$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: tq1UfD0vbvd7kymV2Cgp98j2mEWiTf6E5tIbmfO0XRI= Subject key identifier: E9:68:3A:CD:86:BF:AD:BD:8A:BD:A6:3C:A5:0C:6F:67:A0:C7:88:39 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: EB Signing time: Sun 05 Apr 2026 06:00:35 +0000 Manifest this update: Sun 05 Apr 2026 06:00:34 +0000 Manifest next update: Sun 12 Apr 2026 06:00:34 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: ebYgs14Xue99czWFmFa1qT95nYCiHVxTPxropWCCVf0=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: pLAC//aFdBXkC+OzNuWnC+5/i1jD9O9sUN9b4OQ+b9w=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: fBtk/FNi9NSe3R4w+Y6D6yuDxCaNIphlrOKGcre0df8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Apr 5 06:00:34 2026 GMT Not After : Apr 12 06:00:34 2026 GMT Subject: CN=69d1fa83-f74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:69:b8:ce:40:89:b5:12:32:66:9a:3c:27: 8a:fb:ab:ba:5d:c9:b2:26:f4:73:c8:cd:79:3b:39: a4:2b:79:0e:ea:33:db:c6:2e:50:ed:d5:1a:c0:90: a2:8d:3b:20:1c:bc:56:8e:ef:6d:2c:c0:7a:64:f6: 8e:e4:4b:77:00:fc:49:a4:30:cd:a8:2d:4a:48:8d: 0f:35:80:c1:a8:b9:55:81:48:1e:11:c9:3f:ca:43: d3:1d:df:6e:cd:af:e4:14:51:d6:9a:00:b7:46:1b: 1f:1c:10:fc:6a:85:9c:b1:af:40:d7:9b:7f:15:c9: 8e:17:8e:e5:69:16:df:ee:4e:d7:73:03:a8:80:9c: 95:32:ac:51:f9:48:f1:8e:48:f7:e3:6f:6c:af:5b: f6:82:71:6a:5c:33:df:d6:22:60:cc:c5:6a:00:9a: 7e:d9:06:7f:48:56:cc:d8:8c:e9:cc:97:87:9a:d1: 90:1b:20:b4:e1:f3:b2:14:21:08:9d:70:6f:ed:af: 4b:b8:53:99:b6:ee:86:96:97:63:09:b6:a2:b4:f9: 4e:73:e3:68:66:04:f9:0f:69:e2:61:9a:1a:7c:7a: 12:ea:ba:ce:3a:4e:f7:a4:6b:fd:95:cd:f8:03:a1: c5:e7:a3:34:16:b5:fc:48:23:b1:91:7c:a5:6e:b5: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:68:3A:CD:86:BF:AD:BD:8A:BD:A6:3C:A5:0C:6F:67:A0:C7:88:39 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3b:e6:7e:6d:1f:ed:41:11:e6:c4:4e:b1:99:d9:da:5a:40: 08:a1:f9:d7:9f:27:94:18:25:17:22:2a:51:ba:be:07:b5:18: 4a:b8:f6:fe:6f:4f:22:53:99:67:e3:e4:82:13:26:93:31:35: cf:6d:b5:e3:f1:2f:df:1f:5e:c7:b0:f9:e6:c2:33:1e:6e:60: 68:3a:f0:7d:48:1c:ce:be:e7:84:ce:2d:f4:82:a2:53:f7:f9: a4:43:b0:a9:5f:ba:5a:bc:8f:a8:03:60:af:16:ec:ed:52:84: 9d:bd:d5:77:a5:54:75:37:f8:3a:7c:cb:3e:b5:4c:57:fa:69: de:3f:41:14:2a:42:e8:a1:1a:e7:b5:61:f9:2d:1e:b3:21:01: d7:02:e9:79:a8:89:3e:f5:64:17:78:23:4d:ca:b0:d0:10:17: 1f:24:c1:c1:59:e4:15:af:cf:59:30:a0:b9:55:17:ed:b4:fb: bd:b6:c7:02:d7:2c:bf:2e:f4:ce:80:e3:64:65:e9:2f:b8:d9: 69:a1:be:49:5e:51:a9:4f:5c:96:51:ab:cd:2c:6c:5d:ac:f8: b9:b2:a5:ab:93:17:7e:59:b6:bf:1a:b3:c3:80:62:84:90:de: ab:97:57:8a:66:32:d8:e6:37:e2:c9:3b:cf:06:d2:58:e7:91: 43:4a:34:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwNDA1MDYwMDM0WhcNMjYwNDEyMDYwMDM0WjAYMRYwFAYD VQQDEw02OWQxZmE4My1mNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i1puM5AibUSMmaaPCeK+6u6XcmyJvRzyM15OzmkK3kO6jPbxi5Q7dUawJCi jTsgHLxWju9tLMB6ZPaO5Et3APxJpDDNqC1KSI0PNYDBqLlVgUgeEck/ykPTHd9u za/kFFHWmgC3RhsfHBD8aoWcsa9A15t/FcmOF47laRbf7k7XcwOogJyVMqxR+Ujx jkj3429sr1v2gnFqXDPf1iJgzMVqAJp+2QZ/SFbM2IzpzJeHmtGQGyC04fOyFCEI nXBv7a9LuFOZtu6GlpdjCbaitPlOc+NoZgT5D2niYZoafHoS6rrOOk73pGv9lc34 A6HF56M0FrX8SCOxkXylbrXWDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOloOs2G v629ir2mPKUMb2egx4g5MB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDvmfm0f7UER5sROsZnZ2lpACKH5158nlBglFyIqUbq+B7UYSrj2/m9PIlOZ Z+PkghMmkzE1z2214/Ev3x9ex7D55sIzHm5gaDrwfUgczr7nhM4t9IKiU/f5pEOw qV+6WryPqANgrxbs7VKEnb3Vd6VUdTf4OnzLPrVMV/pp3j9BFCpC6KEa57Vh+S0e syEB1wLpeaiJPvVkF3gjTcqw0BAXHyTBwVnkFa/PWTCguVUX7bT7vbbHAtcsvy70 zoDjZGXpL7jZaaG+SV5RqU9cllGrzSxsXaz4ubKlq5MXflm2vxqzw4BihJDeq5dX imYy2OY34sk7zwbSWOeRQ0o08w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:55 2026 by rpki-client