$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: KUx0agE3UfwFNjk10P5X/bjbeOiHNgw34lElunvNAOI= Subject key identifier: B2:75:C1:B6:49:2F:7A:19:88:A9:77:05:31:06:1D:FC:8A:5E:D0:C6 Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 010D Signing time: Sun 05 Apr 2026 05:25:33 +0000 Manifest this update: Sun 05 Apr 2026 05:25:32 +0000 Manifest next update: Sun 12 Apr 2026 05:25:32 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: H4Hv/xmxUZWEmaVq6jAmir3l+358Nh7qnxOmZkbTwAI=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: aoBTkJouVxyNkkgtw1vmV8sS1BnP7mpfp25E9TCfROM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584, serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Validity Not Before: Apr 5 05:25:32 2026 GMT Not After : Apr 12 05:25:32 2026 GMT Subject: CN=69d1f24d-9c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:43:6f:21:7d:c6:b1:99:03:73:1d:ea:c4:59: 40:df:8f:e6:c3:e6:32:d0:98:6b:95:24:84:e0:7d: 55:68:84:63:b9:57:ae:f4:18:31:28:07:b4:88:56: 6d:c3:a2:dd:9b:40:e2:3e:ef:76:9c:ef:d7:f3:b4: b3:c3:46:67:47:95:52:28:e0:6b:6e:63:77:de:87: 63:bd:dc:99:76:1d:de:80:fe:5a:51:e6:de:f4:b1: 0a:fb:76:9e:c9:00:54:bc:36:ba:87:c7:48:2c:47: b8:0e:10:09:eb:6f:45:1c:f5:32:b7:dc:b8:21:98: c1:61:93:f5:2e:63:c7:07:c7:7d:b9:86:6c:1d:78: e6:fc:ce:f9:68:40:82:48:af:d6:b3:7b:97:4c:be: 98:ed:31:dc:05:61:19:df:b1:db:f5:a3:48:d2:02: ab:29:be:d6:64:a4:7a:5d:b2:33:30:0b:70:59:e8: 63:27:45:69:06:f8:8e:1a:5f:91:48:1d:02:0c:9d: 6e:da:be:80:9a:c3:78:a8:0b:eb:a1:c0:57:d3:a5: 69:1e:e1:fa:c2:b9:8b:e5:cf:9a:6e:bf:b1:79:20: e0:41:c2:15:eb:03:e7:9d:1a:64:94:8d:90:e5:86: f7:2c:79:ee:34:c5:73:70:b8:79:c6:74:cf:de:ee: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:C1:B6:49:2F:7A:19:88:A9:77:05:31:06:1D:FC:8A:5E:D0:C6 X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e2:fb:87:ee:5a:98:c5:b2:24:f2:68:51:d3:68:4d:ad:2e: 3e:35:8f:a7:72:75:32:e3:4f:9a:9c:76:dd:f2:99:ca:4c:61: 48:8f:fb:e1:e6:2d:a7:50:20:ca:bd:a3:31:17:1e:65:e3:a9: d7:f6:60:e3:8c:d2:a3:9e:1f:82:a8:60:07:c9:0e:3a:5c:87: 6a:2f:81:5c:8f:bc:78:4d:34:34:af:51:a8:d6:bf:25:3d:40: 43:42:dd:96:29:33:f7:3c:25:a1:75:ea:46:39:db:be:b8:34: 9e:d1:a3:65:a9:82:6b:d4:a4:35:89:11:ac:7a:a3:3f:cb:95: 19:13:d9:48:d9:96:ec:be:00:8a:af:df:e6:20:da:27:77:c7: bb:72:11:59:27:38:ac:ce:33:01:94:0d:3b:14:bd:48:b8:b9: f5:f3:31:a7:e4:2d:0c:a3:f0:5f:c8:52:0e:d6:66:72:0b:b5: 21:45:7a:a6:6d:b9:40:a3:19:2d:57:a9:27:85:59:b1:ed:15: 4c:0a:15:89:1f:2e:39:a1:3c:24:71:27:34:70:c1:fb:98:a5: c8:50:d1:ef:d9:39:1e:84:71:86:63:cf:48:67:11:5b:c1:30: c6:a4:fc:b0:76:8f:65:af:bd:32:4f:9b:04:1a:c2:1f:12:cd: 18:87:6e:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1ODQxMTAvBgNVBAUTKEEwRkEyMzc3NkQ1NDRDODc3OTQ2Q0FDN0M0ODc3NDY1 MTk5MzdEQjgwHhcNMjYwNDA1MDUyNTMyWhcNMjYwNDEyMDUyNTMyWjAYMRYwFAYD VQQDEw02OWQxZjI0ZC05Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlENvIX3GsZkDcx3qxFlA34/mw+Yy0JhrlSSE4H1VaIRjuVeu9BgxKAe0iFZt w6Ldm0DiPu92nO/X87Szw0ZnR5VSKOBrbmN33odjvdyZdh3egP5aUebe9LEK+3ae yQBUvDa6h8dILEe4DhAJ629FHPUyt9y4IZjBYZP1LmPHB8d9uYZsHXjm/M75aECC SK/Ws3uXTL6Y7THcBWEZ37Hb9aNI0gKrKb7WZKR6XbIzMAtwWehjJ0VpBviOGl+R SB0CDJ1u2r6AmsN4qAvrocBX06VpHuH6wrmL5c+abr+xeSDgQcIV6wPnnRpklI2Q 5Yb3LHnuNMVzcLh5xnTP3u62lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJ1wbZJ L3oZiKl3BTEGHfyKXtDGMB8GA1UdIwQYMBaAFKD6I3dtVEyHeUbKx8SHdGUZk324 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDU4NC8zMjcwNzM4MjlD QjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJZDVSc3JIeElkMFpSbVRm YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDU4NC8zMjcwNzM4MjlDQjExMUVGQUVBMDBEMjVDNEY5QUUwMi9vUG9qZDIxVVRJ ZDVSc3JIeElkMFpSbVRmYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfeL7h+5amMWyJPJoUdNoTa0uPjWPp3J1MuNPmpx23fKZykxhSI/74eYtp1Ag yr2jMRceZeOp1/Zg44zSo54fgqhgB8kOOlyHai+BXI+8eE00NK9RqNa/JT1AQ0Ld likz9zwloXXqRjnbvrg0ntGjZamCa9SkNYkRrHqjP8uVGRPZSNmW7L4Aiq/f5iDa J3fHu3IRWSc4rM4zAZQNOxS9SLi59fMxp+QtDKPwX8hSDtZmcgu1IUV6pm25QKMZ LVepJ4VZse0VTAoViR8uOaE8JHEnNHDB+5ilyFDR79k5HoRxhmPPSGcRW8EwxqT8 sHaPZa+9Mk+bBBrCHxLNGIdugQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:48 2026 by rpki-client