$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: /wouiQnN+YobyX91C4XclV40S+6IGsq33DnGbd2Kyw4= Subject key identifier: 23:49:B9:DF:B4:38:F0:D9:D9:3B:AC:66:08:FD:3B:28:51:9A:3E:B3 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 0333 Signing time: Sun 05 Apr 2026 00:52:12 +0000 Manifest this update: Sun 05 Apr 2026 00:52:11 +0000 Manifest next update: Sun 12 Apr 2026 00:52:11 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: rC0/RAM7rS/IgeXaLL8ZMdOejEMZDH81EA3imWJ93Hg=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: vDY7lV8edjns4HhVnBehxYGRkX0r+4hBoe2Cr3cXbqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Apr 5 00:52:11 2026 GMT Not After : Apr 12 00:52:11 2026 GMT Subject: CN=69d1b23c-3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:4a:94:de:a4:c7:f6:76:4c:5c:d0:61:f8: 08:54:7a:79:be:c7:df:93:0a:1c:48:9f:a8:b4:d6: 3e:8d:ac:3f:8f:95:43:af:bb:b2:ae:5c:56:9a:a8: 20:4c:01:c7:58:95:80:b9:ec:2b:23:ac:11:f8:4e: 5b:2d:5a:c2:94:06:97:d8:e1:eb:02:b5:6b:fa:4d: 7d:ac:91:e7:22:92:d3:0d:cf:cc:81:f8:65:76:20: 4c:69:c6:50:2a:9a:a3:b7:f0:96:cd:f2:17:d5:91: 7b:01:74:3a:76:5c:41:b8:1e:b8:42:c9:ee:06:83: ba:8e:83:a8:fd:97:26:5e:d5:51:f1:85:4c:4d:c5: fb:53:b5:ab:16:38:37:b5:a3:a2:07:9a:08:36:8d: 95:a8:22:08:22:77:d8:39:1d:69:49:5d:21:77:45: 51:f5:6d:8e:1e:d9:8b:da:6d:eb:6d:64:d8:3c:15: 5c:08:89:55:4d:54:ce:39:a6:86:b0:77:32:ad:be: 0b:59:c3:43:93:a3:fa:db:f3:4c:a5:10:e5:c5:fd: 0e:8b:02:e5:5e:30:81:58:a4:8e:07:aa:72:db:25: dd:b7:2d:e4:0d:84:a6:99:3d:e8:02:6c:30:58:de: e2:83:ef:7a:9f:a6:01:97:8c:98:79:a0:24:ab:50: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:49:B9:DF:B4:38:F0:D9:D9:3B:AC:66:08:FD:3B:28:51:9A:3E:B3 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6f:01:82:fc:f5:9b:05:fb:1b:c9:25:9a:19:86:aa:71:9f: a0:e6:fc:97:a0:94:14:06:b3:1e:cd:75:99:6d:63:32:60:70: f0:8b:75:62:ec:86:38:84:d0:30:20:f2:58:f8:7f:10:bd:d0: 98:09:ec:02:ba:49:f1:b4:33:33:6c:14:cb:75:f8:ed:28:85: c0:01:d3:c7:b2:62:ab:87:df:9a:b5:bf:ef:4f:61:29:dd:99: 01:5e:b3:df:b8:b2:f0:e0:01:3a:7a:c6:02:ed:b7:b6:48:29: 3b:0d:6a:47:51:7d:06:fb:0d:e2:25:b9:81:91:9b:20:b6:40: 19:ed:89:a5:b7:c7:c5:cb:b2:e9:62:b5:50:f5:22:2d:eb:05: 36:6d:d1:d8:1d:c3:5c:d9:2e:30:5a:96:94:f9:ec:99:24:4c: ae:e0:ab:7d:5e:8f:ab:3f:74:98:af:8d:ca:8a:37:87:1c:84: b2:b7:ce:7e:d8:5f:48:e1:36:c5:3a:3a:c4:25:9a:05:8a:25: bc:0b:7f:a5:48:31:fe:f1:25:3b:a8:42:a6:51:e4:4c:86:66: 9e:fb:1c:ad:c4:12:bd:69:a8:73:3d:7d:4e:44:c1:cf:15:35: 0f:19:f4:d2:7c:8d:c7:de:ab:6e:4c:4d:4a:28:e5:12:73:ce: 04:ae:c5:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjYwNDA1MDA1MjExWhcNMjYwNDEyMDA1MjExWjAYMRYwFAYD VQQDEw02OWQxYjIzYy0zNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gtKlN6kx/Z2TFzQYfgIVHp5vsffkwocSJ+otNY+jaw/j5VDr7uyrlxWmqgg TAHHWJWAuewrI6wR+E5bLVrClAaX2OHrArVr+k19rJHnIpLTDc/MgfhldiBMacZQ Kpqjt/CWzfIX1ZF7AXQ6dlxBuB64QsnuBoO6joOo/ZcmXtVR8YVMTcX7U7WrFjg3 taOiB5oINo2VqCIIInfYOR1pSV0hd0VR9W2OHtmL2m3rbWTYPBVcCIlVTVTOOaaG sHcyrb4LWcNDk6P62/NMpRDlxf0OiwLlXjCBWKSOB6py2yXdty3kDYSmmT3oAmww WN7ig+96n6YBl4yYeaAkq1BS8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNJud+0 OPDZ2TusZgj9OyhRmj6zMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsG8Bgvz1mwX7G8klmhmGqnGfoOb8l6CUFAazHs11mW1jMmBw8It1YuyGOITQ MCDyWPh/EL3QmAnsArpJ8bQzM2wUy3X47SiFwAHTx7Jiq4ffmrW/709hKd2ZAV6z 37iy8OABOnrGAu23tkgpOw1qR1F9BvsN4iW5gZGbILZAGe2JpbfHxcuy6WK1UPUi LesFNm3R2B3DXNkuMFqWlPnsmSRMruCrfV6Pqz90mK+Nyoo3hxyEsrfOfthfSOE2 xTo6xCWaBYolvAt/pUgx/vElO6hCplHkTIZmnvscrcQSvWmocz19TkTBzxU1Dxn0 0nyNx96rbkxNSijlEnPOBK7FVA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:05 2026 by rpki-client