$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json) Hash identifier: 6rm9Rd1u2HjBU+JMeXdoF9nQpqTBK7IS1kSnE9MuugQ= Subject key identifier: BF:90:AB:F7:C0:DA:A5:68:37:62:A3:5A:AE:5B:96:6B:FD:09:37:7E Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft Manifest number: 43 Signing time: Sun 05 Apr 2026 07:52:17 +0000 Manifest this update: Sun 05 Apr 2026 07:52:16 +0000 Manifest next update: Sun 12 Apr 2026 07:52:16 +0000 Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: uWiysYqFfmDXd7kCzHqTeporRCB5qL4OyMtvGajjxhI=) 2: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=) 3: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D Validity Not Before: Apr 5 07:52:16 2026 GMT Not After : Apr 12 07:52:16 2026 GMT Subject: CN=69d214b0-3f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:db:f5:54:f6:df:00:ee:9a:ed:b1:f3:96: 59:ca:b5:c3:ae:a8:4b:83:42:73:8c:df:87:d3:4b: 98:65:de:04:d4:91:4c:a0:3e:7a:2a:fc:44:f1:a1: b8:d2:76:97:28:4d:93:ac:14:e8:50:98:a9:6a:b9: d0:b5:5d:0a:ce:42:9c:68:67:bd:7b:27:c2:19:64: 76:df:71:e0:62:1a:d7:8b:33:de:b6:5a:6c:78:8b: 81:a0:fb:ca:8c:3d:a8:7a:5f:cc:db:34:6f:95:3d: 27:3f:5b:f1:57:74:73:f6:e1:55:9f:cd:c2:21:71: f0:89:b2:c8:07:e4:c6:74:52:9f:61:47:eb:3e:96: 41:77:fc:fc:c8:72:b0:d2:7a:e2:72:3f:c5:19:cf: 13:c5:c6:89:f5:98:be:21:70:1f:e8:17:f1:ea:29: f8:b3:47:47:6d:c2:3f:2d:35:0b:24:e9:27:40:8f: 49:10:aa:bd:b7:b3:c3:0b:81:09:92:07:78:95:b1: a4:98:f7:49:af:57:7a:e1:11:d8:73:41:0c:c4:01: 35:7e:16:fa:19:95:06:28:f8:8c:42:4c:07:39:5e: 7a:8e:34:05:3c:95:7c:37:3a:78:3f:8e:67:0b:da: 1d:86:ce:70:80:40:77:d1:f5:f8:4a:ba:98:75:33: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:90:AB:F7:C0:DA:A5:68:37:62:A3:5A:AE:5B:96:6B:FD:09:37:7E X509v3 Authority Key Identifier: keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8e:74:47:8a:8d:21:06:a1:59:a1:06:1d:81:e2:59:e6:e1: ca:11:ba:34:72:1f:a7:15:e9:2c:21:1f:e9:fa:f8:72:a4:ee: 40:bf:98:9b:9f:47:d7:72:fd:c8:ac:42:0c:4f:e8:e1:74:f5: 5d:78:40:05:8a:21:b3:80:62:0a:6d:51:6f:3f:b8:01:dc:bf: 45:7c:5d:6b:0c:05:84:b9:a8:b5:5d:b9:6c:f0:ec:d5:2c:2b: e7:c8:d2:d7:c2:68:53:b5:2a:99:25:ad:de:39:3a:12:1d:e9: 21:5d:08:af:04:12:34:66:24:58:57:72:9f:9b:ff:e7:ef:9e: 2b:08:2e:6c:99:17:ad:e1:8a:cc:2f:69:fa:e7:21:9f:c6:b7: b3:83:ee:d0:45:3b:30:7f:c9:1d:60:30:e2:61:89:b1:eb:03: b9:84:7e:ef:64:89:26:14:ec:14:f7:23:00:a1:48:90:cc:d6: b8:86:09:df:a1:df:6a:1a:13:75:4a:f7:ec:17:49:ba:e1:62: ca:74:42:9d:82:12:d3:38:95:18:d2:66:b2:1d:ea:c4:d2:d4: 5c:00:58:6e:8b:03:90:07:47:31:4d:09:92:e0:cd:6d:ac:ba: 2b:2a:3e:c6:1b:87:49:f1:5e:cb:1e:b4:90:c1:c5:9c:25:49: d4:ce:85:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoQzhFQkMyNDVDMDRDRjNFNDZDRkVFNzgxMjM4N0NDMUQ1 QUQzOEU1RDAeFw0yNjA0MDUwNzUyMTZaFw0yNjA0MTIwNzUyMTZaMBgxFjAUBgNV BAMTDTY5ZDIxNGIwLTNmMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqItv1VPbfAO6a7bHzllnKtcOuqEuDQnOM34fTS5hl3gTUkUygPnoq/ETxobjS dpcoTZOsFOhQmKlqudC1XQrOQpxoZ717J8IZZHbfceBiGteLM962Wmx4i4Gg+8qM Pah6X8zbNG+VPSc/W/FXdHP24VWfzcIhcfCJssgH5MZ0Up9hR+s+lkF3/PzIcrDS euJyP8UZzxPFxon1mL4hcB/oF/HqKfizR0dtwj8tNQsk6SdAj0kQqr23s8MLgQmS B3iVsaSY90mvV3rhEdhzQQzEATV+FvoZlQYo+IxCTAc5XnqONAU8lXw3Ong/jmcL 2h2GznCAQHfR9fhKuph1M1drAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv5Cr98Da pWg3YqNarluWa/0JN34wHwYDVR0jBBgwFoAUyOvCRcBM8+Rs/ueBI4fMHVrTjl0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0FDRDRGQjVFREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JNOC1Sc191ZUJJNGZNSFZyVGps MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveU92Q1JjQk04LVJzX3VlQkk0Zk1IVnJUamwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OTQ2L0FDRDRGQjVFREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JNOC1S c191ZUJJNGZNSFZyVGpsMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPjnRHio0hBqFZoQYdgeJZ5uHKEbo0ch+nFeksIR/p+vhypO5Av5ibn0fXcv3I rEIMT+jhdPVdeEAFiiGzgGIKbVFvP7gB3L9FfF1rDAWEuai1Xbls8OzVLCvnyNLX wmhTtSqZJa3eOToSHekhXQivBBI0ZiRYV3Kfm//n754rCC5smRet4YrML2n65yGf xrezg+7QRTswf8kdYDDiYYmx6wO5hH7vZIkmFOwU9yMAoUiQzNa4hgnfod9qGhN1 SvfsF0m64WLKdEKdghLTOJUY0mayHerE0tRcAFhuiwOQB0cxTQmS4M1trLorKj7G G4dJ8V7LHrSQwcWcJUnUzoXl -----END CERTIFICATE-----Generated at Mon Apr 6 16:38:32 2026 by rpki-client