$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: X2I0kNHyu7PQLX98oTEy6MTMdDGsW3V/KGZpppgKv/c= Subject key identifier: 1E:A9:4A:42:49:98:27:BE:7B:2D:5B:19:2E:BC:6D:02:3D:AC:64:55 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: CC Signing time: Sun 05 Apr 2026 06:24:04 +0000 Manifest this update: Sun 05 Apr 2026 06:24:04 +0000 Manifest next update: Sun 12 Apr 2026 06:24:04 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: yWENTBzhrnOArM6pe8VUbHBkjSfjBEwba27me2QsCn8=) 2: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) 3: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Apr 5 06:24:04 2026 GMT Not After : Apr 12 06:24:04 2026 GMT Subject: CN=69d20004-29b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:7b:41:ce:9f:44:d9:19:68:3a:9a:27:63: eb:e4:ae:db:dd:b0:ff:92:1f:11:c6:0d:2d:4b:91: 9a:91:cd:a6:64:fc:60:5d:fb:a7:df:87:9a:e3:c5: 89:02:e5:1a:7f:bc:56:1e:b4:84:24:f1:a2:33:0f: 05:66:f7:51:c5:4f:a6:85:a7:b2:8f:d3:a3:75:95: fd:2a:d6:fb:25:fd:c2:6a:dd:3d:64:39:54:56:6c: a0:4a:44:38:ad:b2:d3:bb:69:97:25:08:4d:71:60: 16:37:52:ce:5e:8a:05:43:23:13:1c:64:4e:33:63: 7f:9d:82:c9:7d:ea:ba:04:ad:f9:49:9e:90:5e:b4: c8:bf:d3:58:a1:fe:5f:66:0e:b1:46:cc:d2:2b:45: 9d:77:51:b1:57:ff:21:e1:58:06:f5:1c:b4:fa:e2: 66:e2:7b:e1:cb:d9:bc:96:c0:67:f6:c1:ad:7b:be: 3f:4a:2d:87:b9:a3:a5:25:f5:3f:26:72:53:ab:a8: 45:3b:6c:ab:b7:5e:97:15:4d:2a:e7:44:c6:a2:46: 16:18:32:6a:b7:21:78:fc:d1:fc:6c:ea:41:23:25: bf:84:85:16:70:53:9f:69:3d:e7:5f:25:d1:6c:5e: d5:1f:51:11:6f:3a:4c:b4:61:3b:0c:4b:5d:61:fa: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:4A:42:49:98:27:BE:7B:2D:5B:19:2E:BC:6D:02:3D:AC:64:55 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2f:3f:d5:a2:25:16:3d:2f:cd:9b:0c:9f:b1:c0:d1:b3:c5: e3:8f:0b:c5:d0:b8:d1:9a:16:34:c0:57:e4:ad:3f:98:22:35: bd:05:d4:ed:af:26:dc:e6:ce:31:ab:1c:de:c6:31:a8:22:41: 18:4c:d4:51:dc:14:f8:48:93:1a:71:55:0d:df:9f:f0:37:6e: 82:f6:6e:96:af:80:da:e9:88:65:10:63:d3:c5:48:32:bd:ed: a9:30:f6:0b:35:ee:22:f6:03:d8:21:b2:6c:a5:28:49:36:da: d6:1a:07:91:f6:fc:19:ac:51:0d:23:66:cd:9c:5d:63:e4:72: f9:af:27:06:88:f0:2c:d5:f1:08:da:9c:0f:4b:29:87:0f:16: 67:b6:28:98:ae:7e:d7:b6:e3:c5:05:4d:48:e0:eb:24:99:92: 23:d6:d9:8f:4c:2a:cb:e9:df:1b:1c:50:96:e5:5b:4b:14:0f: c5:ab:aa:bd:97:ed:44:3b:44:a3:31:8e:62:49:d6:0c:b0:85: 53:b3:c4:ab:6e:2f:10:2c:bd:ac:2e:ad:9d:11:0f:31:89:37: 3b:77:e0:7f:30:b5:ef:7b:43:14:d8:7f:99:e5:7f:83:0d:a5: 32:b1:b0:3d:5f:7f:18:78:00:32:76:fa:34:65:6b:de:ad:c7: e9:6a:77:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYwNDA1MDYyNDA0WhcNMjYwNDEyMDYyNDA0WjAYMRYwFAYD VQQDEw02OWQyMDAwNC0yOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19x7Qc6fRNkZaDqaJ2Pr5K7b3bD/kh8Rxg0tS5Gakc2mZPxgXfun34ea48WJ AuUaf7xWHrSEJPGiMw8FZvdRxU+mhaeyj9OjdZX9Ktb7Jf3Cat09ZDlUVmygSkQ4 rbLTu2mXJQhNcWAWN1LOXooFQyMTHGROM2N/nYLJfeq6BK35SZ6QXrTIv9NYof5f Zg6xRszSK0Wdd1GxV/8h4VgG9Ry0+uJm4nvhy9m8lsBn9sGte74/Si2HuaOlJfU/ JnJTq6hFO2yrt16XFU0q50TGokYWGDJqtyF4/NH8bOpBIyW/hIUWcFOfaT3nXyXR bF7VH1ERbzpMtGE7DEtdYfpt8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6pSkJJ mCe+ey1bGS68bQI9rGRVMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVS8/1aIlFj0vzZsMn7HA0bPF448LxdC40ZoWNMBX5K0/mCI1vQXU7a8m3ObO Masc3sYxqCJBGEzUUdwU+EiTGnFVDd+f8DdugvZulq+A2umIZRBj08VIMr3tqTD2 CzXuIvYD2CGybKUoSTba1hoHkfb8GaxRDSNmzZxdY+Ry+a8nBojwLNXxCNqcD0sp hw8WZ7YomK5+17bjxQVNSODrJJmSI9bZj0wqy+nfGxxQluVbSxQPxauqvZftRDtE ozGOYknWDLCFU7PEq24vECy9rC6tnREPMYk3O3fgfzC173tDFNh/meV/gw2lMrGw PV9/GHgAMnb6NGVr3q3H6Wp38w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:15 2026 by rpki-client