$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: wHtQeGXzCJJhOPS6tovs28ODYUrlFloqZhSY9lkkDVE= Subject key identifier: 99:CC:8E:99:84:2E:C4:CD:BB:73:92:03:04:FF:2C:49:AC:77:28:1C Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 0830 Signing time: Sat 04 Apr 2026 21:50:03 +0000 Manifest this update: Sat 04 Apr 2026 21:50:02 +0000 Manifest next update: Sat 11 Apr 2026 21:50:02 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: shGYZvDOb0R1DoTE3nfpFSL4gZ9MKbX5N3rHHoDBTLI=) 2: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: FZxNGPEDm98WyIYelmT7Ny6KqOSVp9Hnu1QHhzseL+U=) 3: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: dT+hUVzmzkp0MF+xQqQP5dOO9l8lXm4CbzD8IR61uj0=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: DeqneaRaSaBqZknkWh20qyHmXKPz6RiopHUHTadeIFs=) 5: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: 5/4YUq2O9OTal/tX146cKHyOeYhVIqDbo8MR2WNGJTA=) 6: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: F75QXCxGZr3+/SASqc++qXUU4Ak7hy/ZkNV6fX02oFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Apr 4 21:50:02 2026 GMT Not After : Apr 11 21:50:02 2026 GMT Subject: CN=69d1878b-b7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:5e:1e:1c:94:10:2b:5e:14:82:d2:92:06: 14:a7:c8:2d:6b:4c:82:d1:6b:f3:ec:c9:4b:28:2a: ea:c7:37:23:b5:d6:72:7f:0b:e7:a7:f2:9d:6d:4a: f6:61:b9:8d:28:e1:20:ed:00:ff:32:a3:33:d3:ca: 27:9f:38:ba:99:ad:83:6c:48:18:4a:c7:3a:10:7d: 3e:31:f0:6e:e7:62:b1:92:e3:a6:c7:35:fb:d4:19: 27:4c:17:e5:17:5a:03:28:2c:11:0e:56:dd:74:28: 2e:84:fa:ef:ef:d6:15:97:5b:2c:01:91:46:22:a5: e2:5c:4e:b3:40:90:b6:c5:0e:14:6f:b6:ac:c2:2a: 2b:96:92:0e:ed:71:4e:98:9f:41:38:8b:b9:d4:d0: 4a:96:d6:4a:8b:00:1e:4b:89:86:07:43:17:0b:a1: cc:01:7e:ef:22:78:2f:20:02:0d:37:82:08:e4:71: 12:64:2e:dd:7d:5e:2c:bd:57:95:bb:df:ec:4b:9e: a5:e5:0d:68:56:c3:52:98:e2:95:d1:b1:9f:66:de: f0:33:3c:42:bf:05:41:32:fd:32:3a:a4:d6:56:3e: 80:8e:af:9c:db:ff:fb:23:1c:df:79:f4:56:6a:2f: 6d:29:94:99:7a:91:6c:a4:d7:11:da:01:25:38:ce: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:8E:99:84:2E:C4:CD:BB:73:92:03:04:FF:2C:49:AC:77:28:1C X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fc:1f:43:55:a0:01:62:4a:7e:9b:b4:9e:dc:79:a0:e6:05: 85:89:77:33:62:0e:66:e3:2b:e6:2a:02:27:94:f0:91:c9:5e: a9:74:09:0d:4c:8c:2b:47:dd:f5:36:60:17:db:18:0a:6c:11: b0:79:3f:68:06:3e:c5:e8:69:53:2a:af:3b:bd:a0:d4:70:e2: 7b:b2:3f:2f:c2:8a:a2:ca:b1:aa:33:e6:40:37:b5:e4:e3:b5: a4:28:d3:d9:e6:f4:19:3d:1e:f6:e0:47:c2:b9:13:6d:d2:30: 12:0b:db:7e:74:ec:cf:68:4f:81:24:e4:b2:c3:fa:f3:5d:6e: 49:ab:5e:95:80:28:8c:c1:eb:4c:71:b5:c6:64:98:5d:cb:25: 4a:ef:7c:9b:8c:07:e9:da:8d:0e:4d:2a:5d:34:0a:86:5a:3b: 5c:15:80:4b:df:9e:09:19:61:08:d5:76:88:d0:d3:18:a4:95: 20:85:0e:f6:35:ff:4a:5a:b2:95:ba:48:98:68:b6:3a:d4:8a: 9d:8d:8d:0b:ea:7d:68:ee:85:06:88:5c:0e:ef:f0:f1:c4:43: 3e:bc:a2:23:19:91:85:45:a1:d8:fd:bc:f9:e4:19:59:98:b7: 1f:96:e7:06:84:36:71:0b:d5:8e:7f:8f:99:51:12:6a:97:59: 47:d9:f4:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjYwNDA0MjE1MDAyWhcNMjYwNDExMjE1MDAyWjAYMRYwFAYD VQQDEw02OWQxODc4Yi1iN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygFeHhyUECteFILSkgYUp8gta0yC0Wvz7MlLKCrqxzcjtdZyfwvnp/KdbUr2 YbmNKOEg7QD/MqMz08onnzi6ma2DbEgYSsc6EH0+MfBu52KxkuOmxzX71BknTBfl F1oDKCwRDlbddCguhPrv79YVl1ssAZFGIqXiXE6zQJC2xQ4Ub7aswiorlpIO7XFO mJ9BOIu51NBKltZKiwAeS4mGB0MXC6HMAX7vIngvIAINN4II5HESZC7dfV4svVeV u9/sS56l5Q1oVsNSmOKV0bGfZt7wMzxCvwVBMv0yOqTWVj6Ajq+c2//7IxzfefRW ai9tKZSZepFspNcR2gElOM6qMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnMjpmE LsTNu3OSAwT/LEmsdygcMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfwfQ1WgAWJKfpu0ntx5oOYFhYl3M2IOZuMr5ioCJ5TwkcleqXQJDUyMK0fd 9TZgF9sYCmwRsHk/aAY+xehpUyqvO72g1HDie7I/L8KKosqxqjPmQDe15OO1pCjT 2eb0GT0e9uBHwrkTbdIwEgvbfnTsz2hPgSTkssP6811uSatelYAojMHrTHG1xmSY XcslSu98m4wH6dqNDk0qXTQKhlo7XBWAS9+eCRlhCNV2iNDTGKSVIIUO9jX/Slqy lbpImGi2OtSKnY2NC+p9aO6FBohcDu/w8cRDPryiIxmRhUWh2P28+eQZWZi3H5bn BoQ2cQvVjn+PmVESapdZR9n0eA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:17 2026 by rpki-client