$ rpki-client -vvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft File: 0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json) Hash identifier: D8lh01SanZ4m0UXaB+KgRL4jV9KAq5KYKkNEPCMssqI= Subject key identifier: F8:60:3A:D6:EA:E1:70:D9:91:B5:6A:9C:0E:99:84:2A:1A:AE:93:BC Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F Certificate issuer: /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft Manifest number: 0243 Signing time: Sun 05 Apr 2026 02:03:26 +0000 Manifest this update: Sun 05 Apr 2026 02:03:26 +0000 Manifest next update: Sun 12 Apr 2026 02:03:26 +0000 Files and hashes: 1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: i51dM3IWUU4AcsyaMBcY2xRXg+TaqKubem4edz7I4j8=) 2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F Validity Not Before: Apr 5 02:03:26 2026 GMT Not After : Apr 12 02:03:26 2026 GMT Subject: CN=69d1c2ee-4337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:78:da:e0:f6:d7:22:4e:82:70:59:ab:a0: 85:e2:48:84:dc:89:86:51:0c:8a:b6:50:4a:ff:ca: 25:ea:55:e2:77:49:d7:13:15:ff:d4:35:75:58:ce: 0b:08:04:12:76:5b:d8:b0:ea:3c:c0:dd:74:52:0c: e2:c3:af:2d:ba:5f:31:03:4f:e4:48:00:af:32:4e: c5:d7:5f:76:66:2e:72:58:d1:71:3d:f7:ef:38:2c: 74:6a:07:fc:e8:2b:aa:fc:d5:61:ad:8d:ab:c3:3b: 5a:dd:93:65:0c:1c:6b:8f:21:f3:dc:45:6c:f5:74: f7:c6:f5:12:5b:e1:58:b3:43:82:14:2c:23:d3:e9: be:04:b1:69:89:bb:87:ad:b7:17:81:24:dd:fe:77: a8:54:d3:d2:6d:b5:72:23:64:be:91:f9:05:d8:1c: 27:df:86:42:0f:f9:44:40:24:f1:ad:88:1e:4f:0a: 70:bb:3c:a9:2e:6f:e3:08:10:5c:93:75:89:ab:f5: 98:e6:0b:51:d0:51:e3:bb:9e:d5:92:0d:a9:5a:59: aa:b3:39:82:03:32:90:39:cc:2e:5e:7d:cf:c4:b4: 5f:e0:24:51:28:a6:f6:0b:1e:47:f8:82:58:06:9d: a1:a8:2b:33:d6:6b:e7:b8:e9:05:6c:e9:a7:b4:31: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:60:3A:D6:EA:E1:70:D9:91:B5:6A:9C:0E:99:84:2A:1A:AE:93:BC X509v3 Authority Key Identifier: keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:fd:9b:9f:6a:eb:4b:7a:33:fe:65:0d:35:28:b1:08:ff:30: f4:c3:a8:18:ea:da:fa:11:4d:2d:59:35:1e:8f:41:a6:8f:65: 6e:a9:76:f9:41:5d:44:0d:62:4d:0a:be:51:61:96:eb:33:98: b4:c2:97:c3:a0:91:78:24:fb:8a:8b:9d:97:d1:27:e9:e7:45: 69:ad:8d:33:67:5b:91:32:9c:2e:19:e9:82:5f:a7:22:5f:07: 07:62:9e:7b:9a:5e:9f:a3:df:23:54:c1:9a:f0:00:7d:9e:c9: 84:80:5f:2c:ae:4e:40:a6:ea:98:56:1e:81:b7:bf:66:a4:99: ed:29:50:3b:bf:9d:95:e5:56:e7:69:5d:3c:59:97:39:08:09: b2:9c:fe:a0:e3:4f:45:12:35:21:14:d8:7f:9f:11:92:a7:cc: c7:2b:db:2d:81:86:29:ea:4e:74:b2:c3:76:d9:a4:03:b5:9c: f0:fc:39:29:21:b6:85:fb:4f:b6:6f:19:84:0f:eb:db:22:57: 53:0f:dc:4a:05:bf:40:dd:20:4d:91:4f:83:15:7c:3c:46:1e: 27:15:bd:c2:fa:29:14:44:1e:3d:ee:be:71:02:af:26:19:8b: 31:d1:80:fb:a3:e0:03:46:37:e7:12:2b:24:98:2b:5a:7d:9b: 9f:a5:01:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI0QTYxMTAvBgNVBAUTKEQyNzYyNjcyRDI5NzU4MEU0ODQyMjhDMTcxRTVBODkw NzMwQzE3NkYwHhcNMjYwNDA1MDIwMzI2WhcNMjYwNDEyMDIwMzI2WjAYMRYwFAYD VQQDEw02OWQxYzJlZS00MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lJ42uD21yJOgnBZq6CF4kiE3ImGUQyKtlBK/8ol6lXid0nXExX/1DV1WM4L CAQSdlvYsOo8wN10Ugziw68tul8xA0/kSACvMk7F1192Zi5yWNFxPffvOCx0agf8 6Cuq/NVhrY2rwzta3ZNlDBxrjyHz3EVs9XT3xvUSW+FYs0OCFCwj0+m+BLFpibuH rbcXgSTd/neoVNPSbbVyI2S+kfkF2Bwn34ZCD/lEQCTxrYgeTwpwuzypLm/jCBBc k3WJq/WY5gtR0FHju57Vkg2pWlmqszmCAzKQOcwuXn3PxLRf4CRRKKb2Cx5H+IJY Bp2hqCsz1mvnuOkFbOmntDH4BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhgOtbq 4XDZkbVqnA6ZhCoarpO8MB8GA1UdIwQYMBaAFNJ2JnLSl1gOSEIowXHlqJBzDBdv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjRBNi8xOEU1RDQ4NEMz QzMxMUVEQUE1QUNCNDdDNEY5QUUwMi8wblltY3RLWFdBNUlRaWpCY2VXb2tITU1G MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBuWW1jdEtYV0E1SVFpakJjZVdva0hNTUYyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjRBNi8xOEU1RDQ4NEMzQzMxMUVEQUE1QUNCNDdDNEY5QUUwMi8wblltY3RLWFdB NUlRaWpCY2VXb2tITU1GMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmf2bn2rrS3oz/mUNNSixCP8w9MOoGOra+hFNLVk1Ho9Bpo9lbql2+UFdRA1i TQq+UWGW6zOYtMKXw6CReCT7ioudl9En6edFaa2NM2dbkTKcLhnpgl+nIl8HB2Ke e5pen6PfI1TBmvAAfZ7JhIBfLK5OQKbqmFYegbe/ZqSZ7SlQO7+dleVW52ldPFmX OQgJspz+oONPRRI1IRTYf58RkqfMxyvbLYGGKepOdLLDdtmkA7Wc8Pw5KSG2hftP tm8ZhA/r2yJXUw/cSgW/QN0gTZFPgxV8PEYeJxW9wvopFEQePe6+cQKvJhmLMdGA +6PgA0Y35xIrJJgrWn2bn6UBKA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:22 2026 by rpki-client