$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: ft8T8NyPFX10SJFA7AjmN4R9U6Dsd5UQ9Gutjev6mAA= Subject key identifier: F0:E9:A6:D3:3F:7E:49:F9:07:60:84:3C:87:72:06:72:26:8B:E5:A7 Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 0437 Signing time: Sun 05 Apr 2026 00:03:57 +0000 Manifest this update: Sun 05 Apr 2026 00:03:56 +0000 Manifest next update: Sun 12 Apr 2026 00:03:56 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: QhQ3EkrHBjLUonQgSreLdZbco0294bAVK8P/RorIgis=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: N5pLAxbLKv/PfC6YhIk0Oi5t9BhybE4dFuDmSAT9hEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Apr 5 00:03:56 2026 GMT Not After : Apr 12 00:03:56 2026 GMT Subject: CN=69d1a6ec-329e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:f0:f0:7a:67:33:13:39:f8:8b:62:13:79: 30:1e:03:17:be:a0:bd:b2:26:61:7c:c1:c3:bb:28: 01:f3:23:c2:d6:61:b1:c8:c0:86:cc:c4:81:ce:50: 97:e2:54:29:56:5c:0b:a0:b2:b6:16:04:04:be:98: 99:51:8e:d6:84:70:ba:00:d5:2a:c2:5f:12:b7:68: 87:29:da:29:a6:7d:80:bf:a6:52:25:4f:39:75:67: f8:91:45:02:13:fe:81:f3:20:cf:4b:4b:73:0f:97: 8d:d2:81:ae:86:f7:35:64:5e:a9:8a:0e:2b:e2:65: ba:48:f1:48:7b:90:ec:53:58:d9:dd:72:2b:36:5f: 0b:51:28:0b:93:f8:2d:b6:30:dd:06:79:a1:75:cb: ea:b0:7a:e8:de:f7:80:99:1e:c6:f8:2a:7c:bb:dd: 74:e7:8e:c8:2f:09:29:62:00:fe:97:36:9f:e9:cf: ea:58:e2:c8:9b:c0:65:67:23:55:46:57:08:de:1f: d0:c0:b7:c9:19:b7:93:2f:ff:fd:7c:5c:4e:33:44: 8a:b9:16:fc:fa:9b:2b:48:5f:61:9c:3e:17:14:69: 8b:0d:28:ae:f8:b2:36:36:5d:7c:32:16:08:a7:7a: 5d:52:2d:30:65:a8:32:a1:be:19:de:87:a2:b9:36: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E9:A6:D3:3F:7E:49:F9:07:60:84:3C:87:72:06:72:26:8B:E5:A7 X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1a:34:14:f5:63:aa:dd:5b:79:f3:ef:30:c6:47:84:57:94: 1c:46:2d:32:ae:16:20:e2:a1:04:c3:4a:b5:a1:d2:13:6f:78: 7a:a6:3c:61:1e:25:de:3c:4d:1c:09:2a:4f:8d:6b:c6:a0:63: 2f:c7:dc:1f:c1:42:9d:a7:ce:ae:9a:90:d3:32:d0:13:43:24: 53:c7:37:53:35:69:a5:45:09:a6:3d:4c:9f:5d:9b:27:68:b4: 6b:86:f6:47:6a:80:4b:23:87:b4:c7:2d:d6:23:6f:0f:7f:5b: 9e:b5:51:ee:7a:01:87:13:0e:02:2f:eb:c8:1e:cc:bf:5c:a9: 4d:58:ac:f5:30:4b:b9:03:a6:8a:46:3f:d3:63:31:20:4f:a6: 87:8c:e1:72:b0:e1:ad:1b:15:25:94:83:ae:d0:dc:5f:14:43: d3:8b:ac:14:66:70:bb:d9:af:39:cb:5a:b1:07:18:40:68:65: 44:de:ff:03:6f:fe:eb:0c:30:cd:88:0b:2b:33:ac:d6:95:ed: b0:a1:be:ec:31:5a:82:48:e2:9b:55:22:4e:bd:f9:94:51:c9: 54:70:3b:91:67:c8:c6:be:8f:4f:1b:c7:ab:c4:8b:25:93:a9: 85:8e:6d:78:e4:78:cb:3b:b0:55:5d:4f:b8:ab:93:3c:5e:38: bd:c7:fe:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjYwNDA1MDAwMzU2WhcNMjYwNDEyMDAwMzU2WjAYMRYwFAYD VQQDEw02OWQxYTZlYy0zMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Tw8HpnMxM5+ItiE3kwHgMXvqC9siZhfMHDuygB8yPC1mGxyMCGzMSBzlCX 4lQpVlwLoLK2FgQEvpiZUY7WhHC6ANUqwl8St2iHKdoppn2Av6ZSJU85dWf4kUUC E/6B8yDPS0tzD5eN0oGuhvc1ZF6pig4r4mW6SPFIe5DsU1jZ3XIrNl8LUSgLk/gt tjDdBnmhdcvqsHro3veAmR7G+Cp8u910547ILwkpYgD+lzaf6c/qWOLIm8BlZyNV RlcI3h/QwLfJGbeTL//9fFxOM0SKuRb8+psrSF9hnD4XFGmLDSiu+LI2Nl18MhYI p3pdUi0wZagyob4Z3oeiuTaoBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDpptM/ fkn5B2CEPIdyBnImi+WnMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjxo0FPVjqt1befPvMMZHhFeUHEYtMq4WIOKhBMNKtaHSE294eqY8YR4l3jxN HAkqT41rxqBjL8fcH8FCnafOrpqQ0zLQE0MkU8c3UzVppUUJpj1Mn12bJ2i0a4b2 R2qASyOHtMct1iNvD39bnrVR7noBhxMOAi/ryB7Mv1ypTVis9TBLuQOmikY/02Mx IE+mh4zhcrDhrRsVJZSDrtDcXxRD04usFGZwu9mvOctasQcYQGhlRN7/A2/+6www zYgLKzOs1pXtsKG+7DFagkjim1UiTr35lFHJVHA7kWfIxr6PTxvHq8SLJZOphY5t eOR4yzuwVV1PuKuTPF44vcf+fA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:18 2026 by rpki-client