$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: OdCGWRW6cuziFMJER2aXPMJMfZfjZYdd3479Amk5Ofg= Subject key identifier: E1:D7:A6:65:E9:B8:4E:A8:4C:27:6B:BB:AA:99:AC:E4:43:0F:12:62 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 0242 Signing time: Sun 05 Apr 2026 01:59:55 +0000 Manifest this update: Sun 05 Apr 2026 01:59:54 +0000 Manifest next update: Sun 12 Apr 2026 01:59:54 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: HiW4yQQxSLTrjawLhQJOmty+AUBPMwyzhIW7qF2SqKo=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: xa2rzU8DhuvzABu0PhpiCxb/OU68RG+lrUJHazRYpJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Apr 5 01:59:54 2026 GMT Not After : Apr 12 01:59:54 2026 GMT Subject: CN=69d1c21b-9b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:1e:20:2e:ea:73:db:91:e8:23:4f:34:4a: 7f:65:24:52:1a:d8:41:96:d8:26:b3:92:e0:fd:b6: fa:27:d4:97:cc:a9:fe:1f:5c:57:81:06:67:7d:d9: 37:02:1c:0a:74:0c:05:74:8a:3f:ea:e2:8c:c9:57: 7c:5e:32:7b:c8:5e:ca:26:ac:a8:4e:83:da:36:bf: 49:dd:2a:2d:30:6e:65:d5:44:04:6e:a4:f7:fb:e1: 6e:89:20:23:ea:1a:2b:5b:e7:b2:26:61:51:fc:12: 75:fe:5d:40:23:60:e4:7d:a7:b2:95:83:f4:9f:ea: 8f:fc:2a:09:ac:6b:7a:24:a1:e2:48:1f:eb:89:8d: 3d:3e:82:f7:49:96:e6:69:66:d6:e9:ac:bb:00:64: 70:af:46:63:69:5f:bd:72:6c:b5:48:9e:7d:f8:c9: c1:ec:77:2c:fb:e1:e9:8e:01:9c:7f:34:55:be:ad: bd:dc:43:5a:fc:ca:5b:8c:23:d5:4c:90:0d:67:c0: 8a:3a:c1:db:f9:bd:09:b8:ff:b6:df:33:e7:eb:8e: 10:29:f5:ef:34:79:37:5a:66:33:93:da:ca:06:95: e6:31:71:1f:79:f3:6b:d4:bd:53:6a:13:9e:b7:3a: ff:62:11:fb:9f:de:cd:c0:20:2a:68:8b:a1:5a:2f: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D7:A6:65:E9:B8:4E:A8:4C:27:6B:BB:AA:99:AC:E4:43:0F:12:62 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:d7:c9:79:1a:a3:37:ed:db:b6:e1:9d:9b:8e:7a:59:db: 22:42:dc:49:e4:19:ce:87:1d:85:d5:29:0d:14:91:7f:b7:c2: 36:1b:d5:13:64:68:5e:1d:7c:93:61:1d:1b:ff:ad:3d:40:74: 85:78:d0:c4:52:96:42:1d:65:45:b4:23:d6:8c:9b:bd:32:08: b2:a6:15:1d:59:61:dc:aa:c1:85:fc:0d:86:a6:44:65:7b:db: 6a:26:ae:82:1f:f3:5b:1e:07:20:25:70:6e:95:1c:23:e1:e7: c7:53:b9:74:1f:37:95:5f:1c:16:84:54:23:21:db:23:3f:2a: 2d:d6:bc:c9:fd:67:e5:ed:1f:38:ce:72:22:df:4c:2f:48:fc: 63:9e:84:58:59:fe:36:ec:6c:d2:5e:fe:02:5b:52:d6:de:81: 32:f9:3d:da:54:69:c1:26:48:cd:2d:ed:5e:62:7a:0e:2c:79: 09:7a:7a:6d:e6:61:0f:8f:53:65:5b:f6:50:80:30:83:04:96: 7e:06:76:d3:f3:9f:5c:e5:99:a1:38:48:05:90:0e:ab:af:eb: 5b:1d:16:9e:89:19:75:03:a0:11:e6:c0:6b:88:60:94:b2:68: b9:59:50:52:0e:13:1f:06:cc:0e:e6:7a:de:7c:d5:c1:34:5c: a8:60:87:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjYwNDA1MDE1OTU0WhcNMjYwNDEyMDE1OTU0WjAYMRYwFAYD VQQDEw02OWQxYzIxYi05YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qEeIC7qc9uR6CNPNEp/ZSRSGthBltgms5Lg/bb6J9SXzKn+H1xXgQZnfdk3 AhwKdAwFdIo/6uKMyVd8XjJ7yF7KJqyoToPaNr9J3SotMG5l1UQEbqT3++FuiSAj 6horW+eyJmFR/BJ1/l1AI2DkfaeylYP0n+qP/CoJrGt6JKHiSB/riY09PoL3SZbm aWbW6ay7AGRwr0ZjaV+9cmy1SJ59+MnB7Hcs++HpjgGcfzRVvq293ENa/MpbjCPV TJANZ8CKOsHb+b0JuP+23zPn644QKfXvNHk3WmYzk9rKBpXmMXEfefNr1L1TahOe tzr/YhH7n97NwCAqaIuhWi/ybQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHXpmXp uE6oTCdru6qZrORDDxJiMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZkfXyXkaozft27bhnZuOelnbIkLcSeQZzocdhdUpDRSRf7fCNhvVE2RoXh18 k2EdG/+tPUB0hXjQxFKWQh1lRbQj1oybvTIIsqYVHVlh3KrBhfwNhqZEZXvbaiau gh/zWx4HICVwbpUcI+Hnx1O5dB83lV8cFoRUIyHbIz8qLda8yf1n5e0fOM5yIt9M L0j8Y56EWFn+Nuxs0l7+AltS1t6BMvk92lRpwSZIzS3tXmJ6Dix5CXp6beZhD49T ZVv2UIAwgwSWfgZ20/OfXOWZoThIBZAOq6/rWx0WnokZdQOgEebAa4hglLJouVlQ Ug4THwbMDuZ63nzVwTRcqGCHGw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:07 2026 by rpki-client