$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: LeJrto4ebDDbM0m98NXxf3vDwohTMY8YMqwglW00wjI= Subject key identifier: C8:FB:C6:12:71:AF:17:9D:54:CA:1D:3F:E8:38:4E:4A:D9:B3:E8:75 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 04B2 Signing time: Sat 04 Apr 2026 23:43:03 +0000 Manifest this update: Sat 04 Apr 2026 23:43:02 +0000 Manifest next update: Sat 11 Apr 2026 23:43:02 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: DsKCSNqgN0Bp7gvI1mxDVuyGdLWmsZos2wDcuOnz9kk=) 2: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=) 3: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=) 4: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=) 5: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=) 6: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Apr 4 23:43:02 2026 GMT Not After : Apr 11 23:43:02 2026 GMT Subject: CN=69d1a207-3304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:c6:3f:e6:ef:5b:51:aa:96:d9:f3:f5:81: d2:cc:cd:43:38:1c:08:7d:06:fc:b8:25:fc:37:28: 14:ba:34:97:e1:42:8f:9f:b0:79:c9:40:63:a4:8f: 76:b5:c7:03:07:9a:b8:ad:2a:7d:c0:03:2f:4a:29: af:3a:f2:3d:bc:ff:1b:59:9d:74:88:39:55:d1:84: 7d:34:7b:f3:9f:77:f4:92:76:4d:77:42:36:70:6b: 33:ca:3f:71:42:5a:69:6f:68:1a:80:af:38:d0:ad: 18:71:48:ca:0d:3a:46:fb:f1:54:2a:b9:8a:38:f0: 21:d4:c0:bf:70:8a:96:7e:cd:c8:72:ee:d3:5a:ae: 9d:e0:4c:66:59:c4:2b:c1:1c:70:af:75:f8:89:e8: b0:5b:07:3c:61:25:b1:96:13:f8:07:e7:65:5d:44: c2:15:30:5c:e7:27:b1:ee:eb:ba:b8:d1:d9:ff:ed: 8e:3b:0e:98:e1:8b:b3:b6:73:33:2d:0b:96:2f:d6: aa:23:ba:17:8b:16:5b:fa:80:ec:c5:01:8d:8d:49: b9:03:f4:e9:13:f1:ce:f2:6f:39:c8:bd:c5:b6:b1: 64:ca:79:88:61:14:5a:40:71:09:06:42:da:c9:39: d2:1c:18:46:00:5b:63:1d:1c:d3:b2:c1:a4:d8:16: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:C6:12:71:AF:17:9D:54:CA:1D:3F:E8:38:4E:4A:D9:B3:E8:75 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:19:d2:c7:8c:e6:f5:26:ed:42:4a:f6:08:ad:00:d9:08:7b: 00:e1:f1:e4:0b:06:8e:b3:8d:65:bf:87:2b:be:b3:fa:03:59: fe:19:39:a6:b8:42:91:13:cc:df:82:4f:70:16:da:23:2c:8a: 62:36:93:63:69:4d:b6:a4:49:c2:dd:ee:4e:7f:4f:9e:99:b0: c3:ef:fb:39:5e:1b:f1:d2:00:f7:a0:bc:54:fc:ac:0b:74:97: fa:85:ac:f5:59:67:9c:0e:ed:0e:b3:82:5d:83:57:f5:8d:4e: 39:9f:92:5a:84:55:67:ba:c6:64:0d:35:80:92:08:3e:8c:67: 0e:39:bf:65:47:57:a6:87:48:fe:72:56:6c:01:d1:6f:ec:b5: 76:e0:ce:ec:a6:a2:d5:f9:f1:75:0a:1b:dc:d4:87:d7:2e:59: 64:c3:64:45:07:82:ba:43:0c:8b:00:b6:76:ac:d2:20:6d:0a: f7:cd:7e:40:8f:1f:dd:79:83:d2:08:20:d0:5a:b8:ed:14:0d: bd:1c:19:52:c8:f0:4a:fa:d0:59:11:e2:c2:83:b9:79:0a:57: a9:4d:ec:bc:a0:3a:90:e1:0b:79:0b:e5:a1:1a:c6:2b:5e:1c: 57:4a:44:bc:f3:27:80:b6:00:29:7e:8c:30:ef:96:d2:a7:78: 03:7f:93:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjYwNDA0MjM0MzAyWhcNMjYwNDExMjM0MzAyWjAYMRYwFAYD VQQDEw02OWQxYTIwNy0zMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rvGP+bvW1Gqltnz9YHSzM1DOBwIfQb8uCX8NygUujSX4UKPn7B5yUBjpI92 tccDB5q4rSp9wAMvSimvOvI9vP8bWZ10iDlV0YR9NHvzn3f0knZNd0I2cGszyj9x Qlppb2gagK840K0YcUjKDTpG+/FUKrmKOPAh1MC/cIqWfs3Icu7TWq6d4ExmWcQr wRxwr3X4ieiwWwc8YSWxlhP4B+dlXUTCFTBc5yex7uu6uNHZ/+2OOw6Y4YuztnMz LQuWL9aqI7oXixZb+oDsxQGNjUm5A/TpE/HO8m85yL3FtrFkynmIYRRaQHEJBkLa yTnSHBhGAFtjHRzTssGk2BYucQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMj7xhJx rxedVModP+g4TkrZs+h1MB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqxnSx4zm9SbtQkr2CK0A2Qh7AOHx5AsGjrONZb+HK76z+gNZ/hk5prhCkRPM 34JPcBbaIyyKYjaTY2lNtqRJwt3uTn9Pnpmww+/7OV4b8dIA96C8VPysC3SX+oWs 9VlnnA7tDrOCXYNX9Y1OOZ+SWoRVZ7rGZA01gJIIPoxnDjm/ZUdXpodI/nJWbAHR b+y1duDO7Kai1fnxdQob3NSH1y5ZZMNkRQeCukMMiwC2dqzSIG0K981+QI8f3XmD 0ggg0Fq47RQNvRwZUsjwSvrQWRHiwoO5eQpXqU3svKA6kOELeQvloRrGK14cV0pE vPMngLYAKX6MMO+W0qd4A3+TBw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:03 2026 by rpki-client