$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft File: Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json) Hash identifier: yOIMHfqgs8lc0EADGSGG4CITz/i9Vr7sM14aoVmAFmc= Subject key identifier: 94:DC:3D:CA:1D:BC:30:AB:2E:8A:E7:56:F2:41:24:E0:B7:D7:13:80 Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft Manifest number: 22 Signing time: Sun 05 Apr 2026 08:13:16 +0000 Manifest this update: Sun 05 Apr 2026 08:13:16 +0000 Manifest next update: Sun 12 Apr 2026 08:13:16 +0000 Files and hashes: 1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: zDdjmIxXcVaVe314P7vnbH86cxJPX6r14s7WtHFXZEg=) 2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE Validity Not Before: Apr 5 08:13:16 2026 GMT Not After : Apr 12 08:13:16 2026 GMT Subject: CN=69d2199c-c42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:70:35:b3:b7:f2:8a:8e:84:c6:ba:ce:11:5d: 41:58:42:7d:6a:f7:88:dd:62:78:8a:be:50:87:f7: ff:a6:10:8d:da:45:40:af:c0:15:fe:a4:9d:1e:06: fb:bc:80:80:d6:81:19:14:d8:a5:b1:f7:c8:82:a1: bd:ac:6c:8e:a5:53:8a:cf:65:36:c5:62:7c:bb:bc: f3:ea:8b:ea:80:41:55:12:49:ab:4e:02:e7:7b:ec: bf:33:4e:66:d8:77:97:f1:bc:dd:26:b5:b7:d0:d6: 32:18:3b:b0:41:cd:ae:dc:55:1c:8d:7b:04:07:c6: 8a:33:c8:15:11:4b:b4:59:2e:f3:c1:c2:fa:3b:91: 84:af:2b:c8:79:61:21:22:e4:98:b3:b6:b5:8d:81: bf:e8:9e:d9:4b:d0:45:91:e4:4b:86:fc:1e:00:dd: e4:bb:37:75:f2:b0:51:6b:4a:90:0a:87:b4:16:35: 5c:fb:bc:ef:a6:a9:6d:1f:7a:f8:b1:12:c5:8e:22: 98:15:53:9d:a2:62:cf:66:a2:8c:4e:1f:84:94:af: ae:51:37:db:89:7c:e4:ac:28:f2:40:52:b0:54:42: 96:8a:b4:a1:e3:fa:5c:00:bf:c9:87:9f:04:cb:a3: d2:9e:56:94:09:bf:46:48:2e:b9:ed:3f:ab:77:fa: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:3D:CA:1D:BC:30:AB:2E:8A:E7:56:F2:41:24:E0:B7:D7:13:80 X509v3 Authority Key Identifier: keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:06:56:0b:00:a4:83:3b:44:c0:be:2c:a0:7a:19:a4:de:91: 04:80:9a:75:2d:c6:92:9b:f0:4d:cf:42:94:36:34:b5:af:2f: 4e:29:33:8e:c2:f9:0f:8b:a1:28:3a:20:20:dc:67:5d:fc:c9: 17:fb:a8:4f:01:b8:61:6e:c3:c1:cf:20:78:96:0c:fc:97:5f: bf:db:30:1d:07:96:14:42:ff:8f:f9:8b:dc:7b:89:09:f6:af: 48:cd:18:fc:45:aa:0a:34:f3:2e:a8:d7:4c:3a:80:26:e9:6a: a1:db:b4:65:d1:61:2d:7c:5a:c4:49:a0:0a:5e:84:c8:6c:ef: ef:e8:5c:8c:57:66:c7:cd:88:e5:8b:42:36:39:cc:fa:c6:22: 22:aa:b2:4b:cf:5b:11:d0:f6:8d:aa:ba:0f:e6:b0:ec:b6:0b: 94:96:af:73:0d:d5:61:50:ea:8c:c5:57:7a:f4:5b:c2:ce:8b: 0d:43:91:e0:e1:c1:e3:c6:fc:ad:41:b2:8b:2b:09:b6:1d:8a: 96:0c:af:6c:15:86:5e:f7:52:fb:aa:83:1e:d9:c5:4b:71:54: 0c:50:d5:33:d6:78:bb:28:8b:2f:7b:15:33:9f:56:84:8e:57: 70:4a:8f:89:7f:d4:2b:cd:47:18:c5:1c:b9:0c:87:81:88:c8: 3f:9d:45:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qzk4QjExMC8GA1UEBRMoMEFGRTJCMjBBREU2QjlDMzBCOEIxODExRDE1RjFEMEQ1 NzRERTNERTAeFw0yNjA0MDUwODEzMTZaFw0yNjA0MTIwODEzMTZaMBgxFjAUBgNV BAMTDTY5ZDIxOTljLWM0MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCDcDWzt/KKjoTGus4RXUFYQn1q94jdYniKvlCH9/+mEI3aRUCvwBX+pJ0eBvu8 gIDWgRkU2KWx98iCob2sbI6lU4rPZTbFYny7vPPqi+qAQVUSSatOAud77L8zTmbY d5fxvN0mtbfQ1jIYO7BBza7cVRyNewQHxoozyBURS7RZLvPBwvo7kYSvK8h5YSEi 5JiztrWNgb/ontlL0EWR5EuG/B4A3eS7N3XysFFrSpAKh7QWNVz7vO+mqW0fevix EsWOIpgVU52iYs9mooxOH4SUr65RN9uJfOSsKPJAUrBUQpaKtKHj+lwAv8mHnwTL o9KeVpQJv0ZILrntP6t3+kxBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlNw9yh28 MKsuiudW8kEk4LfXE4AwHwYDVR0jBBgwFoAUCv4rIK3mucMLixgR0V8dDVdN494w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOThCLzc0MTA3Q0VFMDM2 NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNNTGl4Z1IwVjhkRFZkTjQ5 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Y0cklLM211Y01MaXhnUjBWOGREVmRONDk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OThCLzc0MTA3Q0VFMDM2NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNN TGl4Z1IwVjhkRFZkTjQ5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYBlYLAKSDO0TAviygehmk3pEEgJp1LcaSm/BNz0KUNjS1ry9OKTOOwvkPi6Eo OiAg3Gdd/MkX+6hPAbhhbsPBzyB4lgz8l1+/2zAdB5YUQv+P+Yvce4kJ9q9IzRj8 RaoKNPMuqNdMOoAm6Wqh27Rl0WEtfFrESaAKXoTIbO/v6FyMV2bHzYjli0I2Ocz6 xiIiqrJLz1sR0PaNqroP5rDstguUlq9zDdVhUOqMxVd69FvCzosNQ5Hg4cHjxvyt QbKLKwm2HYqWDK9sFYZe91L7qoMe2cVLcVQMUNUz1ni7KIsvexUzn1aEjldwSo+J f9QrzUcYxRy5DIeBiMg/nUXj -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:41 2026 by rpki-client