$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: M2o7oDWCeM26Lg3dPZhB+CgKc5G3kih0jB+X+fHr6X0= Subject key identifier: 3B:4E:F4:0A:83:3D:E7:73:26:AC:0E:B6:87:F6:D3:00:00:01:FC:FF Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 02D6 Signing time: Sun 05 Apr 2026 01:07:28 +0000 Manifest this update: Sun 05 Apr 2026 01:07:28 +0000 Manifest next update: Sun 12 Apr 2026 01:07:28 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: h2/nm2Cjis7lJXf6b+nkKy30kSuO8dm88YjiooJpXBk=) 2: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=) 3: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: vLKPklVP43k6OROJ42PijdvI9ys2gzzUNgh6DMpb1V4=) 4: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Apr 5 01:07:28 2026 GMT Not After : Apr 12 01:07:28 2026 GMT Subject: CN=69d1b5d0-f770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:bc:73:b4:dc:9e:9d:07:77:91:95:94:df: 7e:00:11:45:5a:12:95:74:ab:67:34:79:e2:ef:a6: 30:8c:76:ff:0c:9a:a1:60:0e:21:8a:f9:65:a1:4e: 8f:2e:e3:0b:57:de:b6:e1:b2:75:ba:66:9a:0a:f6: 49:4a:74:41:c6:8a:f7:f1:5e:6b:6f:90:bd:a7:0d: 68:52:82:95:34:18:7b:53:02:87:58:8b:66:f7:8b: 80:1d:72:46:4d:bc:8e:58:29:ed:b5:73:8f:73:0f: 2c:8f:7c:50:ed:d5:01:c1:6e:3d:e6:22:7f:16:bc: ff:e8:91:ed:3c:32:be:a5:43:76:9d:45:56:5e:e6: fd:ba:df:ce:4e:76:6c:ff:af:f4:7f:56:61:1b:96: 0f:1f:0d:98:8f:a7:5d:2a:71:c7:98:e6:c6:32:36: ec:15:5a:37:73:9c:0e:15:17:10:74:40:73:79:24: 8f:f0:f6:9b:5c:24:13:ec:bf:e3:91:bd:41:74:33: 65:4c:3c:e2:09:d0:02:57:1f:37:1b:09:25:18:eb: a6:19:e5:44:d5:48:62:5d:1b:d3:66:c7:c0:93:54: 12:77:25:ab:72:47:e5:bb:b1:52:b6:10:52:d1:96: 9a:f1:6f:12:67:b1:1a:0a:c4:a4:1b:17:b7:4a:bc: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4E:F4:0A:83:3D:E7:73:26:AC:0E:B6:87:F6:D3:00:00:01:FC:FF X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e4:8e:27:b5:7f:ba:f3:7d:e4:09:48:59:1b:e2:d2:f1:9c: 11:2d:b7:4f:7a:ae:2e:b6:db:29:5d:64:30:d3:1b:2c:df:e6: 92:43:2d:ac:ed:4a:d0:b7:93:57:03:b5:84:d2:f7:ec:b2:9b: 4f:6e:97:1b:e5:f3:c3:91:6c:47:0e:b5:2f:17:58:f8:68:c4: 65:2d:6c:f7:b4:12:41:fc:02:55:2f:29:c6:26:fa:4b:94:33: a4:ba:59:e8:ac:32:f2:2d:08:11:08:20:58:db:48:26:0d:f7: 71:f6:0f:f2:d6:eb:76:bc:75:3b:36:89:48:12:d9:7f:75:c6: 94:01:da:e3:ce:4c:e8:e8:5f:2c:79:4b:24:b4:8d:d1:d6:ff: 60:df:a0:f4:18:9d:e4:b5:25:05:61:5b:b6:ec:1a:a1:04:40: 26:40:38:a4:58:51:4f:3d:4e:50:21:9b:f2:64:42:01:38:cd: 52:23:e2:15:6b:64:55:8d:df:ff:e1:0d:02:b2:f4:13:f8:fa: 98:25:fc:f9:d9:78:70:6e:26:6b:d6:8b:6f:67:19:37:45:67: 7e:40:04:e5:c5:91:4f:59:7c:8f:e4:b2:d7:63:9a:d4:8b:22: 13:0a:9b:d7:6a:0b:f2:b2:57:1a:c7:b3:ed:d2:41:73:51:ae: b3:ef:50:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjYwNDA1MDEwNzI4WhcNMjYwNDEyMDEwNzI4WjAYMRYwFAYD VQQDEw02OWQxYjVkMC1mNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopi8c7Tcnp0Hd5GVlN9+ABFFWhKVdKtnNHni76YwjHb/DJqhYA4hivlloU6P LuMLV9624bJ1umaaCvZJSnRBxor38V5rb5C9pw1oUoKVNBh7UwKHWItm94uAHXJG TbyOWCnttXOPcw8sj3xQ7dUBwW495iJ/Frz/6JHtPDK+pUN2nUVWXub9ut/OTnZs /6/0f1ZhG5YPHw2Yj6ddKnHHmObGMjbsFVo3c5wOFRcQdEBzeSSP8PabXCQT7L/j kb1BdDNlTDziCdACVx83GwklGOumGeVE1UhiXRvTZsfAk1QSdyWrckflu7FSthBS 0Zaa8W8SZ7EaCsSkGxe3SrzluwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtO9AqD PedzJqwOtof20wAAAfz/MB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqeSOJ7V/uvN95AlIWRvi0vGcES23T3quLrbbKV1kMNMbLN/mkkMtrO1K0LeT VwO1hNL37LKbT26XG+Xzw5FsRw61LxdY+GjEZS1s97QSQfwCVS8pxib6S5QzpLpZ 6Kwy8i0IEQggWNtIJg33cfYP8tbrdrx1OzaJSBLZf3XGlAHa485M6OhfLHlLJLSN 0db/YN+g9Bid5LUlBWFbtuwaoQRAJkA4pFhRTz1OUCGb8mRCATjNUiPiFWtkVY3f /+ENArL0E/j6mCX8+dl4cG4ma9aLb2cZN0VnfkAE5cWRT1l8j+Sy12Oa1IsiEwqb 12oL8rJXGsez7dJBc1Gus+9Q5g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:25 2026 by rpki-client