$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: BYuP+qMrXC92kLOmJwobAyV4MA85YY86HY2eIqQyld0= Subject key identifier: 2A:C5:05:53:8B:33:98:01:32:48:F0:4A:3D:A7:7F:6F:F3:20:C3:7B Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 014B Signing time: Sun 05 Apr 2026 04:37:51 +0000 Manifest this update: Sun 05 Apr 2026 04:37:50 +0000 Manifest next update: Sun 12 Apr 2026 04:37:50 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: KbBnJe6GyTAT0s3aDUeQ5RHKfOYkW5Z2q9A7wPlyGEw=) 2: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: 8qsCKXW1PnkeYNlCGo4/GnAMha9Fa7HghDmajg38QjM=) 3: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: sx9r0ziKeVv3PgPFT0H8V5/JZLvSBe+KHoBiEIdn+3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Apr 5 04:37:50 2026 GMT Not After : Apr 12 04:37:50 2026 GMT Subject: CN=69d1e71e-c794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:13:e9:e1:5f:16:f8:5a:a5:95:21:22:76:98: dd:a5:13:b2:e9:2a:76:da:4a:7a:ca:75:3e:6b:b8: b9:aa:fa:b0:57:54:f1:7c:41:71:85:42:f2:f1:50: cd:55:f1:33:4d:5e:a8:c8:ed:2a:d8:0e:3c:f6:70: c1:e5:80:bb:b7:d0:73:98:32:11:59:e0:3a:91:06: 84:d1:67:49:87:0c:8d:84:ee:46:29:24:72:49:9b: fc:4b:8a:94:0e:f8:ba:0e:8e:7a:02:70:43:74:37: d4:a1:6a:5d:3f:0d:31:fc:4a:53:b2:d0:7a:7c:49: d4:e4:53:91:4f:fe:66:01:7c:eb:59:ab:2f:ec:47: 99:98:cd:bd:b7:6d:68:e3:3d:3e:79:f3:fb:17:ee: ee:dc:66:2a:32:ea:fb:d2:1c:af:72:aa:f0:d5:ba: 0c:86:26:6d:82:df:5a:72:e1:71:8d:aa:71:00:81: b4:bb:c0:c1:0c:a8:86:7c:e0:50:25:a8:5a:74:31: 80:08:05:43:26:11:96:4e:a4:17:77:a7:4d:c0:4d: 16:e9:69:d4:34:17:b4:bc:e8:be:64:ae:73:5e:19: 51:3c:ec:3d:42:1b:74:a5:23:3e:9e:b9:56:98:b1: a1:f4:61:3b:33:57:3d:00:94:bc:5e:51:af:8a:ac: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:05:53:8B:33:98:01:32:48:F0:4A:3D:A7:7F:6F:F3:20:C3:7B X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:10:3b:7a:c9:0c:b6:08:64:1b:07:67:ea:19:c4:c1:28:d2: a0:7d:b0:3d:65:4f:f1:04:23:fd:6a:ea:c8:f3:05:e6:96:25: 09:26:23:5a:0b:64:db:45:89:ee:aa:9d:fd:25:4a:94:0a:8f: 76:90:9c:dd:f5:5b:d5:aa:45:e4:76:8a:81:da:d3:11:e9:58: 3a:6c:6e:86:8f:af:40:33:3a:e3:d8:ff:4c:d2:71:63:ec:31: d6:d9:2e:31:2c:0a:ca:e2:2e:0f:72:43:ef:b0:10:0b:44:fd: 41:ac:05:51:f6:97:f2:39:48:fe:3f:7e:4f:46:73:29:00:76: 69:72:07:e7:13:3e:a2:bd:fc:3c:a0:14:cc:73:31:e2:16:66: e1:15:e5:fe:eb:82:24:ad:bd:f1:10:cf:35:43:e8:4e:ee:52: 7c:22:59:ec:68:8f:4e:a6:0d:89:3f:0f:4e:9c:84:be:8f:e3: c9:34:f0:3c:04:ca:39:1d:7e:08:f3:ba:dc:c2:79:d4:88:0c: a0:56:0e:d9:95:6a:35:31:46:ca:20:d2:3e:67:9a:fb:ff:19: 6f:d5:90:5b:89:b3:7f:db:f2:2c:34:a0:8a:7b:52:d7:c0:ee: 65:0b:0b:cf:df:76:fa:dc:e0:cc:96:26:22:d3:3e:78:cc:3e: cd:5d:db:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjYwNDA1MDQzNzUwWhcNMjYwNDEyMDQzNzUwWjAYMRYwFAYD VQQDEw02OWQxZTcxZS1jNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxPp4V8W+FqllSEidpjdpROy6Sp22kp6ynU+a7i5qvqwV1TxfEFxhULy8VDN VfEzTV6oyO0q2A489nDB5YC7t9BzmDIRWeA6kQaE0WdJhwyNhO5GKSRySZv8S4qU Dvi6Do56AnBDdDfUoWpdPw0x/EpTstB6fEnU5FORT/5mAXzrWasv7EeZmM29t21o 4z0+efP7F+7u3GYqMur70hyvcqrw1boMhiZtgt9acuFxjapxAIG0u8DBDKiGfOBQ JahadDGACAVDJhGWTqQXd6dNwE0W6WnUNBe0vOi+ZK5zXhlRPOw9Qht0pSM+nrlW mLGh9GE7M1c9AJS8XlGviqz49wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrFBVOL M5gBMkjwSj2nf2/zIMN7MB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlhA7eskMtghkGwdn6hnEwSjSoH2wPWVP8QQj/WrqyPMF5pYlCSYjWgtk20WJ 7qqd/SVKlAqPdpCc3fVb1apF5HaKgdrTEelYOmxuho+vQDM649j/TNJxY+wx1tku MSwKyuIuD3JD77AQC0T9QawFUfaX8jlI/j9+T0ZzKQB2aXIH5xM+or38PKAUzHMx 4hZm4RXl/uuCJK298RDPNUPoTu5SfCJZ7GiPTqYNiT8PTpyEvo/jyTTwPATKOR1+ CPO63MJ51IgMoFYO2ZVqNTFGyiDSPmea+/8Zb9WQW4mzf9vyLDSgintS18DuZQsL z992+tzgzJYmItM+eMw+zV3bUg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:54 2026 by rpki-client