$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: enZplEjnWqO4+p9P9kOIV/QJgAIyIGvQj1yaRpnYxWQ= Subject key identifier: 34:C6:CF:AF:DE:E5:19:BF:A0:0B:28:64:23:B1:53:40:6F:3A:C4:B4 Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 12EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 12D2 Signing time: Sat 04 Apr 2026 16:56:49 +0000 Manifest this update: Sat 04 Apr 2026 16:56:49 +0000 Manifest next update: Sat 11 Apr 2026 16:56:49 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: HFsp333Eru+JpAq25T3Kb3Yh479qUe3YNVGIaZYNR6I=) 2: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: h19/MR9hkMVPGpl7f/+5Vxrt7msI3muNoOIhYt+wOkY=) 3: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: ENmiPhNmvPrhbRyvAeBKsSY9zQmQ1uUazbQzc4bFAXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4847 (0x12ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: Apr 4 16:56:49 2026 GMT Not After : Apr 11 16:56:49 2026 GMT Subject: CN=69d142d1-9cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:2a:08:7a:34:82:f8:26:a1:64:e8:c2:66: 30:e3:76:9f:2f:8c:8b:2f:84:90:a1:83:ea:00:a7: 6d:9f:4f:bf:a7:7d:0b:12:f2:7f:30:8a:79:23:06: e0:c0:14:7b:05:06:54:74:28:c8:14:9a:2e:48:e5: aa:92:61:73:89:51:1d:5a:88:3d:98:07:09:0d:e3: 23:74:07:38:40:05:f2:a7:86:cb:96:b0:24:bd:a9: 71:73:19:4a:5f:39:db:e0:20:82:21:ba:d8:9d:6a: 80:45:c2:bd:ab:5f:90:85:9d:73:13:63:66:27:20: f1:24:ae:77:13:81:77:9b:ac:0e:1c:a0:d9:98:07: e9:36:3c:c7:0b:a3:3a:22:70:4a:86:12:e9:2f:bc: 7f:16:1e:92:28:c3:00:5b:0c:a1:30:85:c5:42:3f: 49:58:21:d4:66:69:fa:18:fd:44:de:c7:0b:d8:22: fa:ce:1a:3c:c4:77:f2:00:49:e9:15:4d:bc:05:d1: 5c:c6:f3:0c:c2:ca:c0:5b:ac:f8:fe:c8:ef:21:25: 5a:49:0f:3f:9e:94:74:4c:01:5b:94:15:12:21:7d: 3e:68:4f:0f:92:9c:39:d1:05:be:d4:ca:39:53:07: fc:ec:67:ea:64:4a:27:42:b1:5c:79:e2:41:d2:f4: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C6:CF:AF:DE:E5:19:BF:A0:0B:28:64:23:B1:53:40:6F:3A:C4:B4 X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:42:54:64:70:0e:94:c2:61:c2:8f:04:3f:77:12:87:e9:a7: 57:8f:6d:7f:f5:ab:fb:f2:ba:37:eb:4e:b1:c3:10:f0:e3:a9: 8c:e5:b2:09:a3:40:82:d5:4e:26:08:81:02:6e:04:d2:20:d7: 8e:14:12:d1:25:2a:0f:46:f3:96:ac:7e:b3:47:65:fa:30:05: 0a:9e:30:f2:c4:b5:cd:0e:2b:e0:37:85:5c:eb:28:74:c7:1c: c9:05:b3:c8:46:83:5e:46:95:94:08:93:69:1f:50:f7:f6:d4: 31:ea:88:23:92:04:ab:fe:73:df:b4:68:2e:da:89:81:ed:24: 26:58:c5:49:94:fc:0f:ca:b2:69:7c:f2:93:58:9a:08:43:dc: 1d:de:12:a2:74:aa:fc:59:d8:5a:84:a9:8f:6b:4d:cf:b0:f7: 38:e8:05:8d:0f:25:02:c5:18:7c:38:fd:1e:4b:66:08:8e:4c: a9:95:6f:40:e7:60:64:02:02:b1:17:bb:60:c9:52:e2:9a:48: ac:58:e9:85:24:01:a7:de:d3:ad:d9:d6:88:32:64:bd:e0:00: 65:cc:a1:9e:23:c2:c9:0f:10:6f:3d:2f:c0:50:c1:b7:d7:7e: d4:a2:38:ba:1e:24:5f:7e:73:7e:e3:12:e7:81:cb:7a:34:40: 55:26:73:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjYwNDA0MTY1NjQ5WhcNMjYwNDExMTY1NjQ5WjAYMRYwFAYD VQQDEw02OWQxNDJkMS05Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MYqCHo0gvgmoWTowmYw43afL4yLL4SQoYPqAKdtn0+/p30LEvJ/MIp5Iwbg wBR7BQZUdCjIFJouSOWqkmFziVEdWog9mAcJDeMjdAc4QAXyp4bLlrAkvalxcxlK Xznb4CCCIbrYnWqARcK9q1+QhZ1zE2NmJyDxJK53E4F3m6wOHKDZmAfpNjzHC6M6 InBKhhLpL7x/Fh6SKMMAWwyhMIXFQj9JWCHUZmn6GP1E3scL2CL6zho8xHfyAEnp FU28BdFcxvMMwsrAW6z4/sjvISVaSQ8/npR0TAFblBUSIX0+aE8Pkpw50QW+1Mo5 Uwf87GfqZEonQrFceeJB0vS1swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTGz6/e 5Rm/oAsoZCOxU0BvOsS0MB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATEJUZHAOlMJhwo8EP3cSh+mnV49tf/Wr+/K6N+tOscMQ8OOpjOWyCaNAgtVO JgiBAm4E0iDXjhQS0SUqD0bzlqx+s0dl+jAFCp4w8sS1zQ4r4DeFXOsodMccyQWz yEaDXkaVlAiTaR9Q9/bUMeqII5IEq/5z37RoLtqJge0kJljFSZT8D8qyaXzyk1ia CEPcHd4SonSq/FnYWoSpj2tNz7D3OOgFjQ8lAsUYfDj9HktmCI5MqZVvQOdgZAIC sRe7YMlS4ppIrFjphSQBp97TrdnWiDJkveAAZcyhniPCyQ8Qbz0vwFDBt9d+1KI4 uh4kX35zfuMS54HLejRAVSZzLw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:33 2026 by rpki-client