$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: pAhkc1JtyyoPZED00o33A0MDrUupieUlB/YAD7G5vJ4= Subject key identifier: 7C:E4:26:7C:14:AA:7B:78:FC:AA:CC:E9:CF:09:65:B4:BE:22:8C:19 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 0AA3 Signing time: Sat 04 Apr 2026 19:19:28 +0000 Manifest this update: Sat 04 Apr 2026 19:19:27 +0000 Manifest next update: Sat 11 Apr 2026 19:19:27 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: YtZQrKn6L5qJ2Wfwom1GUWUJihJ1TVNYAz2mgL8+YGQ=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: blTR7FZGYhqfmkBDBSyb66ptUGt5kPtOu9kj+Uqu480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: Apr 4 19:19:27 2026 GMT Not After : Apr 11 19:19:27 2026 GMT Subject: CN=69d16440-acca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ac:5c:79:53:8b:7f:53:e6:2f:1b:cb:dd:19: 24:c0:bd:9a:a0:99:52:d0:92:8b:b1:9b:51:26:17: 17:51:db:5d:c1:6e:74:f6:c8:02:8e:e3:59:7e:8b: 3d:75:23:5a:d0:1b:74:83:fd:6e:e2:10:ed:32:3c: fa:08:1b:89:d1:e1:f6:4b:4e:9c:a2:5e:f9:bd:75: bd:e3:d4:14:c0:e1:99:5e:4b:53:51:fd:f7:87:ab: d6:7c:29:40:1d:ed:0d:5e:c3:c0:ec:a9:3f:d6:ea: e0:cc:fe:f9:ab:c1:d2:32:83:35:0a:4b:65:13:2b: 60:44:18:51:4b:01:a3:32:26:4b:30:49:79:1b:a9: 08:4e:9c:e8:3a:2e:bf:e9:98:71:4c:29:17:84:d2: 9d:2a:82:e9:55:42:ef:12:11:54:30:85:e3:e5:4c: 51:82:cb:36:6d:23:bc:6c:40:14:21:5d:81:0c:80: c6:6e:3a:90:9a:aa:94:e9:6f:5f:fc:b0:dd:25:cd: 71:a9:97:8c:6a:63:7b:4c:bc:35:5a:8e:92:a3:ac: e9:cc:32:73:ed:42:c5:b2:01:86:cb:ef:68:fa:57: 54:62:dc:2a:3b:c9:2a:d7:e2:f4:a5:ad:a7:86:66: 72:a3:b9:17:b0:d7:1f:3c:05:65:dd:ac:6f:61:e6: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E4:26:7C:14:AA:7B:78:FC:AA:CC:E9:CF:09:65:B4:BE:22:8C:19 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3e:9e:7f:53:cf:e1:ec:1a:e4:51:93:ec:88:f4:c7:37:2b: ef:f4:d9:f8:ec:62:ad:aa:d0:a4:45:4c:8e:01:d6:ac:23:47: 14:57:4d:92:a4:44:7e:0f:c0:a5:a6:10:f6:15:e7:2d:68:ba: ba:0d:ab:f0:48:e5:50:61:ac:7f:bb:eb:c8:bd:2a:31:93:32: 0c:69:0d:0d:db:cc:48:7e:0d:9a:32:83:04:9e:f8:0f:e1:59: 42:73:57:2e:20:7f:3e:83:99:42:5d:e2:b2:75:48:12:f4:19: 40:d2:dc:15:69:e8:a5:c3:5d:26:b5:52:57:f0:b8:a1:84:58: 7d:ac:eb:30:19:8b:e4:0a:41:d1:bf:ce:76:da:3d:4d:79:b1: 0d:14:04:6f:0a:bf:32:c0:d1:12:88:06:52:00:28:ee:02:cd: 61:01:dd:01:28:5b:59:d8:1a:f3:20:d5:ff:f4:f4:b5:24:86: 99:23:c6:6e:2a:08:cf:f1:5d:de:7c:84:e6:97:72:ee:e8:0c: d5:8c:01:d9:ed:05:0d:3d:b9:dd:d5:27:41:0b:8f:9c:55:c3: e1:a4:84:71:96:f7:a2:62:90:10:d1:b1:a9:b5:a2:ea:38:90: 75:e7:bc:a5:af:98:0e:e2:f2:be:83:ac:92:bc:2a:0c:48:22: 15:f8:1d:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjYwNDA0MTkxOTI3WhcNMjYwNDExMTkxOTI3WjAYMRYwFAYD VQQDEw02OWQxNjQ0MC1hY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhqxceVOLf1PmLxvL3RkkwL2aoJlS0JKLsZtRJhcXUdtdwW509sgCjuNZfos9 dSNa0Bt0g/1u4hDtMjz6CBuJ0eH2S06col75vXW949QUwOGZXktTUf33h6vWfClA He0NXsPA7Kk/1urgzP75q8HSMoM1CktlEytgRBhRSwGjMiZLMEl5G6kITpzoOi6/ 6ZhxTCkXhNKdKoLpVULvEhFUMIXj5UxRgss2bSO8bEAUIV2BDIDGbjqQmqqU6W9f /LDdJc1xqZeMamN7TLw1Wo6So6zpzDJz7ULFsgGGy+9o+ldUYtwqO8kq1+L0pa2n hmZyo7kXsNcfPAVl3axvYeZgxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzkJnwU qnt4/KrM6c8JZbS+IowZMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKz6ef1PP4ewa5FGT7Ij0xzcr7/TZ+OxirarQpEVMjgHWrCNHFFdNkqREfg/A paYQ9hXnLWi6ug2r8EjlUGGsf7vryL0qMZMyDGkNDdvMSH4NmjKDBJ74D+FZQnNX LiB/PoOZQl3isnVIEvQZQNLcFWnopcNdJrVSV/C4oYRYfazrMBmL5ApB0b/Odto9 TXmxDRQEbwq/MsDREogGUgAo7gLNYQHdAShbWdga8yDV//T0tSSGmSPGbioIz/Fd 3nyE5pdy7ugM1YwB2e0FDT253dUnQQuPnFXD4aSEcZb3omKQENGxqbWi6jiQdee8 pa+YDuLyvoOskrwqDEgiFfgdEA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:03 2026 by rpki-client