$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft File: o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json) Hash identifier: XdiqgdGArdQfuTNJbABn6JC8DHwkxAH1clf24ntOHWg= Subject key identifier: 65:6A:7B:58:0C:A8:E5:5E:DF:F0:C0:72:CA:6B:33:58:F8:6B:21:F1 Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft Manifest number: 22 Signing time: Sun 05 Apr 2026 08:14:09 +0000 Manifest this update: Sun 05 Apr 2026 08:14:08 +0000 Manifest next update: Sun 12 Apr 2026 08:14:08 +0000 Files and hashes: 1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: 8NM2am0XBft1vregL3zS1AbwYEWurjK4+sPFAB5GGCo=) 2: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=) 3: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=) 4: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D Validity Not Before: Apr 5 08:14:08 2026 GMT Not After : Apr 12 08:14:08 2026 GMT Subject: CN=69d219d1-24f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:f3:1b:e0:2f:a4:6c:d3:8f:98:a9:e1:4a: 56:f5:5d:d6:03:71:e5:ec:b0:67:8e:10:28:9e:cc: df:9b:91:f8:cf:0b:37:14:cc:9e:9a:e4:bd:ff:f1: 9d:32:eb:4d:6a:b3:0e:52:6c:fd:3f:ed:b6:8d:f9: aa:dd:4d:25:22:18:83:9b:5a:84:d6:9d:8a:dd:9f: ae:f9:e4:34:5f:84:e0:81:b4:8d:52:b3:67:bb:49: 1a:7a:2a:4d:e2:62:29:69:c3:d8:c1:8a:36:33:4d: 80:8a:8e:d3:d1:47:06:4a:84:f4:84:9f:69:2c:85: 6d:4b:1f:76:5e:01:e1:95:47:f6:3a:a8:58:83:c5: d1:5e:f7:09:87:12:12:bf:76:60:21:e5:0c:b0:52: 4e:29:11:8f:54:7d:8d:b5:13:f4:87:28:e3:db:d6: 2a:e1:74:27:23:50:fc:08:9b:65:86:16:58:58:2f: 03:5d:72:3f:27:ba:35:68:89:7a:0f:1a:03:e5:6f: 3e:ec:fc:ad:de:11:89:dc:53:01:f2:02:dd:b4:96: cd:3d:23:71:f2:62:98:f5:0c:99:fd:1e:59:3b:07: 8c:18:15:5f:bb:6f:45:99:74:6f:ec:b0:84:11:dc: ad:72:c2:0c:31:e2:76:4a:43:1f:6e:c0:10:41:03: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:7B:58:0C:A8:E5:5E:DF:F0:C0:72:CA:6B:33:58:F8:6B:21:F1 X509v3 Authority Key Identifier: keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:97:81:46:46:3d:9b:bc:65:0c:fb:ef:a1:56:5d:be:82:e7: c2:e7:fc:ca:db:65:e6:66:36:40:60:b5:cc:71:6a:e9:dd:f8: b9:6c:fd:d4:de:36:6f:14:06:49:d7:fc:90:72:24:b0:8b:d1: b1:d0:15:75:ee:45:3d:83:85:77:4f:a9:95:b7:a2:24:f8:6e: 77:f9:1a:23:62:1d:24:00:8b:49:0f:6a:b5:39:43:5e:6d:cd: 39:ab:e9:b8:d6:9d:31:ff:f2:0a:4e:4e:a8:0b:f8:80:4c:77: 64:87:83:4f:17:0c:50:26:1b:71:0a:a7:b4:ae:a5:07:14:59: 26:10:8c:c7:26:1e:96:b0:c2:91:d1:9c:88:25:8e:53:6c:11: 80:04:99:7c:c1:2f:ff:78:2d:e1:60:01:eb:60:60:4a:36:ca: 3e:37:ed:a2:c2:80:97:bd:e5:9a:78:b8:f3:6b:69:95:0d:77: 8e:0c:8a:27:7f:6f:fa:c8:c5:8b:a5:5a:03:d7:0a:2f:94:60: cc:38:cd:14:63:42:bf:f1:a4:a0:b4:b3:a4:cc:8b:03:14:e6: fa:67:7d:3a:fe:9c:23:86:dc:58:4f:e8:28:ab:ac:b0:79:31: ff:8d:9f:f5:f5:75:b4:b4:cd:fe:b2:6e:b3:01:2d:8f:92:f3: 29:9e:3c:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzhFMjExMC8GA1UEBRMoQTM0NjY0OEI0QURGNEZDNUI0NzdDN0RBMkNGMDVCMTY4 NDM3REI1RDAeFw0yNjA0MDUwODE0MDhaFw0yNjA0MTIwODE0MDhaMBgxFjAUBgNV BAMTDTY5ZDIxOWQxLTI0ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz6fMb4C+kbNOPmKnhSlb1XdYDceXssGeOECiezN+bkfjPCzcUzJ6a5L3/8Z0y 601qsw5SbP0/7baN+ardTSUiGIObWoTWnYrdn6755DRfhOCBtI1Ss2e7SRp6Kk3i Yilpw9jBijYzTYCKjtPRRwZKhPSEn2kshW1LH3ZeAeGVR/Y6qFiDxdFe9wmHEhK/ dmAh5QywUk4pEY9UfY21E/SHKOPb1irhdCcjUPwIm2WGFlhYLwNdcj8nujVoiXoP GgPlbz7s/K3eEYncUwHyAt20ls09I3HyYpj1DJn9Hlk7B4wYFV+7b0WZdG/ssIQR 3K1ywgwx4nZKQx9uwBBBA2r/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZWp7WAyo 5V7f8MByymszWPhrIfEwHwYDVR0jBBgwFoAUo0Zki0rfT8W0d8faLPBbFoQ3210w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OEUyL0M4RjRBOEUyMDc5 OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhXMGQ4ZmFMUEJiRm9RMzIx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzBaa2kwcmZUOFcwZDhmYUxQQmJGb1EzMjEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 OEUyL0M4RjRBOEUyMDc5OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhX MGQ4ZmFMUEJiRm9RMzIxMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChl4FGRj2bvGUM+++hVl2+gufC5/zK22XmZjZAYLXMcWrp3fi5bP3U3jZvFAZJ 1/yQciSwi9Gx0BV17kU9g4V3T6mVt6Ik+G53+RojYh0kAItJD2q1OUNebc05q+m4 1p0x//IKTk6oC/iATHdkh4NPFwxQJhtxCqe0rqUHFFkmEIzHJh6WsMKR0ZyIJY5T bBGABJl8wS//eC3hYAHrYGBKNso+N+2iwoCXveWaeLjza2mVDXeODIonf2/6yMWL pVoD1wovlGDMOM0UY0K/8aSgtLOkzIsDFOb6Z306/pwjhtxYT+goq6yweTH/jZ/1 9XW0tM3+sm6zAS2PkvMpnjx/ -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:40 2026 by rpki-client