$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: yFvU4BVI1tkvd1DqUAhXT/O3fJ2W3bhE1LY5uen6XpE= Subject key identifier: DD:97:1F:1F:F2:7B:FC:AF:E9:C3:AB:5E:E9:B6:6E:19:53:20:54:FA Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0D87 Signing time: Sat 04 Apr 2026 17:49:47 +0000 Manifest this update: Sat 04 Apr 2026 17:49:46 +0000 Manifest next update: Sat 11 Apr 2026 17:49:46 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: RkIwBkf33DX1QytupvtddkaqJxZJMZzAEdstta8OhT8=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Apr 4 17:49:46 2026 GMT Not After : Apr 11 17:49:46 2026 GMT Subject: CN=69d14f3b-3311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:4c:af:4d:34:6d:98:46:18:ed:f8:11:7e: a4:43:ba:99:16:fd:72:f3:c7:56:7f:4a:f5:83:57: 35:52:b6:13:d2:40:46:a4:e4:c0:f4:6f:f6:8a:bd: b0:c9:74:1c:27:93:93:e6:c2:8e:97:34:b5:2b:08: 34:86:05:78:8f:88:d9:85:37:01:9c:9b:e6:80:d5: b2:ac:61:62:a6:c6:d9:ff:54:a5:df:a5:d1:5e:f5: 8d:b1:ae:2c:6a:b2:f5:c2:c9:0d:91:06:56:cb:ae: 21:fa:40:8e:e3:92:1c:ed:f8:21:f8:cb:1d:77:18: 8d:7c:2d:ea:ca:a5:df:4e:c6:38:9e:8e:b9:25:8c: 5a:1a:94:4f:14:d4:6b:8c:a3:6e:b2:3e:38:c1:f9: 4d:50:25:69:dc:65:08:bf:53:01:d8:fb:4d:2e:e9: db:93:08:5a:22:40:e6:0c:d5:30:1b:d4:1b:d1:2a: f8:8b:24:53:7a:08:d5:c0:a0:43:32:21:8c:f2:ff: f0:e7:d2:ec:3b:df:f5:e6:6b:d2:16:aa:c7:83:25: e2:49:c0:03:7b:0f:dd:6d:10:a0:d3:0b:aa:2a:eb: 43:9a:66:cb:ac:b1:ba:b9:f7:5e:0f:f7:d2:fc:7a: d2:30:d9:01:27:24:e3:9b:44:09:d7:5f:03:15:f0: 77:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:97:1F:1F:F2:7B:FC:AF:E9:C3:AB:5E:E9:B6:6E:19:53:20:54:FA X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:98:47:da:ab:8c:85:c6:cb:29:38:3d:98:1b:37:ef:8f:31: 0c:a8:2e:3a:11:4c:53:c1:5b:de:28:7a:9f:03:d3:b0:3f:c9: 6a:de:fa:79:f8:54:0e:24:19:48:f4:ce:4b:38:ee:6b:b6:b2: 03:7a:20:3d:d9:7e:7f:35:10:44:ee:ce:ca:53:98:e7:0d:fe: 3c:16:5c:13:ec:7a:d3:a2:4b:31:22:fc:0a:41:c0:c2:4e:6f: a4:3e:83:26:aa:8e:f7:68:c6:c5:cb:5f:66:43:4a:d3:61:43: 4d:8e:fe:f5:f2:9e:ee:47:a1:3d:92:11:57:11:01:18:28:7b: 53:bb:c6:de:f3:c5:bb:ec:08:4b:04:29:88:7c:14:24:18:f2: 06:58:5a:90:cd:b1:3a:67:39:a5:38:54:22:13:b9:b3:39:d8: 66:65:61:44:fe:ff:31:13:1f:e7:7f:3e:96:f0:6d:c1:c8:b7: a1:8f:d3:e3:9d:e4:90:e4:7e:5e:df:84:a8:37:75:50:e1:32: 14:ba:52:ef:5c:60:66:c8:43:a4:90:04:79:21:36:33:aa:9c: f8:a1:88:e1:3a:03:3a:db:76:15:bd:5f:4d:67:6a:61:97:21: 07:44:4e:c2:cb:75:12:2f:54:77:cc:97:10:75:ef:13:5b:0b: 68:37:bd:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjYwNDA0MTc0OTQ2WhcNMjYwNDExMTc0OTQ2WjAYMRYwFAYD VQQDEw02OWQxNGYzYi0zMzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHhMr000bZhGGO34EX6kQ7qZFv1y88dWf0r1g1c1UrYT0kBGpOTA9G/2ir2w yXQcJ5OT5sKOlzS1Kwg0hgV4j4jZhTcBnJvmgNWyrGFipsbZ/1Sl36XRXvWNsa4s arL1wskNkQZWy64h+kCO45Ic7fgh+MsddxiNfC3qyqXfTsY4no65JYxaGpRPFNRr jKNusj44wflNUCVp3GUIv1MB2PtNLunbkwhaIkDmDNUwG9Qb0Sr4iyRTegjVwKBD MiGM8v/w59LsO9/15mvSFqrHgyXiScADew/dbRCg0wuqKutDmmbLrLG6ufdeD/fS /HrSMNkBJyTjm0QJ118DFfB3PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2XHx/y e/yv6cOrXum2bhlTIFT6MB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGZhH2quMhcbLKTg9mBs3748xDKguOhFMU8Fb3ih6nwPTsD/Jat76efhUDiQZ SPTOSzjua7ayA3ogPdl+fzUQRO7OylOY5w3+PBZcE+x606JLMSL8CkHAwk5vpD6D JqqO92jGxctfZkNK02FDTY7+9fKe7kehPZIRVxEBGCh7U7vG3vPFu+wISwQpiHwU JBjyBlhakM2xOmc5pThUIhO5sznYZmVhRP7/MRMf538+lvBtwci3oY/T453kkOR+ Xt+EqDd1UOEyFLpS71xgZshDpJAEeSE2M6qc+KGI4ToDOtt2Fb1fTWdqYZchB0RO wst1Ei9Ud8yXEHXvE1sLaDe9wQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:10 2026 by rpki-client