$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json) Hash identifier: jXlCRgFDEHO6cq+H4OYvBBDq7NSJBjWhETbW53svx9c= Subject key identifier: 98:BD:10:70:2A:DC:DC:8C:AE:5C:CD:0B:C7:02:7F:5A:46:FD:72:C5 Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft Manifest number: 0B5D Signing time: Sat 04 Apr 2026 19:04:00 +0000 Manifest this update: Sat 04 Apr 2026 19:04:00 +0000 Manifest next update: Sat 11 Apr 2026 19:04:00 +0000 Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: Ogo+xTQAnV10gvdDhDnzD8fcmkB4f7BxISNBTCCj8eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91442B0, serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Validity Not Before: Apr 4 19:04:00 2026 GMT Not After : Apr 11 19:04:00 2026 GMT Subject: CN=69d160a0-8960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:3c:5f:09:9d:2a:ff:1f:f4:2d:58:5d:66: 5e:e5:90:c2:96:05:75:89:af:30:cd:83:0e:88:ac: d8:c2:e2:0d:9b:e7:65:d4:0f:eb:79:37:63:29:6b: a8:9b:4a:e2:53:e5:60:e4:49:7d:78:01:7f:bf:a6: 26:86:6f:43:28:a2:ab:d6:b7:54:eb:bc:7d:d8:10: b2:c7:f9:d0:6f:b4:ab:63:1d:1d:3a:30:aa:14:e5: 90:20:33:d3:98:96:30:d1:8c:40:58:cc:05:e5:5a: 75:fa:67:eb:71:b6:40:b1:bb:05:e2:ee:00:71:6c: 79:fd:6c:3a:df:4c:7f:eb:c7:06:70:b3:a6:21:c6: af:ed:b4:92:a4:4b:56:2e:2d:88:fb:a3:f3:fd:da: c8:95:cc:b6:de:2d:77:de:4c:29:d7:6b:81:0e:e2: c2:bd:15:46:4e:22:91:c4:0d:d4:65:e0:d7:28:4d: c0:d3:6a:56:0f:6f:6b:9b:de:11:eb:12:d0:bf:29: 83:19:76:7b:62:9e:10:48:b7:13:ef:b7:4d:64:d0: 4c:a7:10:00:0b:5c:9b:00:b8:a3:95:14:99:69:d9: 08:89:d2:62:fe:c1:dd:b1:36:57:e4:b4:df:6c:1f: 84:a9:43:9c:a8:61:86:23:ac:7e:8f:94:50:fd:51: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BD:10:70:2A:DC:DC:8C:AE:5C:CD:0B:C7:02:7F:5A:46:FD:72:C5 X509v3 Authority Key Identifier: keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:d8:d6:6d:c0:67:d3:79:05:f1:47:8c:ce:5e:f1:55:62: 21:c2:5e:03:ee:a9:be:36:ff:30:45:16:87:bc:f9:68:6a:e1: ef:b7:c2:8b:08:f1:81:dc:45:f9:51:78:96:34:8e:41:67:90: f2:d8:38:b1:b4:93:02:22:12:25:1d:a7:75:00:cf:72:b9:b1: 84:fa:0a:22:c1:c7:36:13:26:d5:69:95:a5:ce:f6:d3:c6:7c: a9:2d:af:84:ed:e5:84:81:41:49:c4:a8:49:34:90:c8:f3:eb: 0b:72:66:d6:08:99:e2:9c:6b:cd:19:e2:07:62:c0:e2:7e:14: 70:ce:66:23:94:bc:a3:09:4a:3e:cb:78:8b:49:b4:14:97:eb: ff:72:e0:aa:61:6b:53:86:1c:40:ee:c6:f8:02:24:37:37:88: e1:76:b6:78:1b:8f:b1:ab:21:1d:00:f3:bd:fa:86:3d:d9:6b: 25:34:8c:19:87:fa:3a:fc:a2:b2:f4:92:40:28:1e:d9:81:43: fe:e7:16:f4:84:2e:5e:69:b2:f0:c2:e5:d5:ae:e0:f7:66:de: 62:cd:4c:0e:9a:45:e5:8a:24:28:57:c3:78:e6:7e:ea:a2:c9: 50:db:42:8b:f6:80:71:9a:a0:70:36:43:c3:84:e8:6d:0e:59: b3:83:90:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyQjAxMTAvBgNVBAUTKDBCNDhBOEZCMkU2QkU3REY4RkVEMDdBM0M5MTlCMjND QTQwQkRFQ0EwHhcNMjYwNDA0MTkwNDAwWhcNMjYwNDExMTkwNDAwWjAYMRYwFAYD VQQDEw02OWQxNjBhMC04OTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zo8XwmdKv8f9C1YXWZe5ZDClgV1ia8wzYMOiKzYwuINm+dl1A/reTdjKWuo m0riU+Vg5El9eAF/v6Ymhm9DKKKr1rdU67x92BCyx/nQb7SrYx0dOjCqFOWQIDPT mJYw0YxAWMwF5Vp1+mfrcbZAsbsF4u4AcWx5/Ww630x/68cGcLOmIcav7bSSpEtW Li2I+6Pz/drIlcy23i133kwp12uBDuLCvRVGTiKRxA3UZeDXKE3A02pWD29rm94R 6xLQvymDGXZ7Yp4QSLcT77dNZNBMpxAAC1ybALijlRSZadkIidJi/sHdsTZX5LTf bB+EqUOcqGGGI6x+j5RQ/VF3JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJi9EHAq 3NyMrlzNC8cCf1pG/XLFMB8GA1UdIwQYMBaAFAtIqPsua+ffj+0Ho8kZsjykC97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDJCMC82NkUwQ0FENjU2 RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5LVA3UWVqeVJteVBLUUwz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwaW8teTVyNTktUDdRZWp5Um15UEtRTDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDJCMC82NkUwQ0FENjU2RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5 LVA3UWVqeVJteVBLUUwzc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp8rY1m3AZ9N5BfFHjM5e8VViIcJeA+6pvjb/MEUWh7z5aGrh77fCiwjxgdxF +VF4ljSOQWeQ8tg4sbSTAiISJR2ndQDPcrmxhPoKIsHHNhMm1WmVpc7208Z8qS2v hO3lhIFBScSoSTSQyPPrC3Jm1giZ4pxrzRniB2LA4n4UcM5mI5S8owlKPst4i0m0 FJfr/3LgqmFrU4YcQO7G+AIkNzeI4Xa2eBuPsashHQDzvfqGPdlrJTSMGYf6Ovyi svSSQCge2YFD/ucW9IQuXmmy8MLl1a7g92beYs1MDppF5YokKFfDeOZ+6qLJUNtC i/aAcZqgcDZDw4TobQ5Zs4OQgA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:10:07 2026 by rpki-client