$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: Rto9yOyfHQ3gdZMo/TUAr7K7upRGMiW0QSi5BXEvhyg= Subject key identifier: 3F:FD:C9:A1:32:F4:02:1D:BE:45:06:F1:43:87:1C:5F:DD:0F:74:5E Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 010D Signing time: Sun 05 Apr 2026 05:25:58 +0000 Manifest this update: Sun 05 Apr 2026 05:25:57 +0000 Manifest next update: Sun 12 Apr 2026 05:25:57 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: IHxwV1pHnupG1SHEg+qC5cSFMliTfWeZf0cSJkPAlH8=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: trVTzJLMk0YYPZd2GJXZbw8hjd3VyHaYjDSjZyfSaIc=) 3: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: I1++mHrzNJqcHerLAm9oVxqpl6Ew26O0T9gv6+CjfZw=) 4: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Apr 5 05:25:57 2026 GMT Not After : Apr 12 05:25:57 2026 GMT Subject: CN=69d1f266-fec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:93:61:f9:ea:26:75:2f:e5:89:2e:f3:ad: 56:7d:46:59:f9:0a:b4:a8:b5:c3:06:33:db:91:82: f8:6e:05:95:b3:1c:02:3e:bb:57:9e:1e:a0:78:90: c0:40:9c:e0:e7:de:c5:83:6e:e9:69:ed:4d:16:9c: 0c:48:3d:67:bc:3e:b5:50:ec:31:41:46:c6:59:c1: d5:67:bf:d1:5a:b9:e8:02:ef:33:8f:b9:f7:f7:42: 65:f3:4c:11:dc:fb:3b:ee:9d:f9:e6:bf:f0:ce:8f: 92:3e:cc:75:65:34:2c:6c:33:46:01:bc:a8:c4:2d: c0:a7:3b:80:03:55:84:5f:9d:6c:50:3c:48:b6:4d: e9:29:0e:0a:cc:e9:ae:da:41:b4:85:cb:c6:40:2b: ce:6c:3e:2e:17:35:fe:1c:c6:9a:05:4f:22:75:a5: 87:e3:23:fc:37:92:d2:bb:69:4b:d1:b6:10:6e:0e: e2:37:67:d7:10:98:f4:92:38:ae:e8:34:bc:16:fd: ee:9c:87:f7:9b:23:89:96:72:d1:30:18:aa:87:c5: f9:3d:05:61:b6:d8:41:6c:5a:c1:98:12:c4:f2:73: 44:b4:00:ca:9c:e2:3e:19:f6:87:2e:cd:6a:a8:b6: 16:a4:52:f5:b1:c4:80:14:13:52:b0:3c:85:4e:a8: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:C9:A1:32:F4:02:1D:BE:45:06:F1:43:87:1C:5F:DD:0F:74:5E X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:18:30:d0:db:82:fb:5f:94:25:2a:70:b2:87:35:c2:d3:19: 90:62:03:0b:df:64:3e:e2:7a:e3:9a:0e:1c:50:ed:71:ac:09: 87:fe:8b:f8:4a:3d:44:99:ee:3f:a6:50:16:4e:6d:df:79:d4: be:94:7d:bb:8d:56:50:15:50:34:83:e8:ec:2b:78:4e:2f:57: 32:69:09:4b:f8:51:a3:07:58:bf:b0:b7:3c:cd:94:5b:cb:81: 4e:8c:1e:42:4a:35:a8:3f:18:42:2f:51:22:d4:00:21:c4:5e: f3:fa:60:41:93:2a:f3:13:26:c9:2c:fa:02:73:a2:96:51:54: bb:2e:64:f2:02:1d:8c:98:ac:34:6c:d6:e9:bf:50:04:35:ed: e7:3a:7e:47:f6:7d:9a:6a:a9:46:6c:cb:c0:da:fe:5c:19:16: 9e:e7:da:df:c2:f5:ba:20:b4:17:11:d1:22:cf:ca:15:2b:40: da:54:c8:ba:6a:48:c7:f7:69:46:0f:fc:27:cf:67:a8:2d:3a: 10:e8:9e:dd:34:4d:dd:ee:96:1f:3f:44:20:ed:70:f6:46:8b: 91:5b:ea:72:52:6a:17:76:76:ac:24:2e:69:53:18:73:46:de: 9b:c1:df:d7:31:9c:21:1d:06:72:d9:74:d5:77:05:3e:d0:be: 57:ca:1d:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjYwNDA1MDUyNTU3WhcNMjYwNDEyMDUyNTU3WjAYMRYwFAYD VQQDEw02OWQxZjI2Ni1mZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszSTYfnqJnUv5Yku861WfUZZ+Qq0qLXDBjPbkYL4bgWVsxwCPrtXnh6geJDA QJzg597Fg27pae1NFpwMSD1nvD61UOwxQUbGWcHVZ7/RWrnoAu8zj7n390Jl80wR 3Ps77p355r/wzo+SPsx1ZTQsbDNGAbyoxC3ApzuAA1WEX51sUDxItk3pKQ4KzOmu 2kG0hcvGQCvObD4uFzX+HMaaBU8idaWH4yP8N5LSu2lL0bYQbg7iN2fXEJj0kjiu 6DS8Fv3unIf3myOJlnLRMBiqh8X5PQVhtthBbFrBmBLE8nNEtADKnOI+GfaHLs1q qLYWpFL1scSAFBNSsDyFTqiZ/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/9yaEy 9AIdvkUG8UOHHF/dD3ReMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0 dlYtZG1uTW9yMWcyTHJJc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWxgw0NuC+1+UJSpwsoc1wtMZkGIDC99kPuJ645oOHFDtcawJh/6L+Eo9RJnu P6ZQFk5t33nUvpR9u41WUBVQNIPo7Ct4Ti9XMmkJS/hRowdYv7C3PM2UW8uBTowe Qko1qD8YQi9RItQAIcRe8/pgQZMq8xMmySz6AnOillFUuy5k8gIdjJisNGzW6b9Q BDXt5zp+R/Z9mmqpRmzLwNr+XBkWnufa38L1uiC0FxHRIs/KFStA2lTIumpIx/dp Rg/8J89nqC06EOie3TRN3e6WHz9EIO1w9kaLkVvqclJqF3Z2rCQuaVMYc0bem8Hf 1zGcIR0Gctl01XcFPtC+V8oduw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:11 2026 by rpki-client