$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: pu7yp1V+UMt+WzTWY4InqiQTxpMNO5kZK50cUWI2K18= Subject key identifier: F4:16:1D:0B:57:DF:21:F4:1A:69:8D:0B:A0:7D:77:D4:C7:70:F1:2D Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 077F Signing time: Sat 04 Apr 2026 21:21:36 +0000 Manifest this update: Sat 04 Apr 2026 21:21:35 +0000 Manifest next update: Sat 11 Apr 2026 21:21:35 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: MPXyesTVTESYcD9SSB8opB3tO2AddEUgK3tfGckI1eM=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Apr 4 21:21:35 2026 GMT Not After : Apr 11 21:21:35 2026 GMT Subject: CN=69d180e0-33f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:4d:21:70:2b:53:87:2d:7f:44:75:04:fe: 7c:51:87:b0:a3:05:e8:12:74:71:c7:33:06:7e:d4: 8f:e9:f4:7d:aa:2b:69:62:ae:85:51:1f:70:2a:e7: 39:af:a0:50:8d:d9:aa:7e:2a:c4:9c:fa:34:5a:a3: 7b:30:3e:4f:1e:c5:00:ff:64:26:3a:45:3e:5f:40: 93:bf:07:1b:ce:53:f8:f9:d6:70:db:15:f7:2d:74: ae:3e:95:96:a0:14:a3:4c:0d:6d:7e:1f:75:cb:e8: 76:8e:d2:1c:d0:ba:89:c5:f1:e2:cd:75:3e:61:0e: 0c:92:98:8e:78:80:64:5e:8e:46:5b:d4:bc:ab:6c: cb:cd:cb:3b:8f:2a:28:e4:af:6f:bc:60:97:51:5b: 77:82:91:51:a7:56:96:b3:b6:fa:c6:28:d6:15:87: 4d:05:bb:88:a7:0c:b6:1e:e5:b7:12:f6:4f:03:85: 20:2c:68:41:24:44:d6:b4:1c:7b:26:a7:23:07:43: 91:31:cc:25:0b:23:cd:b6:a5:0b:c9:50:0f:3e:64: 78:16:9f:5a:7b:a7:9d:f7:68:ee:4c:a3:5e:38:7b: b4:21:4a:e8:40:8d:f7:d3:6d:d0:4c:9a:37:17:25: 5a:db:77:8f:ab:59:bc:c2:06:49:7f:db:8b:eb:19: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:16:1D:0B:57:DF:21:F4:1A:69:8D:0B:A0:7D:77:D4:C7:70:F1:2D X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4d:9f:b9:9d:06:e9:39:cd:b5:9f:d9:ac:fd:e1:be:41:9a: 7d:fd:4d:2f:89:f3:13:e6:c3:fa:f5:ca:9c:8d:85:78:26:cb: 76:ba:3c:8c:e8:a6:14:60:63:2d:0d:aa:e5:aa:37:74:fe:c6: 0f:4a:2a:b3:e0:bd:07:c3:4b:88:56:7f:7e:a0:9e:34:89:28: 0f:63:2d:0e:ba:48:9e:9e:83:21:05:02:69:94:fa:c6:92:61: 4b:45:f7:15:a6:ec:42:d8:62:35:bd:22:2e:51:e4:e3:ce:86: 70:c2:34:ca:3a:db:38:a5:a2:5e:60:aa:a5:80:60:16:90:ce: 18:11:4f:cc:e4:2e:e8:47:18:9a:24:22:f0:00:fc:85:2c:72: c6:4f:3d:7a:15:48:b0:4b:e3:b6:ca:69:7f:cf:c7:7e:7a:fb: be:e8:1b:1f:89:41:94:6b:0b:61:43:56:13:49:db:7b:ad:76: 71:4d:22:4c:1d:bb:b0:7d:a7:36:1d:00:63:00:38:77:66:a2: 31:23:92:35:38:51:28:c2:ec:c1:6a:5e:3f:a4:2a:f3:83:c9: 65:fb:35:57:d8:ed:10:40:94:d4:35:04:8c:73:93:e6:af:5a: 3a:f8:f9:17:38:9d:7d:e6:e5:34:ab:7a:62:a4:21:61:e3:18: f6:bd:a3:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjYwNDA0MjEyMTM1WhcNMjYwNDExMjEyMTM1WjAYMRYwFAYD VQQDEw02OWQxODBlMC0zM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEFNIXArU4ctf0R1BP58UYewowXoEnRxxzMGftSP6fR9qitpYq6FUR9wKuc5 r6BQjdmqfirEnPo0WqN7MD5PHsUA/2QmOkU+X0CTvwcbzlP4+dZw2xX3LXSuPpWW oBSjTA1tfh91y+h2jtIc0LqJxfHizXU+YQ4MkpiOeIBkXo5GW9S8q2zLzcs7jyoo 5K9vvGCXUVt3gpFRp1aWs7b6xijWFYdNBbuIpwy2HuW3EvZPA4UgLGhBJETWtBx7 JqcjB0ORMcwlCyPNtqULyVAPPmR4Fp9ae6ed92juTKNeOHu0IUroQI33023QTJo3 FyVa23ePq1m8wgZJf9uL6xm5OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQWHQtX 3yH0GmmNC6B9d9THcPEtMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJk2fuZ0G6TnNtZ/ZrP3hvkGaff1NL4nzE+bD+vXKnI2FeCbLdro8jOimFGBj LQ2q5ao3dP7GD0oqs+C9B8NLiFZ/fqCeNIkoD2MtDrpInp6DIQUCaZT6xpJhS0X3 FabsQthiNb0iLlHk486GcMI0yjrbOKWiXmCqpYBgFpDOGBFPzOQu6EcYmiQi8AD8 hSxyxk89ehVIsEvjtsppf8/Hfnr7vugbH4lBlGsLYUNWE0nbe612cU0iTB27sH2n Nh0AYwA4d2aiMSOSNThRKMLswWpeP6Qq84PJZfs1V9jtEECU1DUEjHOT5q9aOvj5 FzidfeblNKt6YqQhYeMY9r2jEw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:24 2026 by rpki-client