$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: GpNduDrGol3vEwHIuhNlz78PEBZ51/HsM780q97fGco= Subject key identifier: 6C:CA:62:6B:A4:E5:ED:CF:F3:47:CF:87:2E:00:24:61:FA:E5:85:30 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0D3E Signing time: Sat 04 Apr 2026 17:53:08 +0000 Manifest this update: Sat 04 Apr 2026 17:53:07 +0000 Manifest next update: Sat 11 Apr 2026 17:53:07 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: 19HurnZAXd/XY1hX0pjvv5bnxM7Mt+pmaUmZ/p0o2Kg=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: Ffz0/550gPeWO1uoSNPGxqvr0nsdzbXHysPRag2LkXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Apr 4 17:53:07 2026 GMT Not After : Apr 11 17:53:07 2026 GMT Subject: CN=69d15004-d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:4b:0f:b7:3f:f5:a4:1d:6c:47:d7:30:ee: 81:5b:30:d1:bc:d7:ba:e3:cb:68:6e:70:2d:39:aa: 3f:ee:73:44:f0:0e:13:e3:df:5a:3b:b5:23:c6:3d: f7:83:3b:2b:50:43:0f:2c:3a:bd:04:6a:02:e3:34: d5:cd:6d:40:74:fa:7b:92:36:59:13:ad:9f:1b:c1: 5a:d3:97:ae:32:b7:4d:1e:ce:ad:34:99:dc:2d:a6: 07:ae:01:fb:92:cd:cc:96:df:dc:1a:16:d0:62:aa: f0:57:46:5c:aa:37:4f:42:61:de:dd:6b:5b:3b:a6: 9e:5c:d8:5e:18:46:8c:dd:da:e5:dc:e6:fe:9c:22: b0:2f:2a:61:a6:88:91:d6:b7:88:ae:83:e2:45:73: be:fc:fa:da:a9:5e:d0:1f:bb:de:57:81:4b:27:c4: d9:5d:78:e4:95:bf:eb:71:aa:76:12:39:98:b7:94: 8f:fa:9b:72:fa:d1:c5:3b:39:ba:6e:39:70:87:5b: a0:de:44:ce:da:32:48:71:2f:9f:35:58:ce:e7:0c: 3c:16:d6:25:b8:5d:83:e2:49:0e:74:e4:f5:6a:6a: 77:8f:3e:84:fa:f6:c1:5d:21:e1:3f:6b:31:c7:9a: 3f:6e:c1:df:7b:68:3d:cb:64:99:64:68:35:46:a3: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CA:62:6B:A4:E5:ED:CF:F3:47:CF:87:2E:00:24:61:FA:E5:85:30 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d5:fa:de:39:db:47:eb:28:a1:a1:3d:f3:c8:a6:db:b4:21: 28:c9:3f:7c:7d:69:84:a7:a3:42:c9:33:f8:17:66:fd:6c:fc: c6:75:e4:a1:1c:c9:c9:38:2f:90:81:7f:55:f4:df:81:0a:0d: 7d:91:65:7a:82:f4:d8:ae:fd:66:cd:c5:52:7f:10:96:3e:5f: 9f:e8:0e:03:a8:bb:e9:16:c0:41:5a:19:fc:2a:cc:9a:ed:bb: 1a:98:59:3e:73:7e:49:08:3e:a2:2f:65:be:9c:57:fa:51:fb: fd:c5:d6:2a:fb:4a:a5:6d:be:78:79:07:f5:01:96:ec:07:e9: 41:ca:e9:44:65:ec:7f:05:b0:8a:ca:d4:d1:fb:b5:f2:6c:aa: 86:76:3f:d7:fd:ea:34:ee:da:bf:1c:f8:9e:90:29:2c:0d:c7: a9:26:d1:25:23:9a:f5:d2:cd:8d:8a:73:f4:60:c0:3a:f3:53: 2f:2b:fa:84:13:b0:fa:96:7a:b2:3b:0e:27:1c:f5:6f:0a:3c: 37:3a:64:14:ad:cb:fa:19:6a:68:da:59:72:26:9f:4d:0c:bc: 65:1d:8c:73:88:00:56:ed:33:bc:9c:0b:b9:9e:66:8d:16:cb: 3f:0d:98:ad:3b:4c:dd:5c:7d:9a:ce:74:57:f0:04:65:e9:f3: 7b:2a:59:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjYwNDA0MTc1MzA3WhcNMjYwNDExMTc1MzA3WjAYMRYwFAYD VQQDEw02OWQxNTAwNC1kNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMNLD7c/9aQdbEfXMO6BWzDRvNe648tobnAtOao/7nNE8A4T499aO7Ujxj33 gzsrUEMPLDq9BGoC4zTVzW1AdPp7kjZZE62fG8Fa05euMrdNHs6tNJncLaYHrgH7 ks3Mlt/cGhbQYqrwV0ZcqjdPQmHe3WtbO6aeXNheGEaM3drl3Ob+nCKwLyphpoiR 1reIroPiRXO+/PraqV7QH7veV4FLJ8TZXXjklb/rcap2EjmYt5SP+pty+tHFOzm6 bjlwh1ug3kTO2jJIcS+fNVjO5ww8FtYluF2D4kkOdOT1amp3jz6E+vbBXSHhP2sx x5o/bsHfe2g9y2SZZGg1RqNyqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzKYmuk 5e3P80fPhy4AJGH65YUwMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF9X63jnbR+sooaE988im27QhKMk/fH1phKejQskz+Bdm/Wz8xnXkoRzJyTgv kIF/VfTfgQoNfZFleoL02K79Zs3FUn8Qlj5fn+gOA6i76RbAQVoZ/CrMmu27GphZ PnN+SQg+oi9lvpxX+lH7/cXWKvtKpW2+eHkH9QGW7AfpQcrpRGXsfwWwisrU0fu1 8myqhnY/1/3qNO7avxz4npApLA3HqSbRJSOa9dLNjYpz9GDAOvNTLyv6hBOw+pZ6 sjsOJxz1bwo8NzpkFK3L+hlqaNpZciafTQy8ZR2Mc4gAVu0zvJwLuZ5mjRbLPw2Y rTtM3Vx9ms50V/AEZenzeypZPg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:34 2026 by rpki-client