$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: Zqh3zuZWHsOHVhSlqLIcPCt6tuGw0KgOXo85KHvXUG0= Subject key identifier: 49:E5:BC:B4:66:C2:A1:12:2B:59:C9:F0:D0:0C:76:93:96:D2:75:71 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0CC9 Signing time: Sat 04 Apr 2026 18:13:33 +0000 Manifest this update: Sat 04 Apr 2026 18:13:32 +0000 Manifest next update: Sat 11 Apr 2026 18:13:32 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: B9pEKO5KVN1jMyps+XG9akGwvZ+aChW/k9iweW3lR0U=) 2: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: gFZOTu8d2L6s2nLA0DenUPFZSyNTRHDF7VZSiFkBhgE=) 3: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: Eji1oSGr80uG2ZkEWDi3XKFH3aT7cQe4W8HidYlRHQU=) 4: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: vuC9fsOD+G1Pf+DWd9JdWxJswFxAOiFEQCkKOOQygnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Apr 4 18:13:32 2026 GMT Not After : Apr 11 18:13:32 2026 GMT Subject: CN=69d154cd-f4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:de:a1:3c:34:87:bf:c1:b7:57:78:35:6e: 26:35:d6:f8:20:67:4d:1f:46:a1:35:64:74:57:f5: fd:e2:6c:87:a0:74:9b:7e:32:34:59:f1:16:0d:b5: 7b:d8:e6:72:b0:2c:1a:78:05:97:10:65:c2:5a:89: 80:a3:1a:b9:97:93:87:1a:6e:cf:19:5b:4b:28:58: bd:8f:5e:8e:0b:db:0a:fe:b5:6b:4d:a5:36:f0:76: c2:83:4e:b0:23:8d:ea:b5:9c:25:3e:37:c0:f9:4e: 2a:bc:0e:77:d0:b8:55:07:8f:31:91:b7:65:15:f7: d0:12:53:6c:8a:6f:71:d4:bc:c2:42:b3:aa:e3:da: b2:3c:57:67:4a:c8:ac:40:41:0f:5f:26:41:d0:3f: 39:30:c1:4d:27:e9:79:d4:5b:b5:d5:1c:9f:73:76: ed:ac:d5:dc:c5:52:3b:a4:de:a0:25:83:75:c7:cf: 80:6b:76:6c:75:42:c6:a3:ef:2b:a6:bc:3b:b6:cd: 3f:ba:2c:92:7c:96:f5:8e:8a:38:77:bf:5f:de:90: bb:93:66:48:dd:5e:ba:cc:c6:97:12:e8:74:18:aa: 8a:b5:6b:6d:14:3d:e8:aa:2f:72:5a:92:c7:59:78: 56:b5:60:81:6e:ff:49:e2:61:48:74:d7:94:7f:99: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:BC:B4:66:C2:A1:12:2B:59:C9:F0:D0:0C:76:93:96:D2:75:71 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:bf:e8:76:dd:23:7c:5f:5a:f7:06:1c:0e:b4:51:ce:8c:65: 7a:d7:11:5c:a5:b5:cb:8b:66:53:cf:d6:1d:5e:f8:df:63:5b: f1:66:fd:d1:d3:e0:ed:4a:88:19:3a:b8:44:41:40:d9:98:d4: 4b:10:c3:7e:5f:19:ae:e4:53:fa:a9:86:52:da:49:65:05:ab: f8:54:db:88:e7:1e:9e:0b:de:a3:05:31:84:1f:fe:dc:dc:43: ea:f1:f4:64:1d:6d:63:8a:ff:fb:db:2b:73:b6:d1:54:83:e0: 95:76:48:0a:0f:5b:b9:37:f1:2c:a0:a4:45:55:77:6d:b2:ef: 94:98:44:e1:54:91:83:7b:82:ab:2d:c4:06:a3:db:20:95:83: e8:30:b7:69:63:e5:44:bd:c4:b8:0b:64:31:67:2a:17:38:e8: 20:0c:85:75:86:b8:e4:2b:7e:31:39:f3:39:35:80:98:ad:07: 7a:01:52:f8:eb:c4:5d:3b:10:bd:e9:22:e8:72:49:e9:38:0e: da:77:01:32:c9:54:94:f8:7a:25:94:ea:15:97:39:30:18:43: 05:e0:9f:05:b2:9c:f5:cf:d4:fb:e6:f5:b2:a5:d6:b9:d7:9b: 42:32:0c:6d:98:03:ef:fe:65:04:19:12:d1:ce:ed:e5:32:41: 03:38:90:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwNDA0MTgxMzMyWhcNMjYwNDExMTgxMzMyWjAYMRYwFAYD VQQDEw02OWQxNTRjZC1mNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ETeoTw0h7/Bt1d4NW4mNdb4IGdNH0ahNWR0V/X94myHoHSbfjI0WfEWDbV7 2OZysCwaeAWXEGXCWomAoxq5l5OHGm7PGVtLKFi9j16OC9sK/rVrTaU28HbCg06w I43qtZwlPjfA+U4qvA530LhVB48xkbdlFffQElNsim9x1LzCQrOq49qyPFdnSsis QEEPXyZB0D85MMFNJ+l51Fu11Ryfc3btrNXcxVI7pN6gJYN1x8+Aa3ZsdULGo+8r prw7ts0/uiySfJb1joo4d79f3pC7k2ZI3V66zMaXEuh0GKqKtWttFD3oqi9yWpLH WXhWtWCBbv9J4mFIdNeUf5lBKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnlvLRm wqESK1nJ8NAMdpOW0nVxMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7/odt0jfF9a9wYcDrRRzoxletcRXKW1y4tmU8/WHV7432Nb8Wb90dPg7UqI GTq4REFA2ZjUSxDDfl8ZruRT+qmGUtpJZQWr+FTbiOcengveowUxhB/+3NxD6vH0 ZB1tY4r/+9src7bRVIPglXZICg9buTfxLKCkRVV3bbLvlJhE4VSRg3uCqy3EBqPb IJWD6DC3aWPlRL3EuAtkMWcqFzjoIAyFdYa45Ct+MTnzOTWAmK0HegFS+OvEXTsQ veki6HJJ6TgO2ncBMslUlPh6JZTqFZc5MBhDBeCfBbKc9c/U++b1sqXWudebQjIM bZgD7/5lBBkS0c7t5TJBAziQ5g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:12 2026 by rpki-client