$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: tOu03C0Q/iK3y/SnXzAc6FPYkd4SQczFN0gS73qUvhY= Subject key identifier: 78:65:75:3E:C6:A4:00:B9:4B:9A:E9:E4:2D:68:13:3A:0D:C8:62:8B Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: 014E Signing time: Sun 05 Apr 2026 04:33:13 +0000 Manifest this update: Sun 05 Apr 2026 04:33:12 +0000 Manifest next update: Sun 12 Apr 2026 04:33:12 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: 6StHROZUTJCHHhFE/kvs+PwsF8uFmFejvWPsdTi+ZmU=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: pj9aUMZT0p0mxgs9aMMBAdtewJzXJebkeL4JCQr84hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Apr 5 04:33:12 2026 GMT Not After : Apr 12 04:33:12 2026 GMT Subject: CN=69d1e609-96f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:d9:ed:c5:cd:5e:b6:e6:58:5d:52:24:7f: f7:e2:58:c2:17:8f:6b:51:41:62:38:5d:d6:a6:40: 69:19:ce:79:c6:1d:0d:9a:60:34:14:30:53:8e:13: ca:0f:55:67:f3:e3:09:b0:74:1d:01:6b:c9:95:76: 52:90:c7:bf:f4:1d:35:4d:85:44:63:a7:61:9f:f1: ba:f0:29:4c:99:b2:c3:dd:90:71:7f:9b:3d:f9:77: 9f:5f:9d:ac:d8:a5:74:f3:45:71:16:d6:0b:07:60: 9d:2a:0b:d6:79:ca:75:36:2e:1f:ea:b5:ef:02:86: ca:3f:50:17:96:13:55:7c:58:5a:b9:78:94:d6:1f: 02:2c:eb:a5:6a:aa:f2:18:2b:ff:e0:89:c1:ab:4c: 89:e0:c1:0b:e1:de:36:b0:cd:81:c8:a6:42:03:7a: bb:64:60:90:c1:26:e6:30:01:a7:32:71:6c:70:a5: 82:d7:0d:f7:6b:dc:da:1f:85:90:34:4d:ee:77:96: e1:0a:b1:a6:36:78:f0:19:11:19:75:6e:d3:b4:62: a7:26:62:84:ba:12:6a:d2:1e:83:a0:22:33:74:12: b5:18:f5:79:9c:a5:1b:55:c6:f8:78:05:4a:fb:28: 19:f8:7c:45:59:50:8d:84:d3:ab:4a:b7:e4:25:87: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:65:75:3E:C6:A4:00:B9:4B:9A:E9:E4:2D:68:13:3A:0D:C8:62:8B X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:3a:19:27:72:d7:76:65:34:6f:99:c7:2f:02:8a:02:10:f2: 27:46:75:c6:05:de:50:77:37:ac:93:95:5e:05:26:e7:68:f8: 22:72:c1:a1:fc:ba:c4:6c:b1:6a:c1:d9:9c:af:c9:ad:3c:da: 79:3d:37:d7:0a:e2:8a:cc:3d:13:d7:c4:70:b7:2f:e9:ff:c6: b9:3b:e8:09:d9:8b:2e:f9:95:c4:c5:c7:44:4f:f5:f3:03:05: a4:74:2c:3f:55:ea:b1:2b:5b:1f:43:a1:56:ea:34:80:34:a0: 26:bc:b1:15:01:52:6c:a8:ad:73:c0:43:16:3c:12:6a:b9:01: ff:16:33:09:19:16:ed:1d:e6:40:56:4e:9d:e6:df:b6:2c:43: 12:12:14:d2:84:2d:66:f4:5a:00:bd:82:1f:64:24:99:0e:6e: 4e:46:80:97:fe:ac:a7:32:48:12:f9:f3:da:fd:2a:b6:cf:8a: d8:90:31:69:9b:2a:96:f8:38:82:fd:d3:9e:f4:d8:ce:a5:eb: 75:8e:0c:1d:1b:78:79:b8:77:db:14:0e:b4:b3:f6:9d:32:5c: 8d:96:6e:ab:93:b6:43:8e:f2:66:c7:08:e2:fa:97:c0:e1:0b: 14:1c:b3:63:0c:71:fa:86:32:4c:cd:33:cd:a1:2c:03:2a:3c: 28:35:7b:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjYwNDA1MDQzMzEyWhcNMjYwNDEyMDQzMzEyWjAYMRYwFAYD VQQDEw02OWQxZTYwOS05NmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTvZ7cXNXrbmWF1SJH/34ljCF49rUUFiOF3WpkBpGc55xh0NmmA0FDBTjhPK D1Vn8+MJsHQdAWvJlXZSkMe/9B01TYVEY6dhn/G68ClMmbLD3ZBxf5s9+XefX52s 2KV080VxFtYLB2CdKgvWecp1Ni4f6rXvAobKP1AXlhNVfFhauXiU1h8CLOulaqry GCv/4InBq0yJ4MEL4d42sM2ByKZCA3q7ZGCQwSbmMAGnMnFscKWC1w33a9zaH4WQ NE3ud5bhCrGmNnjwGREZdW7TtGKnJmKEuhJq0h6DoCIzdBK1GPV5nKUbVcb4eAVK +ygZ+HxFWVCNhNOrSrfkJYf2cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhldT7G pAC5S5rp5C1oEzoNyGKLMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASDoZJ3LXdmU0b5nHLwKKAhDyJ0Z1xgXeUHc3rJOVXgUm52j4InLBofy6xGyx asHZnK/JrTzaeT031wriisw9E9fEcLcv6f/GuTvoCdmLLvmVxMXHRE/18wMFpHQs P1XqsStbH0OhVuo0gDSgJryxFQFSbKitc8BDFjwSarkB/xYzCRkW7R3mQFZOnebf tixDEhIU0oQtZvRaAL2CH2QkmQ5uTkaAl/6spzJIEvnz2v0qts+K2JAxaZsqlvg4 gv3TnvTYzqXrdY4MHRt4ebh32xQOtLP2nTJcjZZuq5O2Q47yZscI4vqXwOELFByz Ywxx+oYyTM0zzaEsAyo8KDV7Zg== -----END CERTIFICATE-----Generated at Mon Apr 6 12:28:38 2026 by rpki-client