$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json) Hash identifier: yKyZfOX3k40JbtXD4/QCiXeYgZnfAj4mBbywyat0J8w= Subject key identifier: 33:D1:D6:B8:E8:96:5F:4C:70:2F:E9:68:CB:71:D0:59:E4:24:24:49 Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft Manifest number: 3D Signing time: Sun 05 Apr 2026 07:47:18 +0000 Manifest this update: Sun 05 Apr 2026 07:47:18 +0000 Manifest next update: Sun 12 Apr 2026 07:47:18 +0000 Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: GSR2wyrDtynJOH7t9nuH54TWOU+yIxzff4dkONi0iNE=) 2: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: Ifqu/imW1CpJtOK3B5gKpgSp1ZH+G/n9WtAUtx4GCTI=) 3: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: T0uD7GQksTME+qhX3xTaNiGDGWI7HGkb3DLPjDo3u3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Validity Not Before: Apr 5 07:47:18 2026 GMT Not After : Apr 12 07:47:18 2026 GMT Subject: CN=69d21386-0f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:7b:98:de:f2:c2:b9:05:57:00:50:ad:cb: 3d:37:5e:ee:b0:03:3c:93:f1:a0:5a:96:13:40:05: c1:c0:a4:d1:54:ff:48:72:da:c6:98:d5:aa:56:47: 3c:22:49:64:1d:5a:d7:eb:b3:64:1e:f4:a2:d2:c4: 7a:6a:25:5a:d3:b1:8f:7f:66:01:d6:8a:06:7a:94: c8:a8:e2:22:f2:64:05:29:3a:ba:17:eb:14:a8:12: a5:3b:bf:33:a2:98:22:2f:5b:6b:47:31:c3:13:c9: 04:95:41:65:92:e1:76:65:11:96:1c:d0:f4:82:48: df:9c:e1:3c:db:d3:a4:89:7b:24:02:a9:57:a0:74: e5:6b:b8:77:3c:09:de:46:8b:d9:a0:48:af:31:4a: ec:cd:5c:17:1a:64:d0:b0:c0:3f:b4:67:dd:6d:00: ee:62:98:ed:91:82:6d:e6:36:82:29:c7:34:57:1e: 39:a2:40:f5:54:89:92:2f:a1:41:ad:8a:bf:87:a1: 0f:38:a7:81:f2:80:25:82:c2:63:84:2b:48:71:e3: 35:c0:bb:9f:70:6e:05:55:08:59:e8:4e:4b:a9:fe: 6a:65:00:db:27:c0:88:6c:c2:13:49:89:35:c0:45: cb:92:ce:ba:04:6a:08:42:5d:ae:c8:3a:ea:e7:d6: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:D6:B8:E8:96:5F:4C:70:2F:E9:68:CB:71:D0:59:E4:24:24:49 X509v3 Authority Key Identifier: keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6e:74:22:1f:15:c0:48:95:07:37:ac:f1:a7:eb:c0:cf:c9: 00:fe:a9:14:68:8f:65:bc:22:25:ce:94:40:37:9c:ba:8b:bf: ea:a1:5b:c4:f5:16:ea:22:60:fb:e0:78:e5:7f:60:53:4d:56: 37:e8:70:22:c0:79:a3:e6:3b:06:2f:61:0a:be:cd:e1:da:2f: 55:fc:5c:b5:7e:17:b3:ae:d4:69:86:95:f1:d6:e1:c7:e6:2b: 31:b9:00:51:59:cf:89:c7:5c:25:91:05:31:1a:0d:cc:f0:e0: 69:50:68:f3:36:e5:c4:22:7a:32:7a:3c:8d:80:74:98:ee:d3: 38:1a:24:b8:79:38:33:ad:d5:3b:48:0b:4e:1b:4a:1e:47:92: 04:3f:79:12:f4:f9:36:c9:7b:3f:63:01:0f:fe:a4:c4:95:a4: bb:39:fd:e4:e1:ff:8f:d2:b9:24:3e:a8:33:0e:be:69:97:81: 4b:56:36:d1:9c:06:6d:27:ef:35:8d:27:d4:de:42:a9:04:b0: c2:98:02:5e:c4:f6:3f:da:bd:8f:2f:02:25:ec:b5:cf:55:79: 0a:57:a0:7a:e5:05:56:0f:63:98:67:0f:4e:1b:fc:10:c8:8c: fb:9a:a9:4d:84:24:7d:10:50:de:86:ae:2e:74:b8:57:46:4a: e3:81:b0:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoOUFEODkyOEVBRjI1QzUxQ0IzQjMyMTFENDlCNkJBQjlG MEI5RjY3RjAeFw0yNjA0MDUwNzQ3MThaFw0yNjA0MTIwNzQ3MThaMBgxFjAUBgNV BAMTDTY5ZDIxMzg2LTBmOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt2HuY3vLCuQVXAFCtyz03Xu6wAzyT8aBalhNABcHApNFU/0hy2saY1apWRzwi SWQdWtfrs2Qe9KLSxHpqJVrTsY9/ZgHWigZ6lMio4iLyZAUpOroX6xSoEqU7vzOi mCIvW2tHMcMTyQSVQWWS4XZlEZYc0PSCSN+c4Tzb06SJeyQCqVegdOVruHc8Cd5G i9mgSK8xSuzNXBcaZNCwwD+0Z91tAO5imO2Rgm3mNoIpxzRXHjmiQPVUiZIvoUGt ir+HoQ84p4HygCWCwmOEK0hx4zXAu59wbgVVCFnoTkup/mplANsnwIhswhNJiTXA RcuSzroEaghCXa7IOurn1tqJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM9HWuOiW X0xwL+loy3HQWeQkJEkwHwYDVR0jBBgwFoAUmtiSjq8lxRyzsyEdSba6ufC59n8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGLzUyRUJDOEM4RDk5 QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5enN5RWRTYmE2dWZDNTlu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRpU2pxOGx4Unl6c3lFZFNiYTZ1ZkM1OW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGLzUyRUJDOEM4RDk5QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5 enN5RWRTYmE2dWZDNTluOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0bnQiHxXASJUHN6zxp+vAz8kA/qkUaI9lvCIlzpRAN5y6i7/qoVvE9RbqImD7 4Hjlf2BTTVY36HAiwHmj5jsGL2EKvs3h2i9V/Fy1fhezrtRphpXx1uHH5isxuQBR Wc+Jx1wlkQUxGg3M8OBpUGjzNuXEInoyejyNgHSY7tM4GiS4eTgzrdU7SAtOG0oe R5IEP3kS9Pk2yXs/YwEP/qTElaS7Of3k4f+P0rkkPqgzDr5pl4FLVjbRnAZtJ+81 jSfU3kKpBLDCmAJexPY/2r2PLwIl7LXPVXkKV6B65QVWD2OYZw9OG/wQyIz7mqlN hCR9EFDehq4udLhXRkrjgbA1 -----END CERTIFICATE-----Generated at Sun Apr 5 21:11:34 2026 by rpki-client