$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: DQqzEgX176Pws6qMoZ/sn/Dk7BbuGboGbdPlG5UlQmY= Subject key identifier: E5:7E:FC:7F:19:AA:89:42:96:F4:7F:EF:0F:A8:02:2A:C3:8E:D3:3D Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0F70 Signing time: Sat 04 Apr 2026 17:25:55 +0000 Manifest this update: Sat 04 Apr 2026 17:25:55 +0000 Manifest next update: Sat 11 Apr 2026 17:25:55 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: jzSUcZaVTAgBLtWXGtN5ZQhP8YCYXyVGMYEgBk2MhBk=) 2: 64554290C9F611ED9853C583C4F9AE02.roa (hash: agpfPSJGjVQ5csFAXUqTBwmD9lbAU8gkO4ush2slIeA=) 3: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: mUPMtWwzY3i1DNxfpfsJiEN2KmimOV1tl1pdhwHNds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Apr 4 17:25:55 2026 GMT Not After : Apr 11 17:25:55 2026 GMT Subject: CN=69d149a3-5840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:6d:7d:97:7e:e3:34:97:66:0a:14:42:f5: 2c:81:df:67:e2:c3:5c:a0:9d:3f:45:66:4a:9b:38: c7:a3:85:d1:c7:07:c9:b1:3a:0f:4c:56:95:f5:da: c5:37:5f:75:33:99:90:37:d5:df:5e:04:a2:3c:b5: 27:04:a6:f5:48:4d:62:69:6c:a6:4a:1f:ef:5d:51: 19:d1:67:1f:77:cc:bb:be:b8:59:4f:b8:ae:d5:40: 51:f9:1a:c3:70:d1:fa:0f:cf:b9:d1:0e:57:5f:31: d2:6a:01:0c:1f:78:63:75:2e:83:fa:f5:75:0c:64: f9:c5:e7:c8:96:73:62:bc:e2:ab:a5:22:76:f9:0d: 85:c2:c2:07:16:87:b0:ac:7f:99:cf:6e:82:a6:29: 39:5a:7c:66:76:cb:71:4f:92:67:77:54:57:9b:32: 27:1d:e7:04:04:18:73:9f:24:84:e4:3d:6b:b8:db: 31:db:27:54:ef:83:7b:86:40:fa:40:c0:03:51:44: 7c:55:e5:d7:79:46:b0:ae:7c:e3:55:5f:20:d5:10: d9:b8:98:cc:70:c9:3c:23:1a:80:6a:94:e9:ff:c3: 53:90:0b:ab:64:6d:05:cf:fe:65:16:e8:eb:7e:47: 5e:b6:b1:05:ff:41:36:a4:46:b5:f9:70:f6:0b:25: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7E:FC:7F:19:AA:89:42:96:F4:7F:EF:0F:A8:02:2A:C3:8E:D3:3D X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fc:0e:2e:1e:bb:29:89:24:e2:2d:44:ef:55:d4:40:5c:ec: b4:d7:0b:59:86:bd:e6:44:3e:a1:de:5f:32:ad:aa:b1:02:87: 5d:55:49:c2:0a:a6:0e:27:05:30:1b:14:de:07:61:ba:66:83: 8b:65:52:26:d0:a0:e4:b0:6e:84:58:32:fa:20:94:55:24:fe: 97:fc:c5:b3:f0:15:bb:ed:81:86:90:78:52:74:42:2c:f6:d1: cf:66:e1:9b:32:f6:91:56:57:d8:26:c9:5a:56:a9:97:2e:a2: 4b:0b:4e:40:04:99:5c:ff:49:20:10:b8:a5:f3:22:a6:be:17: 11:a9:93:3c:68:55:ad:ec:a4:a7:29:df:cf:50:fa:ec:42:be: 49:8a:dc:d3:e2:40:a7:d7:12:2c:08:82:2f:87:ba:f3:75:08: 0a:ef:1c:87:bd:64:c6:a6:3a:a0:11:e6:9f:eb:4f:6e:1e:b7: 20:5f:88:82:50:44:4c:e5:80:56:32:d0:fd:80:8d:d3:d4:ba: 11:a6:6f:cf:c5:05:ed:f7:4c:50:ac:ee:6e:8f:d5:fd:cd:40: e4:f3:05:f6:a3:05:db:b5:b4:64:3b:14:d1:f4:6d:28:e8:5c: 2d:0b:d6:20:f2:a1:c7:04:e1:b1:33:c5:d2:76:97:88:9b:c7: 05:42:26:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjYwNDA0MTcyNTU1WhcNMjYwNDExMTcyNTU1WjAYMRYwFAYD VQQDEw02OWQxNDlhMy01ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCRtfZd+4zSXZgoUQvUsgd9n4sNcoJ0/RWZKmzjHo4XRxwfJsToPTFaV9drF N191M5mQN9XfXgSiPLUnBKb1SE1iaWymSh/vXVEZ0Wcfd8y7vrhZT7iu1UBR+RrD cNH6D8+50Q5XXzHSagEMH3hjdS6D+vV1DGT5xefIlnNivOKrpSJ2+Q2FwsIHFoew rH+Zz26Cpik5WnxmdstxT5Jnd1RXmzInHecEBBhznySE5D1ruNsx2ydU74N7hkD6 QMADUUR8VeXXeUawrnzjVV8g1RDZuJjMcMk8IxqAapTp/8NTkAurZG0Fz/5lFujr fkdetrEF/0E2pEa1+XD2CyWfAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOV+/H8Z qolClvR/7w+oAirDjtM9MB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkfwOLh67KYkk4i1E71XUQFzstNcLWYa95kQ+od5fMq2qsQKHXVVJwgqmDicF MBsU3gdhumaDi2VSJtCg5LBuhFgy+iCUVST+l/zFs/AVu+2BhpB4UnRCLPbRz2bh mzL2kVZX2CbJWlaply6iSwtOQASZXP9JIBC4pfMipr4XEamTPGhVreykpynfz1D6 7EK+SYrc0+JAp9cSLAiCL4e683UICu8ch71kxqY6oBHmn+tPbh63IF+IglBETOWA VjLQ/YCN09S6EaZvz8UF7fdMUKzubo/V/c1A5PMF9qMF27W0ZDsU0fRtKOhcLQvW IPKhxwThsTPF0naXiJvHBUIm8g== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:33 2026 by rpki-client