$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: pXeLB7KHkRp2rhU/itIpntvbasZPCc9bggFjOSflSjk= Subject key identifier: 79:16:C6:A5:1D:D0:4C:44:99:CD:77:90:76:53:CE:B1:B8:08:03:D0 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01FA Signing time: Sun 05 Apr 2026 02:45:13 +0000 Manifest this update: Sun 05 Apr 2026 02:45:12 +0000 Manifest next update: Sun 12 Apr 2026 02:45:12 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: LfHmFpgnZr4KSjcXMSYv69QF2n5DZt8hrOI2ZE9ZeeE=) 2: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=) 3: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=) 4: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=) 5: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Apr 5 02:45:12 2026 GMT Not After : Apr 12 02:45:12 2026 GMT Subject: CN=69d1ccb9-e742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:d5:64:7d:cd:63:63:9a:ad:61:2b:39:bb: 62:f6:05:3f:36:07:ec:3c:59:a7:82:a3:b5:1e:00: 96:58:85:88:29:bb:a7:8b:e3:d5:bc:6e:7b:b7:4b: 2f:f9:46:2c:ca:86:e2:e9:e3:ad:11:5d:11:16:c7: 9e:28:bc:97:79:91:05:44:42:d5:84:61:48:9f:f6: ac:fc:8f:53:b6:36:7f:b4:59:0e:e1:71:ee:45:9b: c0:4b:88:20:e8:ba:2f:3a:51:1a:9b:5f:dc:9b:e8: 9d:ac:1d:56:a1:41:ad:40:5c:4e:b1:f7:df:99:d8: e1:aa:f8:de:9a:aa:42:0f:bd:12:a8:20:6b:58:ca: cf:5e:62:f6:3d:86:9d:f6:6d:53:23:bd:79:8c:67: c8:a0:23:c2:7a:39:0d:00:97:05:5e:5a:0f:5d:10: b6:55:3a:76:28:52:b2:a4:66:8b:88:0b:a7:f7:6b: e1:2b:c7:41:0f:a0:b2:74:51:9d:d7:6c:00:f0:50: a0:29:c9:62:07:b5:14:7d:9d:94:31:88:ce:e0:3f: 38:50:3d:d0:17:30:7c:d3:53:67:e8:4c:71:66:c5: 8e:95:e3:9f:9c:cc:38:42:62:90:00:2f:53:49:f4: 57:7b:16:b0:bb:50:60:38:a3:af:46:d9:9b:cc:5a: d6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:C6:A5:1D:D0:4C:44:99:CD:77:90:76:53:CE:B1:B8:08:03:D0 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:8f:75:88:82:b8:06:bd:f3:0f:91:37:92:bd:f8:29:8a:21: 01:de:01:fd:72:c3:51:d4:84:12:00:28:22:e6:d1:0e:d9:be: d1:57:6f:8f:00:d8:03:64:ba:20:cb:82:8a:38:b5:13:79:3f: 25:f2:0e:14:dd:e7:4d:c9:60:dc:30:3b:25:bd:69:02:22:ad: d6:83:ed:c7:94:10:c4:6c:13:d0:db:51:fc:0c:2d:a2:f8:79: a5:bb:55:06:7a:e6:bc:a6:dc:33:74:bf:86:a3:85:c3:a2:40: c0:df:87:8c:85:27:c2:31:5d:8b:f0:45:87:3b:82:af:79:ea: 92:a5:e9:47:99:35:df:d1:b0:2d:5f:13:43:9e:f3:c1:1d:cd: 6a:c1:40:c8:74:cb:a3:52:1b:0b:d2:7b:0e:48:42:9a:70:8a: 3f:75:02:a6:47:3e:c7:13:b0:1d:8d:8d:cf:18:01:4b:45:d6: 36:b3:d5:8c:5a:cc:0c:18:a1:75:41:33:a7:ba:2c:90:c0:cb: 9a:ea:6d:f0:62:1d:b3:52:03:a8:8d:fa:5d:b8:c3:6f:87:0a: 46:fb:3b:8d:8b:4f:72:62:80:61:6c:22:e0:ee:be:f0:0d:67: ce:1f:0e:e7:a6:e6:ad:34:e4:59:e8:f2:ab:22:95:8f:81:d4: 98:c8:cf:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjYwNDA1MDI0NTEyWhcNMjYwNDEyMDI0NTEyWjAYMRYwFAYD VQQDEw02OWQxY2NiOS1lNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+fVZH3NY2OarWErObti9gU/NgfsPFmngqO1HgCWWIWIKbuni+PVvG57t0sv +UYsyobi6eOtEV0RFseeKLyXeZEFRELVhGFIn/as/I9TtjZ/tFkO4XHuRZvAS4gg 6LovOlEam1/cm+idrB1WoUGtQFxOsfffmdjhqvjemqpCD70SqCBrWMrPXmL2PYad 9m1TI715jGfIoCPCejkNAJcFXloPXRC2VTp2KFKypGaLiAun92vhK8dBD6CydFGd 12wA8FCgKcliB7UUfZ2UMYjO4D84UD3QFzB801Nn6ExxZsWOleOfnMw4QmKQAC9T SfRXexawu1BgOKOvRtmbzFrWuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkWxqUd 0ExEmc13kHZTzrG4CAPQMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhI91iIK4Br3zD5E3kr34KYohAd4B/XLDUdSEEgAoIubRDtm+0VdvjwDYA2S6 IMuCiji1E3k/JfIOFN3nTclg3DA7Jb1pAiKt1oPtx5QQxGwT0NtR/Awtovh5pbtV BnrmvKbcM3S/hqOFw6JAwN+HjIUnwjFdi/BFhzuCr3nqkqXpR5k139GwLV8TQ57z wR3NasFAyHTLo1IbC9J7DkhCmnCKP3UCpkc+xxOwHY2NzxgBS0XWNrPVjFrMDBih dUEzp7oskMDLmupt8GIds1IDqI36XbjDb4cKRvs7jYtPcmKAYWwi4O6+8A1nzh8O 56bmrTTkWejyqyKVj4HUmMjPiQ== -----END CERTIFICATE-----Generated at Mon Apr 6 02:23:15 2026 by rpki-client