$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: 5G1AbpCeXHXKs2obtq28UZgdYLV9KbRM5FHK9S4JbKo= Subject key identifier: 0C:A5:06:13:49:5B:F4:0B:64:41:FB:E4:72:7B:5B:6E:47:D2:80:59 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 03BB Signing time: Sun 05 Apr 2026 00:28:53 +0000 Manifest this update: Sun 05 Apr 2026 00:28:53 +0000 Manifest next update: Sun 12 Apr 2026 00:28:53 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: v8uooQ8QJKqgfZC9wT/Xyl4bPz0NlAxRmTWNwfbFUXM=) 2: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=) 3: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=) 4: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Apr 5 00:28:53 2026 GMT Not After : Apr 12 00:28:53 2026 GMT Subject: CN=69d1acc5-6609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:49:d1:38:ba:75:09:fa:59:31:a8:a0:4b: c2:b3:58:a4:7e:f4:f5:da:dd:8c:6e:ee:f3:b2:b0: 14:94:e0:e8:90:0d:8f:46:65:04:d1:35:a9:23:af: 14:ae:3a:0c:b4:28:d1:95:fc:c9:87:bf:15:15:39: c0:1a:e5:bc:2d:4e:21:f8:ad:ab:de:a6:dc:77:c9: 55:3d:04:5d:f0:52:c9:c1:71:84:65:96:8b:ea:ef: ec:fc:e7:c0:d5:c7:46:5f:a5:24:7d:b5:ed:48:d5: 51:c4:ae:55:02:0d:a8:8d:c1:89:12:2f:3b:a3:02: 93:6b:7e:39:d3:bd:a2:33:3f:7d:24:ad:6d:74:f6: ab:b1:65:17:7a:7f:4f:eb:df:e5:03:90:70:62:42: 1a:9e:ab:16:38:0a:4a:0a:69:d5:fd:9c:63:98:71: 56:5e:39:b0:6b:0a:5e:05:68:ec:89:38:e2:9a:59: 87:2d:35:cc:d3:0b:c6:ad:71:b6:4d:9b:76:e8:85: 4e:85:ea:85:d8:f4:d3:78:4a:de:01:08:90:31:e5: ac:b3:4b:ab:1a:0e:a1:93:8e:41:24:80:e6:2a:8b: b3:59:4b:fa:09:fb:4c:6e:38:3c:41:6f:85:59:82: b2:8e:2d:10:b3:56:ab:1b:fd:c5:c6:14:9c:5b:a9: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A5:06:13:49:5B:F4:0B:64:41:FB:E4:72:7B:5B:6E:47:D2:80:59 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:32:99:5d:5c:54:13:02:ce:25:9d:f7:b2:e7:34:60:c9: 84:da:ed:9d:03:49:8b:ef:24:3b:b3:ed:ac:76:e6:42:5f:3d: 45:ab:1e:85:38:d0:37:84:85:ac:6e:8c:38:e1:bd:2c:3f:c7: ab:a6:f2:52:25:46:37:6f:f8:88:36:e5:62:13:11:28:e4:22: 4c:33:d0:38:ec:d9:e9:64:6c:78:a3:e9:1f:ee:ab:c5:f3:cf: 19:b7:d7:70:eb:d4:d7:17:de:92:75:70:28:83:0a:52:a9:e0: 5e:2a:41:22:a1:e9:2b:ad:8e:6f:1e:2f:10:95:f6:10:a7:d0: 93:83:bc:c6:dd:1e:04:fb:93:93:83:8e:ab:e6:76:f4:21:4a: b3:86:fa:25:d8:ec:0a:8f:9a:20:24:61:9a:6b:6e:6c:d8:2d: 9e:fa:f8:fc:c0:bf:4f:5d:64:b3:a1:8a:9c:4b:d6:3f:02:db: 9f:7a:e3:ba:79:46:fc:46:05:34:46:0b:1b:81:0d:46:b1:26: 61:59:c3:e5:0a:57:f1:f4:a5:90:80:33:0e:99:72:18:1d:a7: 11:02:9b:30:e9:c4:54:cc:05:a4:41:06:9d:24:f5:4d:ea:b5: d3:1e:f5:f0:3e:57:37:89:38:7b:3b:39:bb:c2:38:03:93:b2: e2:cf:66:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjYwNDA1MDAyODUzWhcNMjYwNDEyMDAyODUzWjAYMRYwFAYD VQQDEw02OWQxYWNjNS02NjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7NJ0Ti6dQn6WTGooEvCs1ikfvT12t2Mbu7zsrAUlODokA2PRmUE0TWpI68U rjoMtCjRlfzJh78VFTnAGuW8LU4h+K2r3qbcd8lVPQRd8FLJwXGEZZaL6u/s/OfA 1cdGX6UkfbXtSNVRxK5VAg2ojcGJEi87owKTa345072iMz99JK1tdParsWUXen9P 69/lA5BwYkIanqsWOApKCmnV/ZxjmHFWXjmwawpeBWjsiTjimlmHLTXM0wvGrXG2 TZt26IVOheqF2PTTeEreAQiQMeWss0urGg6hk45BJIDmKouzWUv6CftMbjg8QW+F WYKyji0Qs1arG/3FxhScW6nE+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAylBhNJ W/QLZEH75HJ7W25H0oBZMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgaoymV1cVBMCziWd97LnNGDJhNrtnQNJi+8kO7PtrHbmQl89RasehTjQN4SF rG6MOOG9LD/Hq6byUiVGN2/4iDblYhMRKOQiTDPQOOzZ6WRseKPpH+6rxfPPGbfX cOvU1xfeknVwKIMKUqngXipBIqHpK62Obx4vEJX2EKfQk4O8xt0eBPuTk4OOq+Z2 9CFKs4b6JdjsCo+aICRhmmtubNgtnvr4/MC/T11ks6GKnEvWPwLbn3rjunlG/EYF NEYLG4ENRrEmYVnD5QpX8fSlkIAzDplyGB2nEQKbMOnEVMwFpEEGnST1Teq10x71 8D5XN4k4ezs5u8I4A5Oy4s9mxw== -----END CERTIFICATE-----Generated at Sun Apr 5 21:07:14 2026 by rpki-client