$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: 3quDzXcIToD/X98cpuLKLfj3ZS1f0snOiG0j8FFLKQk= Subject key identifier: 85:EB:16:AF:E2:83:BD:CF:4B:5C:6B:85:D8:84:70:81:06:1A:CA:63 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 0508 Signing time: Sun 05 Apr 2026 00:37:59 +0000 Manifest this update: Sun 05 Apr 2026 00:37:59 +0000 Manifest next update: Sun 12 Apr 2026 00:37:59 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: aOfsvjY2+lih2BqgwU4F+TaGxRCghfWRoVJQPgk2n88=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Apr 5 00:37:59 2026 GMT Not After : Apr 12 00:37:59 2026 GMT Subject: CN=69d1aee7-9af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:d1:5d:5b:a3:3e:41:5f:68:2c:8b:4b:53: 14:a7:db:de:00:fc:ab:d4:03:25:31:05:90:b6:e0: e9:c3:cb:ae:46:08:fe:42:32:7a:e0:25:e5:0a:a9: a4:fc:d3:df:5b:b5:5a:8d:f1:41:f4:e9:84:de:9c: c9:df:7f:0e:39:38:65:0e:09:b0:8a:2d:0a:a4:09: d5:4f:97:5a:51:aa:dd:b9:0b:d4:5c:ab:b6:c0:d0: 0b:0b:23:c1:b5:25:41:fd:e8:fa:70:9f:d3:23:a8: e7:a3:89:5b:8f:18:70:9f:ea:90:9b:2b:63:fc:24: 7e:dc:b5:59:75:cd:1c:5a:f5:3b:a9:44:9a:e6:19: 5e:77:10:cb:58:35:67:b5:15:1f:91:43:8b:41:2a: 0e:1a:0a:1c:5f:1d:c8:33:49:09:2c:05:fb:be:71: 2b:a9:07:34:76:19:73:4b:52:63:6c:6c:f6:39:3d: ee:37:c3:f8:11:de:26:4c:89:c6:9d:92:2b:74:98: e5:1f:dd:5b:b0:c5:c4:17:c6:05:ca:1d:96:88:11: e5:0c:02:33:c3:99:79:db:ea:b0:36:d4:31:b7:cb: 2c:a6:a9:37:a5:7b:b7:1a:a6:22:c9:fa:d1:af:6a: 1f:d7:00:fe:99:0b:25:40:44:0d:5c:e3:e8:ce:9f: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:16:AF:E2:83:BD:CF:4B:5C:6B:85:D8:84:70:81:06:1A:CA:63 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7d:63:93:73:01:f2:7d:1f:4b:97:39:c6:28:d4:45:c9:ab: 82:61:af:64:3d:11:ac:c8:a7:b6:0d:03:e1:c9:30:2b:d8:f1: 29:37:c6:39:08:75:35:7a:fe:ad:52:47:e7:31:b7:62:00:ca: 31:39:e7:b5:07:b5:0d:36:bc:c7:60:e7:6f:1a:4c:74:0a:4d: 82:43:41:bd:f8:3e:30:cf:f1:6b:ea:05:3d:6b:18:95:9b:8b: a8:48:33:c7:a1:7b:44:61:58:2f:7e:cb:e0:a0:3f:55:08:84: 92:f0:63:12:a6:2e:a5:60:dc:f0:e2:70:32:88:cd:52:e9:6f: e9:b5:97:25:f1:07:f2:3d:23:d8:53:61:e6:ac:e6:d2:09:a8: 74:d4:53:cc:74:f6:80:13:ab:7e:db:64:b8:da:b8:9a:84:db: 32:84:a6:4a:fe:85:8a:64:c9:5b:83:51:7e:7e:2f:ea:dd:b0: b3:d7:f5:2b:b3:ae:67:88:f1:df:96:15:31:7e:0c:91:19:25: 2d:b2:8e:6f:a8:e2:8c:12:ac:a2:fe:30:ee:03:78:2c:38:26: 59:fe:39:5d:8d:a1:21:4f:d4:f5:a2:6b:eb:1e:11:e6:80:05: 10:21:24:7e:1a:7f:cd:49:a6:ba:4b:30:21:11:27:ef:ba:46: f1:a8:1b:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjYwNDA1MDAzNzU5WhcNMjYwNDEyMDAzNzU5WjAYMRYwFAYD VQQDEw02OWQxYWVlNy05YWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrbRXVujPkFfaCyLS1MUp9veAPyr1AMlMQWQtuDpw8uuRgj+QjJ64CXlCqmk /NPfW7VajfFB9OmE3pzJ338OOThlDgmwii0KpAnVT5daUarduQvUXKu2wNALCyPB tSVB/ej6cJ/TI6jno4lbjxhwn+qQmytj/CR+3LVZdc0cWvU7qUSa5hledxDLWDVn tRUfkUOLQSoOGgocXx3IM0kJLAX7vnErqQc0dhlzS1JjbGz2OT3uN8P4Ed4mTInG nZIrdJjlH91bsMXEF8YFyh2WiBHlDAIzw5l52+qwNtQxt8sspqk3pXu3GqYiyfrR r2of1wD+mQslQEQNXOPozp/T+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXrFq/i g73PS1xrhdiEcIEGGspjMB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsn1jk3MB8n0fS5c5xijURcmrgmGvZD0RrMintg0D4ckwK9jxKTfGOQh1NXr+ rVJH5zG3YgDKMTnntQe1DTa8x2DnbxpMdApNgkNBvfg+MM/xa+oFPWsYlZuLqEgz x6F7RGFYL37L4KA/VQiEkvBjEqYupWDc8OJwMojNUulv6bWXJfEH8j0j2FNh5qzm 0gmodNRTzHT2gBOrfttkuNq4moTbMoSmSv6FimTJW4NRfn4v6t2ws9f1K7OuZ4jx 35YVMX4MkRklLbKOb6jijBKsov4w7gN4LDgmWf45XY2hIU/U9aJr6x4R5oAFECEk fhp/zUmmukswIREn77pG8agb0g== -----END CERTIFICATE-----Generated at Mon Apr 6 11:18:45 2026 by rpki-client