$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: BpR2QR/3ZOFdIESB8WEAj84wobrupJ4iQOXDJ2TfceM= Subject key identifier: A2:92:ED:4F:D2:5C:74:B0:5A:71:FE:DB:DF:6F:8E:8D:01:A3:D8:A3 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 08BB Signing time: Sat 04 Apr 2026 20:13:37 +0000 Manifest this update: Sat 04 Apr 2026 20:13:37 +0000 Manifest next update: Sat 11 Apr 2026 20:13:37 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: QhMmnWycNbsw7UkmoDzMbGXPm4XPTDNaCdKh7tVFc/E=) 2: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: GcnmXQh570geNJINX8vCVPM77SUIFg/QUIUzszIzfEI=) 3: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: r6RObzZDmvTKdURDxwySrRDVkCeN5KJ86vtH4x9kO5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Apr 4 20:13:37 2026 GMT Not After : Apr 11 20:13:37 2026 GMT Subject: CN=69d170f1-80e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:62:e8:ba:5c:aa:d7:7d:01:a6:96:a1:2e: 9e:03:09:3d:1e:7b:43:a2:18:bc:63:72:41:c6:e1: 98:6a:97:49:5a:9e:58:38:bc:bf:21:ab:05:62:4d: 43:39:04:09:d3:55:d3:72:ca:33:9d:a7:a9:f1:03: 4e:26:0d:8c:0e:61:25:60:3c:87:ee:d0:07:ba:0a: 7b:91:14:ec:51:76:8f:f7:60:27:45:d2:ff:18:5d: c3:88:4f:0b:04:fe:b9:cb:32:cb:9e:8e:ef:5a:77: 1f:ac:1b:62:f3:6d:bd:be:75:46:3a:c3:5d:3e:b2: 42:9f:da:7d:64:85:de:d9:3a:ac:08:e2:1e:29:de: 16:ee:5d:fd:62:d7:54:4f:d7:65:61:ab:74:52:e8: 8c:cb:83:d9:e6:17:6c:2f:1c:31:c1:36:c4:10:7c: 85:2a:2d:f8:6d:13:7c:57:9d:6f:98:f5:d9:54:b3: 98:50:5a:98:ef:04:ce:94:82:92:18:93:98:3d:b8: 23:a4:1f:47:0f:91:87:5d:f9:dd:b8:46:c9:f1:14: 35:54:43:78:69:32:9f:0a:85:55:58:4e:0d:84:8f: fe:e2:3b:d4:c8:01:8a:d1:57:93:7d:ce:73:a7:46: aa:49:9e:80:c2:3f:14:b7:00:7f:49:6c:0b:db:67: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:92:ED:4F:D2:5C:74:B0:5A:71:FE:DB:DF:6F:8E:8D:01:A3:D8:A3 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:03:33:68:5f:d1:d5:53:b6:f3:1b:26:5c:a7:88:83:d5:23: d7:88:07:ce:e1:ad:0e:a0:76:0c:bf:c1:44:68:90:5a:f0:50: 9a:19:17:48:55:75:40:04:41:b7:43:9f:8f:f5:60:38:76:1e: 52:99:fd:d1:f8:9c:1b:72:37:b3:a2:0f:76:9b:a4:28:05:9d: 7d:1b:af:8c:da:32:06:b0:b7:50:a0:07:ad:7e:fb:01:c1:30: 28:1a:ba:70:52:cc:e4:11:14:62:69:67:92:a5:2f:c3:72:19: 33:94:f9:29:8f:bc:bc:0e:7b:be:8a:4f:4b:c5:23:ea:59:79: 18:87:20:ed:74:73:6e:11:3c:a5:24:26:e8:df:d5:13:ca:a3: ab:3d:a0:75:5f:08:ef:8f:83:20:a8:ef:ae:17:6f:b1:df:f0: d5:84:0f:ac:b8:42:9f:63:56:68:f0:2f:80:9e:4b:4c:d5:59: 34:4d:c1:07:cc:09:b7:34:d4:73:59:95:5a:ea:54:83:48:a0: d2:75:04:2e:24:62:d9:b5:c0:5d:61:0e:39:53:2a:ef:e9:e7: 3f:37:09:9a:9b:e0:99:08:5b:ac:b0:d0:be:f9:d2:0b:c7:68: 35:dd:61:d7:9b:92:84:b6:54:7f:2b:89:74:54:22:18:6a:f5: 49:6f:3b:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjYwNDA0MjAxMzM3WhcNMjYwNDExMjAxMzM3WjAYMRYwFAYD VQQDEw02OWQxNzBmMS04MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru9i6Lpcqtd9AaaWoS6eAwk9HntDohi8Y3JBxuGYapdJWp5YOLy/IasFYk1D OQQJ01XTcsoznaep8QNOJg2MDmElYDyH7tAHugp7kRTsUXaP92AnRdL/GF3DiE8L BP65yzLLno7vWncfrBti8229vnVGOsNdPrJCn9p9ZIXe2TqsCOIeKd4W7l39YtdU T9dlYat0UuiMy4PZ5hdsLxwxwTbEEHyFKi34bRN8V51vmPXZVLOYUFqY7wTOlIKS GJOYPbgjpB9HD5GHXfnduEbJ8RQ1VEN4aTKfCoVVWE4NhI/+4jvUyAGK0VeTfc5z p0aqSZ6Awj8UtwB/SWwL22dmuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKS7U/S XHSwWnH+299vjo0Bo9ijMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiQMzaF/R1VO28xsmXKeIg9Uj14gHzuGtDqB2DL/BRGiQWvBQmhkXSFV1QARB t0Ofj/VgOHYeUpn90ficG3I3s6IPdpukKAWdfRuvjNoyBrC3UKAHrX77AcEwKBq6 cFLM5BEUYmlnkqUvw3IZM5T5KY+8vA57vopPS8Uj6ll5GIcg7XRzbhE8pSQm6N/V E8qjqz2gdV8I74+DIKjvrhdvsd/w1YQPrLhCn2NWaPAvgJ5LTNVZNE3BB8wJtzTU c1mVWupUg0ig0nUELiRi2bXAXWEOOVMq7+nnPzcJmpvgmQhbrLDQvvnSC8doNd1h 15uShLZUfyuJdFQiGGr1SW873Q== -----END CERTIFICATE-----Generated at Mon Apr 6 09:13:25 2026 by rpki-client