$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json) Hash identifier: ppa3uxbixEzStWXdBr/fbsv9WGN2ktFYczi87KxwHck= Subject key identifier: 1F:E3:E6:26:6A:CB:1E:04:06:39:EF:C2:99:68:FD:66:9B:D9:35:63 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0DBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft Manifest number: 0D97 Signing time: Sat 04 Apr 2026 17:49:33 +0000 Manifest this update: Sat 04 Apr 2026 17:49:33 +0000 Manifest next update: Sat 11 Apr 2026 17:49:33 +0000 Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: 9Z+D4rr2qehKTKoipVyrduHmXkYTaC6bSyyu3eJyfqA=) 2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=) 3: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=) 4: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Apr 4 17:49:33 2026 GMT Not After : Apr 11 17:49:33 2026 GMT Subject: CN=69d14f2d-a216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:6b:5c:f0:3d:e8:cd:c7:44:72:5e:53:fd: 5a:ef:07:71:fe:b5:25:46:7b:65:64:6f:9a:2c:ca: 43:95:94:42:4b:37:56:d7:f0:d1:88:a0:d6:1d:17: 51:db:71:8d:6c:32:a7:f8:4c:5b:88:12:f3:56:75: d3:18:41:5c:95:ab:06:e9:ab:cf:96:17:d3:bb:9e: 80:c6:ad:71:95:e0:58:b1:a6:c2:61:5b:2f:06:3c: b9:16:65:ca:19:0b:dd:6b:a1:42:44:1e:6c:02:a4: 91:25:28:4b:53:9d:72:23:5a:ad:c9:b0:12:b9:87: 01:e0:ea:60:c5:1f:5a:05:af:ed:03:b7:66:cb:13: f7:f0:2d:80:48:e2:9d:a1:3f:72:93:18:e9:0f:69: d8:4c:dd:1d:db:fc:0f:2b:f7:59:4a:7c:ed:f3:b9: 34:f0:c9:9b:bb:d3:a3:13:df:50:39:41:14:74:1f: 45:3e:01:92:f8:bd:64:f3:4b:9d:76:e1:d5:2f:17: 36:09:5e:d3:ac:74:c4:11:99:ce:8f:19:e3:ee:79: 42:e7:85:94:53:86:31:52:a1:c4:ab:36:b3:dc:f4: 1e:19:2d:1b:7a:9f:b7:28:73:09:b8:8e:44:07:92: 33:63:b8:3f:85:7b:4c:89:f1:31:76:64:da:f2:3b: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E3:E6:26:6A:CB:1E:04:06:39:EF:C2:99:68:FD:66:9B:D9:35:63 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:53:79:83:a0:06:59:2c:f5:54:bb:de:ea:95:1b:45:78:33: 06:d8:1f:82:89:0a:3d:80:f9:3a:5c:92:e6:81:94:17:3c:00: 45:08:8d:86:36:2d:37:f0:e7:0e:28:a3:be:ff:b9:98:29:dc: 8a:db:3c:ff:31:50:a5:b8:de:ab:bf:3c:30:68:14:27:41:be: 0d:02:d3:d5:43:09:53:2a:f1:05:ec:3b:86:2b:d4:1c:74:b0: e5:cc:3a:94:7f:14:33:ae:e2:42:ab:8f:d2:59:c5:35:9d:12: 6d:72:55:1f:16:b7:f2:38:02:a1:b2:21:06:39:65:b9:a6:e2: 50:f5:c1:5d:c5:13:8a:50:45:76:7b:74:f9:8c:6f:e2:1b:e3: 2c:ce:44:f7:13:c2:b0:93:96:7c:6d:9c:c0:2f:65:4a:63:5a: b4:0a:6b:42:2f:6c:09:c5:f6:80:a9:cc:ce:b3:34:d6:c2:1c: 29:de:a0:ca:7a:4e:e1:f4:b0:bd:0b:2e:d0:3a:4b:17:13:d5: 1c:b2:c5:e9:28:b0:5a:97:9d:8e:b2:c2:b1:18:a5:5b:8f:44: bf:99:ef:b0:09:e0:84:1f:2f:07:d1:c5:a5:e0:0f:22:c6:a6: 85:9f:07:08:f0:93:a4:20:1d:56:7a:57:7b:9d:f5:75:31:f0: 53:90:f3:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjYwNDA0MTc0OTMzWhcNMjYwNDExMTc0OTMzWjAYMRYwFAYD VQQDEw02OWQxNGYyZC1hMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBZrXPA96M3HRHJeU/1a7wdx/rUlRntlZG+aLMpDlZRCSzdW1/DRiKDWHRdR 23GNbDKn+ExbiBLzVnXTGEFclasG6avPlhfTu56Axq1xleBYsabCYVsvBjy5FmXK GQvda6FCRB5sAqSRJShLU51yI1qtybASuYcB4OpgxR9aBa/tA7dmyxP38C2ASOKd oT9ykxjpD2nYTN0d2/wPK/dZSnzt87k08Mmbu9OjE99QOUEUdB9FPgGS+L1k80ud duHVLxc2CV7TrHTEEZnOjxnj7nlC54WUU4YxUqHEqzaz3PQeGS0bep+3KHMJuI5E B5IzY7g/hXtMifExdmTa8jtvDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/j5iZq yx4EBjnvwplo/Wab2TVjMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5 bXZURnlrNnhwZFBpQmh4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV1N5g6AGWSz1VLve6pUbRXgzBtgfgokKPYD5OlyS5oGUFzwARQiNhjYtN/Dn Diijvv+5mCncits8/zFQpbjeq788MGgUJ0G+DQLT1UMJUyrxBew7hivUHHSw5cw6 lH8UM67iQquP0lnFNZ0SbXJVHxa38jgCobIhBjlluabiUPXBXcUTilBFdnt0+Yxv 4hvjLM5E9xPCsJOWfG2cwC9lSmNatAprQi9sCcX2gKnMzrM01sIcKd6gynpO4fSw vQsu0DpLFxPVHLLF6SiwWpedjrLCsRilW49Ev5nvsAnghB8vB9HFpeAPIsamhZ8H CPCTpCAdVnpXe531dTHwU5DzvQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:59:04 2026 by rpki-client