$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json) Hash identifier: pi5zjbv/Tum/1lZAJFPR9mOoHU9HZr4Az/aCsrDM1jA= Subject key identifier: 4A:26:04:D6:0B:CA:D3:BF:B2:4A:27:E6:DD:99:3D:02:45:D3:47:27 Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft Manifest number: 0145 Signing time: Sun 05 Apr 2026 04:42:31 +0000 Manifest this update: Sun 05 Apr 2026 04:42:31 +0000 Manifest next update: Sun 12 Apr 2026 04:42:31 +0000 Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: J7lKALHybepPphIEbfrVB75hVdihW0h32Y1XAMq15Oc=) 2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Validity Not Before: Apr 5 04:42:31 2026 GMT Not After : Apr 12 04:42:31 2026 GMT Subject: CN=69d1e837-6363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:36:71:e2:e7:59:ee:92:49:23:1b:4e:fb: 5b:d5:8f:72:92:75:72:15:4b:39:c9:9d:fe:58:46: d1:53:b3:bc:5d:13:df:f1:0c:4c:58:69:75:2e:a5: b6:4e:25:ba:67:d1:38:98:ff:30:b7:8e:64:09:17: d4:04:9d:99:bd:87:5d:61:13:d8:85:bd:d3:1b:bf: a6:12:f7:70:c0:2d:0b:35:93:99:f2:a0:d8:71:13: e3:bf:5b:6d:5d:35:68:76:d3:eb:f3:a9:87:21:09: 9c:d8:e8:54:3f:f1:30:e4:63:1f:bd:82:06:66:dd: c5:b8:f6:98:9e:bd:81:42:50:c8:8e:9a:07:71:69: 4c:e5:42:a1:fe:5f:9e:2c:b3:d0:9e:bb:54:58:bb: b5:68:1f:ae:88:19:d1:8f:25:c9:f8:57:da:6c:d5: c2:ac:85:05:0f:e1:82:20:e6:80:41:86:ec:19:32: 7b:b8:5b:19:03:92:04:9d:95:d4:20:b6:8f:e6:ec: 27:7b:7d:bb:78:81:87:77:7b:35:6a:ed:c1:34:05: 0f:b2:3c:70:18:60:c4:7f:5f:6f:69:06:04:16:3d: 21:4a:fb:86:47:32:1b:a0:50:2f:bd:05:9b:c6:e9: e6:7f:b6:cd:10:6c:58:54:3c:86:ce:c3:1d:09:81: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:26:04:D6:0B:CA:D3:BF:B2:4A:27:E6:DD:99:3D:02:45:D3:47:27 X509v3 Authority Key Identifier: keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6d:86:1a:05:78:66:8f:1c:a5:dd:59:5e:00:26:06:45:fc: 82:3d:a2:53:3a:f4:e5:4d:35:ae:d6:3a:77:01:da:9a:09:4b: b9:94:dc:78:c7:0a:8d:3c:52:cc:e3:31:d4:3e:5c:8b:90:0d: 5b:72:1c:87:79:e0:de:ed:0a:f2:a7:27:35:97:7a:a4:69:44: a6:4b:11:b2:1f:9e:4b:73:3c:48:fd:be:7f:ff:e2:c3:b9:13: ec:40:29:3e:da:39:11:f9:a7:04:f7:81:15:f4:ed:5b:30:6d: 2a:1e:a5:c0:f4:6f:83:c2:45:91:21:cc:e1:b9:8f:55:8d:85: a8:f5:81:4b:3c:66:d6:62:6a:b8:1f:c6:48:5a:55:e0:35:22: 4a:4a:5c:cf:ff:a3:6b:56:a6:9b:f1:21:a7:6a:ac:64:62:b5: f4:d1:c3:6d:5c:f7:2b:99:aa:c7:d4:62:ae:4f:e2:f0:a2:74: 17:28:84:6d:2e:89:c8:f1:53:84:69:0f:cb:88:91:4e:20:ca: c6:da:3c:4e:7a:f4:05:0b:23:25:d4:16:82:69:c7:27:6c:b8: d6:d8:d2:7d:6e:77:06:5b:69:b9:1b:ff:c1:f0:e7:02:05:0f: 84:78:1e:96:c6:7a:07:94:75:ee:de:13:83:90:1d:28:28:a3: b8:04:5b:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxRjMxMTAvBgNVBAUTKDc1MEZBNTdCNTkxNTY1MzlDQjE2RTU0QTYwQTZDRURC NUIxMEVCOUUwHhcNMjYwNDA1MDQ0MjMxWhcNMjYwNDEyMDQ0MjMxWjAYMRYwFAYD VQQDEw02OWQxZTgzNy02MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7U2ceLnWe6SSSMbTvtb1Y9yknVyFUs5yZ3+WEbRU7O8XRPf8QxMWGl1LqW2 TiW6Z9E4mP8wt45kCRfUBJ2ZvYddYRPYhb3TG7+mEvdwwC0LNZOZ8qDYcRPjv1tt XTVodtPr86mHIQmc2OhUP/Ew5GMfvYIGZt3FuPaYnr2BQlDIjpoHcWlM5UKh/l+e LLPQnrtUWLu1aB+uiBnRjyXJ+FfabNXCrIUFD+GCIOaAQYbsGTJ7uFsZA5IEnZXU ILaP5uwne327eIGHd3s1au3BNAUPsjxwGGDEf19vaQYEFj0hSvuGRzIboFAvvQWb xunmf7bNEGxYVDyGzsMdCYFkEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEomBNYL ytO/skon5t2ZPQJF00cnMB8GA1UdIwQYMBaAFHUPpXtZFWU5yxblSmCmzttbEOue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjFGMy80Mjk3RDA1MjQ1 QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpUbkxGdVZLWUtiTzIxc1E2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRLWxlMWtWWlRuTEZ1VktZS2JPMjFzUTY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjFGMy80Mjk3RDA1MjQ1QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpU bkxGdVZLWUtiTzIxc1E2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEW2GGgV4Zo8cpd1ZXgAmBkX8gj2iUzr05U01rtY6dwHamglLuZTceMcKjTxS zOMx1D5ci5ANW3Ich3ng3u0K8qcnNZd6pGlEpksRsh+eS3M8SP2+f//iw7kT7EAp Pto5EfmnBPeBFfTtWzBtKh6lwPRvg8JFkSHM4bmPVY2FqPWBSzxm1mJquB/GSFpV 4DUiSkpcz/+ja1amm/Ehp2qsZGK19NHDbVz3K5mqx9Rirk/i8KJ0FyiEbS6JyPFT hGkPy4iRTiDKxto8Tnr0BQsjJdQWgmnHJ2y41tjSfW53BltpuRv/wfDnAgUPhHge lsZ6B5R17t4Tg5AdKCijuARbzQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:50 2026 by rpki-client