$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: M6+nLc0a7Cw3RqLEjrpuIzZvLWUUEz9gAxuUSDhjQOs= Subject key identifier: 43:06:DC:2A:06:C6:31:CC:0A:FF:AC:E7:29:95:42:31:DC:50:19:CF Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 01D8 Signing time: Wed 29 Apr 2026 04:06:02 +0000 Manifest this update: Wed 29 Apr 2026 04:06:01 +0000 Manifest next update: Wed 06 May 2026 04:06:01 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: qtSJPL3igH0qpijefje26iRPGDUlXnaiSGYvJ6MZNLk=) 2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=) 3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 04:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Apr 29 04:06:01 2026 GMT Not After : May 6 04:06:01 2026 GMT Subject: CN=69f183a9-8fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:ca:c8:eb:79:57:90:17:47:2f:70:dd:95: b9:d3:c8:78:43:6b:0f:2f:3a:82:76:cd:c8:81:9f: d3:34:03:65:f5:9b:1e:a4:85:24:70:78:9f:3e:5b: cb:1a:7e:3e:77:81:b7:48:91:e1:bf:cf:1c:9c:3f: cb:09:5d:33:2e:49:85:e0:26:fb:6e:c6:89:6d:08: bd:42:22:d1:5c:ec:93:47:40:54:3a:fa:a7:7f:2b: 4a:82:cb:84:0b:e8:20:26:12:14:45:e0:95:62:d7: 24:24:ad:ea:de:bc:19:92:e2:f7:82:23:a5:34:f3: 91:b8:33:a8:d8:db:9f:57:76:3b:52:d1:58:a8:15: 54:b2:55:4c:46:a1:15:0a:50:6d:c4:0f:1d:c8:c1: 97:d2:3d:20:59:f9:ce:fa:c2:65:a7:e7:96:45:b2: 65:ef:8e:0d:68:0c:92:bb:fa:fb:70:f0:cc:a4:66: 30:59:2d:55:d7:f0:f9:ab:02:53:fe:6b:7f:bb:e1: 2d:3b:6b:f8:8c:60:56:83:2c:9e:97:08:46:3d:d6: c7:08:d4:1e:51:37:ec:4b:a5:92:62:34:2c:71:c3: 86:03:c0:f2:d8:04:e7:30:af:46:f7:02:62:d3:fa: ee:4c:02:03:b3:0b:ad:6a:7b:0b:ab:43:60:af:db: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:DC:2A:06:C6:31:CC:0A:FF:AC:E7:29:95:42:31:DC:50:19:CF X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8a:ec:2c:96:df:88:31:6d:4d:1c:02:d1:fb:42:84:7a:d4: 9d:56:3d:5a:d9:cf:92:21:85:9a:08:7d:3f:cf:de:ef:a1:fd: 8f:ec:7a:63:58:80:8b:b0:f4:13:a7:2f:e7:b6:3a:68:4b:46: f8:7f:aa:5b:ca:72:78:45:84:fe:27:37:c7:8a:84:4e:28:e9: 3a:7d:58:0c:ef:d0:36:1f:d7:df:e7:65:1f:e5:c4:95:49:9b: 60:c3:4f:a0:37:a3:a3:31:ed:78:95:29:db:44:a6:21:c0:ed: 46:c1:08:49:27:84:6f:78:f3:1a:e9:95:81:8a:8a:14:29:ef: b2:5e:67:15:52:10:9f:0c:77:6b:0d:88:fe:6a:47:d8:d3:e5: 8a:e5:03:df:57:23:1f:42:95:4d:f6:20:07:c6:3c:1f:1f:39: eb:5b:9b:f3:95:c5:92:20:b5:69:c7:94:05:02:7b:ff:fd:81: d2:ee:02:e5:e9:1e:0e:fa:e5:8b:5c:bc:a3:95:50:07:ef:0f: 02:91:ed:c7:f8:24:47:51:fa:38:4b:4f:5c:7f:80:c3:8f:10: e0:5f:38:c4:d6:e0:69:3a:c8:cb:3d:37:7f:9f:5c:c8:bd:67: 58:a6:8d:59:8f:a3:97:9b:74:8f:0e:81:49:81:75:0e:40:29: 6a:f5:cc:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjYwNDI5MDQwNjAxWhcNMjYwNTA2MDQwNjAxWjAYMRYwFAYD VQQDEw02OWYxODNhOS04ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zPKyOt5V5AXRy9w3ZW508h4Q2sPLzqCds3IgZ/TNANl9ZsepIUkcHifPlvL Gn4+d4G3SJHhv88cnD/LCV0zLkmF4Cb7bsaJbQi9QiLRXOyTR0BUOvqnfytKgsuE C+ggJhIUReCVYtckJK3q3rwZkuL3giOlNPORuDOo2NufV3Y7UtFYqBVUslVMRqEV ClBtxA8dyMGX0j0gWfnO+sJlp+eWRbJl744NaAySu/r7cPDMpGYwWS1V1/D5qwJT /mt/u+EtO2v4jGBWgyyelwhGPdbHCNQeUTfsS6WSYjQsccOGA8Dy2ATnMK9G9wJi 0/ruTAIDswutansLq0Ngr9skSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMG3CoG xjHMCv+s5ymVQjHcUBnPMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeYrsLJbfiDFtTRwC0ftChHrUnVY9WtnPkiGFmgh9P8/e76H9j+x6Y1iAi7D0 E6cv57Y6aEtG+H+qW8pyeEWE/ic3x4qETijpOn1YDO/QNh/X3+dlH+XElUmbYMNP oDejozHteJUp20SmIcDtRsEISSeEb3jzGumVgYqKFCnvsl5nFVIQnwx3aw2I/mpH 2NPliuUD31cjH0KVTfYgB8Y8Hx8561ub85XFkiC1aceUBQJ7//2B0u4C5ekeDvrl i1y8o5VQB+8PApHtx/gkR1H6OEtPXH+Aw48Q4F84xNbgaTrIyz03f59cyL1nWKaN WY+jl5t0jw6BSYF1DkApavXMDg== -----END CERTIFICATE-----Generated at Wed Apr 29 13:46:09 2026 by rpki-client