$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: BFs+YuESnK3zS80NFLyhvyctMb9i0Tj3o2fH3+qd1SE= Subject key identifier: D8:D3:B2:1D:C9:5C:8D:63:6D:24:58:CB:4C:D7:31:75:8B:20:DC:80 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 012D Signing time: Sun 05 Apr 2026 04:58:54 +0000 Manifest this update: Sun 05 Apr 2026 04:58:53 +0000 Manifest next update: Sun 12 Apr 2026 04:58:53 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: 2ZHdwLndtWyXeE1nNrtDbrIdQDrnhZdPTNFIrMpysao=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: db0T6je7EzXg8TXl/6K3AERU82KHSYVQ7I7q4aY89M8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Apr 5 04:58:53 2026 GMT Not After : Apr 12 04:58:53 2026 GMT Subject: CN=69d1ec0e-d719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:ef:66:b6:67:94:be:68:77:79:9b:9f:b6: fd:cd:a2:47:9b:51:41:d7:d6:fd:1d:b3:41:89:81: 81:41:18:df:b9:03:9c:7a:f4:62:14:8d:8a:b8:24: ea:86:41:de:4d:51:ba:24:59:e6:28:74:fd:a3:4f: 3b:93:b9:26:b1:10:0e:e2:c8:fa:07:d1:11:07:86: 63:2d:4f:e0:9f:9f:84:59:e5:14:6b:9f:77:c3:9d: a2:75:a0:c8:74:f5:6f:e0:0a:ef:53:e0:5c:b1:dc: c5:bd:db:47:65:d9:f7:4e:0b:0f:51:38:cf:4d:79: b5:b2:a7:b6:8f:41:4f:8f:6c:52:d5:07:f8:07:43: 5c:4a:37:71:87:f8:21:3e:1c:c1:30:42:8d:1a:3b: 74:83:f5:41:6c:6a:0e:47:e7:92:82:92:2f:64:fe: c4:9e:72:0c:b9:b2:fb:ff:c8:d2:d0:ff:16:50:03: b5:75:8c:f3:03:0f:f3:13:0c:23:32:2c:11:f1:13: d1:a9:68:85:c2:65:77:10:96:67:1f:d2:de:94:af: c8:10:93:39:7e:a0:dc:11:d9:25:1e:87:d9:d3:28: 12:87:76:08:44:9f:0a:93:78:84:3a:5f:4b:fd:87: 1e:b9:32:c8:a1:a2:35:0d:9f:f0:3e:21:bc:85:c3: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:B2:1D:C9:5C:8D:63:6D:24:58:CB:4C:D7:31:75:8B:20:DC:80 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:38:03:60:e8:04:87:9a:c2:5a:3b:c7:6f:65:ff:a3:57:50: 62:5e:63:ab:d7:19:0b:51:83:e9:77:29:e0:e3:1d:7f:18:8e: 46:fb:ae:f2:f7:87:1a:db:20:20:68:3d:1a:7e:04:38:60:db: aa:5b:d1:4b:2b:24:91:be:8b:d7:94:f1:64:c0:8e:0f:01:57: 3e:16:9a:4f:45:1e:11:25:76:6c:51:0f:3f:35:71:1d:d5:65: c2:33:7f:1d:40:f2:84:78:85:88:1b:61:0f:3e:17:43:42:e0: 33:e5:a6:12:ef:db:5f:41:51:c6:48:4c:40:9c:ce:a8:a4:21: d5:39:94:c4:ca:f4:55:5d:0f:6f:1f:05:dd:e5:31:eb:35:71: 5d:63:f3:18:14:be:4f:0f:98:cf:34:dc:73:83:fe:cf:1c:d7: 19:13:15:26:f5:6a:31:aa:05:af:92:38:45:ff:23:e8:00:47: 77:4a:a0:9a:72:f9:d8:74:78:19:fb:f4:0e:3f:4d:9d:fc:09: 80:ab:20:2c:1b:a9:8b:c7:ab:49:2c:bb:e0:17:b0:93:68:b1: 3f:6b:dc:dd:ed:18:b5:68:01:e0:34:19:8e:70:29:fc:10:4c: 84:10:33:25:75:46:47:23:ec:a0:4d:b7:7b:7f:9a:10:15:45: f8:30:45:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjYwNDA1MDQ1ODUzWhcNMjYwNDEyMDQ1ODUzWjAYMRYwFAYD VQQDEw02OWQxZWMwZS1kNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVLvZrZnlL5od3mbn7b9zaJHm1FB19b9HbNBiYGBQRjfuQOcevRiFI2KuCTq hkHeTVG6JFnmKHT9o087k7kmsRAO4sj6B9ERB4ZjLU/gn5+EWeUUa593w52idaDI dPVv4ArvU+BcsdzFvdtHZdn3TgsPUTjPTXm1sqe2j0FPj2xS1Qf4B0NcSjdxh/gh PhzBMEKNGjt0g/VBbGoOR+eSgpIvZP7EnnIMubL7/8jS0P8WUAO1dYzzAw/zEwwj MiwR8RPRqWiFwmV3EJZnH9LelK/IEJM5fqDcEdklHofZ0ygSh3YIRJ8Kk3iEOl9L /YceuTLIoaI1DZ/wPiG8hcO32wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjTsh3J XI1jbSRYy0zXMXWLINyAMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdTgDYOgEh5rCWjvHb2X/o1dQYl5jq9cZC1GD6Xcp4OMdfxiORvuu8veHGtsg IGg9Gn4EOGDbqlvRSyskkb6L15TxZMCODwFXPhaaT0UeESV2bFEPPzVxHdVlwjN/ HUDyhHiFiBthDz4XQ0LgM+WmEu/bX0FRxkhMQJzOqKQh1TmUxMr0VV0Pbx8F3eUx 6zVxXWPzGBS+Tw+YzzTcc4P+zxzXGRMVJvVqMaoFr5I4Rf8j6ABHd0qgmnL52HR4 Gfv0Dj9NnfwJgKsgLBupi8erSSy74Bewk2ixP2vc3e0YtWgB4DQZjnAp/BBMhBAz JXVGRyPsoE23e3+aEBVF+DBFAw== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:58 2026 by rpki-client