$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: SWh781zAeHBC3p3sez3KrTBnRsaksRa1f2W5bot/Y+Y= Subject key identifier: 8C:2C:44:43:8B:22:E1:0E:33:3E:C0:BE:F0:AC:EA:2F:B1:55:DC:23 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 048E Signing time: Sat 04 Apr 2026 23:51:37 +0000 Manifest this update: Sat 04 Apr 2026 23:51:36 +0000 Manifest next update: Sat 11 Apr 2026 23:51:36 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: yXSX4vNZZndNuvGIm5CEAg5Fn61TFTrfZ3Uf7XhIaag=) 2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: 2HGFVACffkGhDeLHJzK3N3Q2oFmACWhF8TcKRliN94o=) 3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: uBxr7p6TwpA9INGB4KedC2EYtx+upfxJFxMsenv5Y3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Apr 4 23:51:36 2026 GMT Not After : Apr 11 23:51:36 2026 GMT Subject: CN=69d1a409-17e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:2d:df:73:e3:6a:fb:92:44:ca:8f:48:cc: 7f:53:7a:0e:2a:be:39:73:4a:b1:d4:36:3d:cb:67: 8f:08:f8:62:94:56:d1:73:9e:a7:7c:c1:9b:91:6b: 6f:00:15:fc:53:71:49:dc:7b:36:da:7e:d2:44:da: 28:8a:17:03:a4:c5:00:2a:3d:31:31:ef:ca:e4:55: b0:88:ab:66:0f:46:78:87:fd:9f:a0:77:f1:c3:44: 03:5c:13:4c:00:de:7b:44:f9:b2:d9:81:3a:f3:44: 7b:d4:ae:c8:92:06:26:07:5a:66:e3:b7:cf:dd:55: dc:7a:94:01:47:75:dc:36:46:ca:34:e5:89:d9:c7: 04:86:59:15:b5:52:ec:b5:4a:4d:11:5a:68:9d:a2: af:8d:c7:f2:40:22:6e:c9:26:84:44:f1:7b:c6:af: 13:47:76:4b:e9:b0:26:e7:cb:41:7e:72:ab:a0:ad: 10:20:ec:3b:6c:bf:d3:54:a5:d2:36:df:14:4c:0e: 1a:3a:5b:57:dd:0f:89:b7:99:bf:d4:8b:8a:6a:0e: f1:81:64:f3:97:c5:66:33:6c:33:da:e5:42:2f:44: ac:b9:82:bc:5e:e8:bd:49:d2:4f:59:9f:b8:6e:9d: a8:98:c7:5c:49:ee:23:f4:6c:66:7d:6f:6a:26:e4: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:44:43:8B:22:E1:0E:33:3E:C0:BE:F0:AC:EA:2F:B1:55:DC:23 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:46:3a:55:10:52:83:23:56:0a:20:bb:e1:4f:0f:c5:54:72: 67:ce:d9:6d:1d:cc:62:9a:0e:10:56:43:32:22:e3:86:de:fd: 07:16:a8:03:12:7e:12:8c:3a:2c:8b:20:86:7e:3b:ed:1f:cd: 6e:20:c0:3a:f5:a7:08:0b:95:3b:90:e8:6e:ed:2b:06:fe:9d: 2a:2d:07:a1:05:34:44:be:55:e0:f2:cd:dd:8b:19:90:22:bb: e2:54:97:e5:e4:7a:39:5e:ca:d1:7f:43:ff:50:ba:26:3d:61: 50:1b:c3:7d:24:91:06:33:a8:ca:75:f7:a1:1c:6a:47:2b:e8: bc:89:ff:2a:0c:16:b1:35:b6:b8:ec:70:04:4c:d0:5a:4d:da: 46:fd:7c:63:d5:ce:ec:bd:ba:49:48:71:5e:93:25:2e:10:15: 23:24:cf:a3:2b:b9:e1:4f:81:53:b9:7b:2c:62:bd:a0:18:ed: b7:4d:52:e3:53:f6:8d:1b:7b:e8:f3:d8:de:d0:3d:f3:53:72: 83:83:2c:5e:10:b2:c7:20:d3:19:e0:76:37:65:61:8c:92:9b: b2:cd:b1:cb:24:d8:f1:b0:12:95:4b:4d:36:83:2a:a9:11:4c: 2a:50:85:2c:6a:21:10:0b:f5:29:35:04:39:a9:c4:8f:8d:eb: e5:7f:76:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjYwNDA0MjM1MTM2WhcNMjYwNDExMjM1MTM2WjAYMRYwFAYD VQQDEw02OWQxYTQwOS0xN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6Mt33PjavuSRMqPSMx/U3oOKr45c0qx1DY9y2ePCPhilFbRc56nfMGbkWtv ABX8U3FJ3Hs22n7SRNooihcDpMUAKj0xMe/K5FWwiKtmD0Z4h/2foHfxw0QDXBNM AN57RPmy2YE680R71K7IkgYmB1pm47fP3VXcepQBR3XcNkbKNOWJ2ccEhlkVtVLs tUpNEVponaKvjcfyQCJuySaERPF7xq8TR3ZL6bAm58tBfnKroK0QIOw7bL/TVKXS Nt8UTA4aOltX3Q+Jt5m/1IuKag7xgWTzl8VmM2wz2uVCL0SsuYK8Xui9SdJPWZ+4 bp2omMdcSe4j9GxmfW9qJuRJ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwsREOL IuEOMz7AvvCs6i+xVdwjMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtkY6VRBSgyNWCiC74U8PxVRyZ87ZbR3MYpoOEFZDMiLjht79BxaoAxJ+Eow6 LIsghn477R/NbiDAOvWnCAuVO5Dobu0rBv6dKi0HoQU0RL5V4PLN3YsZkCK74lSX 5eR6OV7K0X9D/1C6Jj1hUBvDfSSRBjOoynX3oRxqRyvovIn/KgwWsTW2uOxwBEzQ Wk3aRv18Y9XO7L26SUhxXpMlLhAVIyTPoyu54U+BU7l7LGK9oBjtt01S41P2jRt7 6PPY3tA981Nyg4MsXhCyxyDTGeB2N2VhjJKbss2xyyTY8bASlUtNNoMqqRFMKlCF LGohEAv1KTUEOanEj43r5X92UQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:17 2026 by rpki-client