$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: OOcwppnS8ulma86Vd+SYXpCBQ+/6FGG5mBeu4xRQOB0= Subject key identifier: E9:5D:36:F5:B5:7D:79:B1:DE:CA:BB:60:5E:27:21:3B:13:CD:E4:BB Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 3527 Signing time: Sat 04 Apr 2026 15:03:22 +0000 Manifest this update: Sat 04 Apr 2026 15:03:21 +0000 Manifest next update: Sat 11 Apr 2026 15:03:21 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: CEq565z+dtf9ZeVO71gqHD2tWo2oks+sE/qosF1S8TA=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: zBVuWCHc4lzO9QNlV2GGFOrIuW/CBB9gjpbg2O07Y+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: Apr 4 15:03:21 2026 GMT Not After : Apr 11 15:03:21 2026 GMT Subject: CN=69d1283a-54b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:f3:40:00:c6:eb:7c:9f:fb:cb:70:8f:6e: 6d:1d:bc:3a:e2:c9:80:df:1d:7b:08:89:52:10:a6: a4:e6:51:c5:d3:02:00:26:42:54:62:fe:27:8a:53: 22:7b:ef:71:1d:be:76:4e:aa:99:bd:c8:ed:f5:02: aa:3b:07:88:80:17:42:b1:5e:fe:2b:c2:f7:e7:89: 46:89:95:32:9a:96:72:b4:96:b9:67:ef:a5:d8:9f: b1:cf:0d:5b:39:ed:88:ed:d7:c7:08:06:c7:13:39: 5c:05:78:89:df:1b:8d:ba:8d:d4:57:8b:32:11:ab: 46:56:15:5e:ad:0a:45:33:09:18:df:4f:5d:7c:58: 12:f0:9f:ab:f9:4d:fd:c6:3c:8e:aa:64:aa:32:b2: ad:89:65:4a:b1:83:5c:e4:06:05:e8:5e:85:8e:a8: 2c:6e:b6:dc:fa:71:81:7b:2f:14:b8:8d:33:cf:e2: ad:0e:ac:7f:73:16:c3:dd:de:33:5d:2b:24:4a:58: 9d:f5:9c:0a:22:2f:c0:e4:24:da:ba:60:5d:0d:c5: b1:73:11:11:bf:33:10:32:0f:2a:c3:70:85:db:e4: da:8e:a9:a9:b7:60:ca:b8:2e:1e:c7:d5:e6:55:dc: d4:f3:9a:2b:07:dd:5c:99:24:e2:12:6a:04:d5:b8: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5D:36:F5:B5:7D:79:B1:DE:CA:BB:60:5E:27:21:3B:13:CD:E4:BB X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1b:c0:7d:64:3a:b5:a1:9e:c1:94:fe:46:75:e3:ff:d8:c6: dc:45:7e:a7:c4:fd:75:fe:3c:c4:e7:28:17:57:62:68:6a:65: 8c:0e:1f:59:81:bf:63:d7:a3:6c:2f:fc:ef:2c:7f:21:a4:62: 77:15:45:b5:4c:17:a7:7b:4f:9f:73:28:de:ba:d9:b9:60:40: 7a:7e:c6:33:ab:cc:c9:1d:4e:aa:d1:23:bc:f3:27:70:f9:c2: 2d:67:67:5d:76:3e:27:78:fc:e7:c0:5d:bf:b3:60:fe:bd:4a: 58:4b:0f:2b:17:54:cf:fc:be:a2:e4:b4:8d:34:be:7c:7c:15: 81:cc:fb:fb:5a:6b:4d:d2:6f:18:8e:e3:32:aa:65:d4:04:41: 93:16:99:56:6b:65:2d:16:49:4d:de:79:1f:ea:eb:52:92:2c: 76:1e:70:12:55:7d:36:30:ba:f3:7d:eb:fe:1a:bc:38:57:13: 65:6d:be:ea:45:31:9d:b0:8c:23:c9:a9:a3:1b:ae:0d:3e:9f: 25:f5:d2:88:cc:61:52:d0:4d:7c:f6:dc:5e:2c:ce:0c:10:2a: c4:72:0b:a7:9a:f9:a7:b5:d3:ef:c0:29:f6:f0:29:af:db:b4: d9:92:12:1c:87:e7:d3:34:00:ca:ea:bb:31:3b:d7:0c:d6:97: 77:ad:53:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjYwNDA0MTUwMzIxWhcNMjYwNDExMTUwMzIxWjAYMRYwFAYD VQQDEw02OWQxMjgzYS01NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHbzQADG63yf+8twj25tHbw64smA3x17CIlSEKak5lHF0wIAJkJUYv4nilMi e+9xHb52TqqZvcjt9QKqOweIgBdCsV7+K8L354lGiZUympZytJa5Z++l2J+xzw1b Oe2I7dfHCAbHEzlcBXiJ3xuNuo3UV4syEatGVhVerQpFMwkY309dfFgS8J+r+U39 xjyOqmSqMrKtiWVKsYNc5AYF6F6Fjqgsbrbc+nGBey8UuI0zz+KtDqx/cxbD3d4z XSskSlid9ZwKIi/A5CTaumBdDcWxcxERvzMQMg8qw3CF2+Tajqmpt2DKuC4ex9Xm VdzU85orB91cmSTiEmoE1bjEDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOldNvW1 fXmx3sq7YF4nITsTzeS7MB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApRvAfWQ6taGewZT+RnXj/9jG3EV+p8T9df48xOcoF1diaGpljA4fWYG/Y9ej bC/87yx/IaRidxVFtUwXp3tPn3Mo3rrZuWBAen7GM6vMyR1OqtEjvPMncPnCLWdn XXY+J3j858Bdv7Ng/r1KWEsPKxdUz/y+ouS0jTS+fHwVgcz7+1prTdJvGI7jMqpl 1ARBkxaZVmtlLRZJTd55H+rrUpIsdh5wElV9NjC6833r/hq8OFcTZW2+6kUxnbCM I8mpoxuuDT6fJfXSiMxhUtBNfPbcXizODBAqxHILp5r5p7XT78Ap9vApr9u02ZIS HIfn0zQAyuq7MTvXDNaXd61Tqw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:47:12 2026 by rpki-client