:7c:77:52:6a: 4f:8e:b8:32:2d:e7:d2:d0:cc:f7:1c:62:21:1b:bb: 82:7d:a8:52:ea:3f:b4:15:99:f4:a4:8f:49:64:c5: e4:4e:7a:63:bd:3f:04:e7:68:da:ef:80:d7:aa:cd: dd:96:d8:96:e9:b8:2d:37:ba:ae:02:41:ba:c4:42: fa:37:53:ae:3d:bb:7a:bb:44:45:a0:fd:58:19:22: a6:16:19:7e:8d:61:fd:24:7c:37:4f:d7:b9:a8:df: 12:92:8f:71:74:22:fa:f0:78:2a:8f:aa:4e:3d:fb: 11:df:0b:47:c8:50:6c:87:18:53:0d:93:07:5d:7e: 38:12:a2:c9:81:99:f5:63:d3:2c:d2:d0:46:5e:88: 04:cf:90:b4:cf:b9:56:d2:14:14:1a:f4:d9:d4:d4: fe:11:73:35:07:24:ed:69:c6:5e:eb:9e:7c:c1:d9: ce:fc:2f:2c:2b:12:3d:ab:7b:15:02:e9:ab:d9:5c: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:84:93:68:62:9B:32:67:59:2C:42:29:81:1B:CE:3A:7B:69:FF:8D X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c9:dc:f8:b4:e2:a1:52:00:2f:6d:0c:bd:a5:4b:1e:2b:35: 33:14:c8:ad:d7:44:e3:da:49:ca:65:18:e4:2c:39:58:be:e3: 8d:e4:3e:5f:0a:3a:b5:ea:31:a3:52:56:70:81:a3:d7:be:6f: 97:e1:96:3c:85:4a:d7:12:f8:d0:c2:17:0e:a9:cb:4b:5f:c3: c9:6f:99:b8:84:a9:f1:34:45:c9:53:7e:a8:05:4e:23:a8:bf: f4:23:dd:b2:fd:7f:11:e5:44:c1:12:75:90:17:c1:2e:9b:23: 44:00:2b:2b:20:07:dd:ed:1a:8e:cc:d1:3f:61:08:eb:9d:a8: 02:e0:28:0a:0f:47:c7:67:19:bc:86:23:66:26:0b:25:5b:66: 1e:40:33:bf:91:8b:02:e1:28:79:03:f8:a6:10:9f:96:48:c9: f9:be:7f:88:ad:85:96:05:df:65:d3:cf:9a:97:1a:b1:d3:c0: b8:a1:8c:a5:fc:82:be:05:9b:04:34:89:41:31:01:ef:43:c5: 72:8e:56:c9:0c:f0:63:90:fb:3f:99:44:e8:99:f1:07:3b:f7: e7:9a:5a:cf:59:54:46:e4:14:c8:2c:e8:b1:c4:0e:01:b0:d7: eb:6f:18:51:15:da:38:bd:89:02:5d:2a:dd:2e:4c:9b:f9:86: 84:2c:ee:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjYwNDA0MTc0MzM4WhcNMjYwNDExMTc0MzM4WjAYMRYwFAYD VQQDEw02OWQxNGRjYS1kYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD1W6wZYtyf1Tz9f/Ek2re2ne/vOSzfBS8Es3jESMIYVXYP4ZLmb6D70h5k9 Shlt8jTSFCjzw2PSRTy2fUeXompWHHNrjnx3UmpPjrgyLefS0Mz3HGIhG7uCfahS 6j+0FZn0pI9JZMXkTnpjvT8E52ja74DXqs3dltiW6bgtN7quAkG6xEL6N1OuPbt6 u0RFoP1YGSKmFhl+jWH9JHw3T9e5qN8Sko9xdCL68Hgqj6pOPfsR3wtHyFBshxhT DZMHXX44EqLJgZn1Y9Ms0tBGXogEz5C0z7lW0hQUGvTZ1NT+EXM1ByTtacZe6558 wdnO/C8sKxI9q3sVAumr2Vw/IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOEk2hi mzJnWSxCKYEbzjp7af+NMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8nc+LTioVIAL20MvaVLHis1MxTIrddE49pJymUY5Cw5WL7jjeQ+Xwo6teox o1JWcIGj175vl+GWPIVK1xL40MIXDqnLS1/DyW+ZuISp8TRFyVN+qAVOI6i/9CPd sv1/EeVEwRJ1kBfBLpsjRAArKyAH3e0ajszRP2EI652oAuAoCg9Hx2cZvIYjZiYL JVtmHkAzv5GLAuEoeQP4phCflkjJ+b5/iK2FlgXfZdPPmpcasdPAuKGMpfyCvgWb BDSJQTEB70PFco5WyQzwY5D7P5lE6JnxBzv355paz1lURuQUyCzoscQOAbDX628Y URXaOL2JAl0q3S5Mm/mGhCzuqQ== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:52 2026 by rpki-client