$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: 3j4s2LhfK/G1dyMoVJwkg50G9DpmBtnX2tHNAVvIBCk= Subject key identifier: 5C:59:0B:1D:7D:F6:D6:B7:56:73:EE:2D:B2:49:C3:E2:83:49:CA:A2 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 01BD Signing time: Sun 05 Apr 2026 03:53:48 +0000 Manifest this update: Sun 05 Apr 2026 03:53:48 +0000 Manifest next update: Sun 12 Apr 2026 03:53:48 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: 9RUauRTNTyMZuPk04z5VfnzePhWop/VtmY69P1q3DQ8=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Apr 5 03:53:48 2026 GMT Not After : Apr 12 03:53:48 2026 GMT Subject: CN=69d1dccc-625c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:bf:6a:41:c3:85:35:83:8e:59:71:67:6d: 66:15:67:66:3e:0c:18:2b:06:58:a6:9d:26:cc:9c: 5d:d8:c0:ce:c5:35:45:87:f2:c1:99:74:6e:54:c6: df:f8:f1:78:8a:31:10:d4:23:32:be:10:16:c1:43: 35:75:74:d2:fa:d7:3e:16:a3:00:19:8f:19:f7:68: 0a:9c:59:16:f2:90:0d:4d:9f:67:76:e7:06:6e:94: 1c:96:63:df:96:96:ac:27:1b:e1:4b:45:98:30:e4: 9a:fd:ed:47:d8:4d:2e:29:46:9a:e7:88:51:3d:bf: e2:50:7c:96:4d:ce:47:f4:43:e6:1a:2d:18:75:27: 0f:41:83:b3:2d:d1:2d:10:52:9f:a9:94:10:76:78: 46:16:5a:26:5f:db:1d:ee:45:22:00:23:e1:0f:63: 9e:a0:8d:58:85:cd:af:7c:a3:c2:60:e4:69:c1:38: 0f:64:fc:a4:22:37:00:f3:2a:fc:d2:d9:ab:7f:b6: 0a:30:24:d5:f7:e2:b3:2d:8c:c8:f8:e1:54:74:32: 0f:90:b4:45:3d:55:ea:c0:4e:b2:87:cf:30:7c:33: c4:2e:c7:26:c9:db:4b:a6:c1:83:44:5c:d5:71:93: 0c:0c:df:dd:5b:b1:4d:74:a4:2c:0a:15:56:73:84: 90:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:59:0B:1D:7D:F6:D6:B7:56:73:EE:2D:B2:49:C3:E2:83:49:CA:A2 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:35:09:d7:46:3f:cd:70:fd:fd:62:d8:71:53:48:39:01: d1:79:42:07:2b:c5:27:09:ad:de:ec:2c:e4:9a:75:c1:00:88: 51:dc:e1:ae:04:aa:62:f8:99:30:0f:67:29:3b:07:14:10:ca: d1:7b:95:81:0a:1c:4a:99:bb:49:c9:ff:0a:c1:bd:96:a0:d8: 29:40:3b:bb:cc:77:f2:e4:d9:75:2f:14:55:be:4e:25:5f:8a: 8d:5d:6e:08:06:f1:ee:32:2e:ff:a6:71:36:91:dd:eb:64:a0: 7a:66:5c:00:e2:1e:94:cd:69:60:df:5e:1f:64:cb:7e:67:2d: 7a:37:9e:6a:a8:93:f1:74:3d:02:c0:7f:5c:d5:79:b1:04:ce: 42:1f:35:05:ef:c0:a7:ef:c7:ee:06:33:7c:4b:11:ea:44:94: 15:0d:35:d6:60:eb:e7:fc:3a:81:d1:5c:3f:ce:ad:9d:b7:e7: 62:02:9a:2b:d1:d7:6d:40:99:18:99:00:69:04:06:9f:b3:40: 4b:7e:c7:bd:7d:5f:c6:79:e3:1e:c0:25:81:65:ea:bb:63:b2: 48:f0:14:87:8a:25:1e:e7:3c:dd:45:22:5d:99:4e:0a:e3:3f: 22:4a:34:63:ae:a5:b6:ef:ad:30:0b:37:fe:d0:45:85:2b:7f: 2f:9d:11:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwNDA1MDM1MzQ4WhcNMjYwNDEyMDM1MzQ4WjAYMRYwFAYD VQQDEw02OWQxZGNjYy02MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmC/akHDhTWDjllxZ21mFWdmPgwYKwZYpp0mzJxd2MDOxTVFh/LBmXRuVMbf +PF4ijEQ1CMyvhAWwUM1dXTS+tc+FqMAGY8Z92gKnFkW8pANTZ9nducGbpQclmPf lpasJxvhS0WYMOSa/e1H2E0uKUaa54hRPb/iUHyWTc5H9EPmGi0YdScPQYOzLdEt EFKfqZQQdnhGFlomX9sd7kUiACPhD2OeoI1Yhc2vfKPCYORpwTgPZPykIjcA8yr8 0tmrf7YKMCTV9+KzLYzI+OFUdDIPkLRFPVXqwE6yh88wfDPELscmydtLpsGDRFzV cZMMDN/dW7FNdKQsChVWc4SQ5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxZCx19 9ta3VnPuLbJJw+KDScqiMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/Q1CddGP81w/f1i2HFTSDkB0XlCByvFJwmt3uws5Jp1wQCIUdzhrgSqYviZ MA9nKTsHFBDK0XuVgQocSpm7Scn/CsG9lqDYKUA7u8x38uTZdS8UVb5OJV+KjV1u CAbx7jIu/6ZxNpHd62SgemZcAOIelM1pYN9eH2TLfmctejeeaqiT8XQ9AsB/XNV5 sQTOQh81Be/Ap+/H7gYzfEsR6kSUFQ011mDr5/w6gdFcP86tnbfnYgKaK9HXbUCZ GJkAaQQGn7NAS37HvX1fxnnjHsAlgWXqu2OySPAUh4olHuc83UUiXZlOCuM/Iko0 Y66ltu+tMAs3/tBFhSt/L50RUw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:38 2026 by rpki-client