$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: XpqtX11+wlew2nqunrGU1lXLhpcg0qoRq2XcOt73XL8= Subject key identifier: 55:30:C2:57:16:ED:11:42:C5:AE:7C:F6:DD:A7:85:44:BC:38:99:C4 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 05B4 Signing time: Sat 04 Apr 2026 22:56:16 +0000 Manifest this update: Sat 04 Apr 2026 22:56:16 +0000 Manifest next update: Sat 11 Apr 2026 22:56:16 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: dmSEo8Q8Za1XauazE2rVpX0E0tYkAfuWqLR10fkE1KY=) 2: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=) 3: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Apr 4 22:56:16 2026 GMT Not After : Apr 11 22:56:16 2026 GMT Subject: CN=69d19710-ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:6e:9e:1a:f2:3f:ef:03:a7:58:41:be:42: e7:42:11:aa:54:7e:e6:a3:39:a4:01:35:80:ec:03: a3:61:09:87:d7:4c:4d:e0:eb:9d:fa:1d:c5:41:f7: 4e:98:27:00:16:16:a0:e8:c9:6f:6d:ff:8d:e5:b2: 23:ff:e3:68:eb:d2:4c:4e:39:98:5f:7b:db:f6:73: 47:2a:91:6a:53:4f:53:9a:78:94:8d:3d:5f:87:e8: 8c:6f:c7:7b:be:e5:5e:54:44:fa:38:5e:74:3d:e8: da:aa:e4:e3:af:4d:bf:19:f9:a2:f1:10:ce:bc:e2: cb:87:d7:13:55:5b:c6:86:60:8f:0e:d7:13:cc:bf: 55:ac:0c:ed:26:93:5f:81:12:53:cc:95:13:1c:d3: 8a:9b:55:dc:0b:65:04:5b:5f:03:65:43:d0:13:28: af:92:bf:01:9a:34:04:a9:72:05:3f:73:cd:4a:6c: 09:ca:cb:e4:f6:4f:9b:3a:a9:e9:b4:24:28:0a:c7: 3f:53:4a:62:e2:e9:db:19:c3:f3:e0:29:65:5d:87: 0e:9d:a7:f8:18:4f:02:2e:df:3a:3a:f3:82:da:b3: 49:f0:b2:37:91:65:ba:57:f0:ff:f5:73:07:3f:18: e2:ae:c9:3f:71:96:7c:da:90:dd:6b:34:a7:70:25: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:30:C2:57:16:ED:11:42:C5:AE:7C:F6:DD:A7:85:44:BC:38:99:C4 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:de:7f:d2:12:10:14:7c:97:50:5f:f6:72:42:da:49:f7:2c: 61:bb:91:21:95:07:b5:c8:ec:23:23:93:bb:6e:35:9b:ae:b1: 84:cd:0c:f0:57:d4:c7:45:ad:2d:49:84:c2:4b:d0:27:c2:15: 5d:58:08:aa:d8:7c:bd:03:ab:51:7f:a3:e9:9c:00:1a:33:23: 00:a0:82:22:90:45:7c:d1:8b:cd:53:41:cc:b8:25:0d:bf:dd: b9:e0:2b:66:83:1c:53:99:42:bf:88:1c:47:6c:af:51:63:26: 22:da:b6:d5:62:de:85:3e:68:bc:0d:b6:be:80:71:49:9c:36: 0e:3e:71:55:51:17:7e:1f:b4:ef:1d:7f:05:12:e4:a0:36:e2: 54:10:fb:ee:19:c8:a5:06:3d:b4:7f:f4:8a:3f:d9:7f:50:b6: ae:d3:f8:2f:58:24:86:cd:55:d1:a4:02:34:32:a3:fe:c3:68: 22:18:2d:8d:c2:f9:8c:2d:92:fa:29:7c:6f:d8:8f:a4:43:98: ed:8b:7f:96:9b:20:26:7a:8f:4e:78:2f:1f:e8:a1:35:48:7c: 9c:bd:0d:ef:df:a9:46:71:71:b1:54:75:b6:9e:a7:15:92:ac: ab:58:37:ff:44:ba:a6:36:32:ca:7e:4d:6d:81:9b:d9:27:b3: d9:8f:fa:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjYwNDA0MjI1NjE2WhcNMjYwNDExMjI1NjE2WjAYMRYwFAYD VQQDEw02OWQxOTcxMC1lY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutFunhryP+8Dp1hBvkLnQhGqVH7mozmkATWA7AOjYQmH10xN4Oud+h3FQfdO mCcAFhag6Mlvbf+N5bIj/+No69JMTjmYX3vb9nNHKpFqU09TmniUjT1fh+iMb8d7 vuVeVET6OF50PejaquTjr02/Gfmi8RDOvOLLh9cTVVvGhmCPDtcTzL9VrAztJpNf gRJTzJUTHNOKm1XcC2UEW18DZUPQEyivkr8BmjQEqXIFP3PNSmwJysvk9k+bOqnp tCQoCsc/U0pi4unbGcPz4CllXYcOnaf4GE8CLt86OvOC2rNJ8LI3kWW6V/D/9XMH Pxjirsk/cZZ82pDdazSncCUbUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUwwlcW 7RFCxa589t2nhUS8OJnEMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC95/0hIQFHyXUF/2ckLaSfcsYbuRIZUHtcjsIyOTu241m66xhM0M8FfUx0Wt LUmEwkvQJ8IVXVgIqth8vQOrUX+j6ZwAGjMjAKCCIpBFfNGLzVNBzLglDb/dueAr ZoMcU5lCv4gcR2yvUWMmItq21WLehT5ovA22voBxSZw2Dj5xVVEXfh+07x1/BRLk oDbiVBD77hnIpQY9tH/0ij/Zf1C2rtP4L1gkhs1V0aQCNDKj/sNoIhgtjcL5jC2S +il8b9iPpEOY7Yt/lpsgJnqPTngvH+ihNUh8nL0N79+pRnFxsVR1tp6nFZKsq1g3 /0S6pjYyyn5NbYGb2Sez2Y/6Ew== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:51 2026 by rpki-client