$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: v+BDCI/ZB3B8xdtNMIAL2rFq5ukp3DSXTZ9Cdd8b9Zg= Subject key identifier: BE:F5:17:E1:69:57:5E:7A:D1:3C:BA:FD:1E:90:8C:C7:84:F2:9F:48 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0BD5 Signing time: Sat 04 Apr 2026 18:45:07 +0000 Manifest this update: Sat 04 Apr 2026 18:45:06 +0000 Manifest next update: Sat 11 Apr 2026 18:45:06 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: C1YE79Wk0QzkbhjGqjcVZEysVdNqY1E9FEGwnq4yY44=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Apr 4 18:45:06 2026 GMT Not After : Apr 11 18:45:06 2026 GMT Subject: CN=69d15c33-6927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:76:78:06:f7:31:59:d7:9e:e4:e8:d1:76: 19:2d:75:30:3b:6f:e3:3c:cc:11:07:b8:1f:da:ce: cd:c1:ea:bb:9b:43:cb:ff:82:34:f9:6a:13:f6:86: 89:ed:5f:be:0e:b9:eb:a6:6f:76:6c:f5:05:9a:b8: 4b:64:61:14:f8:bf:46:6a:13:2e:a0:94:8e:2f:34: f4:6d:57:5d:1a:d7:6f:eb:14:ce:07:c9:db:11:42: 58:34:df:5c:e3:d1:1d:0e:d9:d1:16:06:4d:05:57: 3b:13:99:92:88:0b:0c:4b:5d:f9:70:0c:d0:b0:90: 20:5d:43:4e:ac:7d:42:1c:4b:63:0c:d8:2d:93:9b: ba:40:36:6a:3a:01:e1:85:6f:2f:2f:bf:73:56:f2: 49:08:c6:5c:ff:e2:54:39:ee:d4:a2:31:06:10:10: 90:47:fb:2d:e3:91:3c:f1:1a:e4:3e:2e:9e:b7:e8: 6f:bf:5c:37:52:10:06:a8:fd:04:f1:e9:68:35:39: 05:e9:7f:52:aa:2f:a8:9c:c0:5e:ce:96:0c:2f:28: 33:a8:b0:a1:b6:c3:db:4e:78:44:ed:5f:e4:0d:d9: fe:65:bd:9c:ba:97:02:09:59:cc:e0:8e:75:3a:00: 8d:61:f1:68:58:f3:8e:80:48:e2:7a:f6:64:b5:44: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:17:E1:69:57:5E:7A:D1:3C:BA:FD:1E:90:8C:C7:84:F2:9F:48 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c4:79:24:8c:db:10:db:79:c9:40:df:70:30:e2:25:42:fb: 06:e4:6f:2e:b0:7b:d2:ce:a3:dd:21:97:d9:e8:6d:62:d0:1a: 65:32:cb:e1:70:62:54:31:99:c7:fd:3d:9a:fa:5c:4f:c0:d8: 13:98:d6:ef:f9:bf:df:d7:10:c9:6f:85:41:07:eb:19:f1:07: 98:4e:96:7a:16:e2:7b:a2:5f:04:68:b7:1d:94:5c:1b:8e:37: 1e:2e:37:9b:31:64:19:f2:40:05:a6:dd:cf:88:59:d6:bf:97: d6:af:a1:72:4e:92:2e:84:e9:67:a8:04:9b:85:eb:17:14:8b: 26:b4:95:0d:1e:82:66:a5:18:72:fe:4a:ae:d9:95:2c:e0:c4: ec:15:c5:0e:75:d7:bd:97:30:6e:e8:80:3a:da:ed:61:fe:81: fb:f5:1b:05:ef:04:ad:38:2e:cc:c7:d1:8f:8d:dd:a6:a1:74: 4f:74:19:a5:2f:6c:b1:83:9a:9c:1a:3b:74:85:53:e1:6d:6a: 77:6a:3f:f0:31:aa:6f:f8:e8:e0:b7:2f:15:bb:18:4b:8f:c1: 2d:e1:78:77:2a:a8:2d:f3:c7:de:86:40:37:32:ff:57:47:ac: 1c:90:6c:ee:c1:9a:2a:b3:b1:3f:c1:6e:e6:84:35:af:c2:8b: b7:8f:e1:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwNDA0MTg0NTA2WhcNMjYwNDExMTg0NTA2WjAYMRYwFAYD VQQDEw02OWQxNWMzMy02OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuh2eAb3MVnXnuTo0XYZLXUwO2/jPMwRB7gf2s7Nweq7m0PL/4I0+WoT9oaJ 7V++Drnrpm92bPUFmrhLZGEU+L9GahMuoJSOLzT0bVddGtdv6xTOB8nbEUJYNN9c 49EdDtnRFgZNBVc7E5mSiAsMS135cAzQsJAgXUNOrH1CHEtjDNgtk5u6QDZqOgHh hW8vL79zVvJJCMZc/+JUOe7UojEGEBCQR/st45E88RrkPi6et+hvv1w3UhAGqP0E 8eloNTkF6X9Sqi+onMBezpYMLygzqLChtsPbTnhE7V/kDdn+Zb2cupcCCVnM4I51 OgCNYfFoWPOOgEjievZktUS4OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL71F+Fp V1560Ty6/R6QjMeE8p9IMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAysR5JIzbENt5yUDfcDDiJUL7BuRvLrB70s6j3SGX2ehtYtAaZTLL4XBiVDGZ x/09mvpcT8DYE5jW7/m/39cQyW+FQQfrGfEHmE6Wehbie6JfBGi3HZRcG443Hi43 mzFkGfJABabdz4hZ1r+X1q+hck6SLoTpZ6gEm4XrFxSLJrSVDR6CZqUYcv5KrtmV LODE7BXFDnXXvZcwbuiAOtrtYf6B+/UbBe8ErTguzMfRj43dpqF0T3QZpS9ssYOa nBo7dIVT4W1qd2o/8DGqb/jo4LcvFbsYS4/BLeF4dyqoLfPH3oZANzL/V0esHJBs 7sGaKrOxP8Fu5oQ1r8KLt4/hsg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:56:38 2026 by rpki-client