$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json) Hash identifier: mLvkKbZtDV78lvxa4pwrYEPJFKJew7uqVhEwDgwdyy0= Subject key identifier: 2A:1E:2D:1E:AC:7D:1B:9A:58:3D:3A:97:C5:32:91:9A:2D:23:9A:44 Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft Manifest number: 0159 Signing time: Sun 05 Apr 2026 04:25:37 +0000 Manifest this update: Sun 05 Apr 2026 04:25:36 +0000 Manifest next update: Sun 12 Apr 2026 04:25:36 +0000 Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: OwNkSDfTFtkvcgq4jJfCtm0BpyK/jNXOoifiekj6a5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C Validity Not Before: Apr 5 04:25:36 2026 GMT Not After : Apr 12 04:25:36 2026 GMT Subject: CN=69d1e440-f21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:77:3a:17:e0:aa:3e:84:a2:cb:82:63:0d: d1:ec:ba:6e:34:86:ee:75:3f:f6:d5:78:fb:41:39: ef:a6:8b:d3:b0:a1:4f:19:85:eb:50:88:56:36:b9: 8b:d3:d4:c1:39:16:53:85:5c:59:e3:a9:af:29:00: bc:01:18:b4:6e:58:6c:49:2e:cf:32:25:12:9f:47: 00:e4:80:8b:b4:c5:44:12:45:4a:1a:a1:3d:9d:10: 29:1a:a1:ee:1a:bd:9d:eb:cb:fa:32:fa:f2:31:72: 1d:07:92:42:a2:4d:00:10:1d:7d:1d:89:86:11:d2: b8:f6:4e:32:cf:d9:ba:04:6c:c6:97:06:d7:78:9e: 3b:61:95:75:52:35:b6:de:22:22:e0:e6:1f:16:33: 86:6a:5d:03:bc:7b:f4:98:f7:69:06:51:4a:e8:eb: b4:e5:45:6f:6a:fb:ed:32:8b:bf:98:87:6d:3c:1a: 78:ca:89:8a:ed:1d:19:71:a9:ed:ee:aa:a1:19:3a: 20:12:45:aa:38:11:64:c0:67:e1:5a:b1:77:82:3c: 79:c3:18:27:74:63:23:ef:2b:5a:2c:e4:3c:64:c9: 10:d5:fa:c2:98:79:8d:b3:42:11:b3:46:43:95:75: a8:25:62:8a:c3:17:2f:db:54:04:0d:5f:e1:1f:70: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1E:2D:1E:AC:7D:1B:9A:58:3D:3A:97:C5:32:91:9A:2D:23:9A:44 X509v3 Authority Key Identifier: keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:9e:2a:c0:d9:2d:db:c4:78:8b:f7:ee:ae:ad:47:a0:ec:28: 88:90:38:13:81:5b:99:36:81:d3:c0:81:8e:6b:2e:fb:ef:da: 01:24:b6:78:c5:c2:5e:18:7e:8e:03:ae:37:ec:58:9b:75:71: 7f:8b:89:c6:33:99:5d:50:ff:88:a7:04:f9:38:a1:4b:c5:22: 53:f7:bd:6f:74:33:92:8a:b4:66:ef:27:86:82:9a:15:93:d9: b4:58:3c:30:f1:52:d7:0f:86:8d:54:e1:3a:58:d6:ac:80:41: fd:9b:bd:f1:31:5c:ad:fa:63:ab:fa:16:b7:57:93:00:7b:15: 9e:c5:a9:83:c0:c7:9d:60:e0:ed:52:7b:6c:8b:f1:ac:41:ca: 06:d8:24:a6:60:46:5e:8e:ae:b2:ad:90:d3:30:9a:ca:b6:65: ea:12:a6:ee:ed:a5:bf:e4:5e:13:bc:8c:72:54:43:53:3a:36: 95:c9:30:b1:a3:71:f1:1e:25:7a:40:79:82:89:86:c4:51:89: 22:69:ff:70:67:f0:b6:b2:a8:5b:59:25:15:f0:61:b6:13:81: 9b:e0:6a:e4:09:57:fe:23:83:c9:de:d7:43:a6:5c:19:c1:19: fa:bb:74:ff:3b:3d:3c:8c:2d:97:56:8a:93:61:54:8e:2c:60: 6f:9f:bb:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx RDI2ODNGN0MwHhcNMjYwNDA1MDQyNTM2WhcNMjYwNDEyMDQyNTM2WjAYMRYwFAYD VQQDEw02OWQxZTQ0MC1mMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgh3Ohfgqj6EosuCYw3R7LpuNIbudT/21Xj7QTnvpovTsKFPGYXrUIhWNrmL 09TBORZThVxZ46mvKQC8ARi0blhsSS7PMiUSn0cA5ICLtMVEEkVKGqE9nRApGqHu Gr2d68v6MvryMXIdB5JCok0AEB19HYmGEdK49k4yz9m6BGzGlwbXeJ47YZV1UjW2 3iIi4OYfFjOGal0DvHv0mPdpBlFK6Ou05UVvavvtMou/mIdtPBp4yomK7R0Zcant 7qqhGTogEkWqOBFkwGfhWrF3gjx5wxgndGMj7ytaLOQ8ZMkQ1frCmHmNs0IRs0ZD lXWoJWKKwxcv21QEDV/hH3BjaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoeLR6s fRuaWD06l8UykZotI5pEMB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY akRYOWkwSlZwZ2dkSm9QM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhJ4qwNkt28R4i/furq1HoOwoiJA4E4FbmTaB08CBjmsu++/aASS2eMXCXhh+ jgOuN+xYm3Vxf4uJxjOZXVD/iKcE+TihS8UiU/e9b3Qzkoq0Zu8nhoKaFZPZtFg8 MPFS1w+GjVThOljWrIBB/Zu98TFcrfpjq/oWt1eTAHsVnsWpg8DHnWDg7VJ7bIvx rEHKBtgkpmBGXo6usq2Q0zCayrZl6hKm7u2lv+ReE7yMclRDUzo2lckwsaNx8R4l ekB5gomGxFGJImn/cGfwtrKoW1klFfBhthOBm+Bq5AlX/iODyd7XQ6ZcGcEZ+rt0 /zs9PIwtl1aKk2FUjixgb5+7aQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:12 2026 by rpki-client