$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: GGK3J8ZG0dSjjl3UvNEEPgmG8OFR6imE3qA59AZVb4k= Subject key identifier: CF:19:46:35:9D:CE:D0:18:73:FB:A9:0F:14:7A:24:4C:80:B6:2C:E1 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 09C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 09B9 Signing time: Sat 04 Apr 2026 19:44:04 +0000 Manifest this update: Sat 04 Apr 2026 19:44:04 +0000 Manifest next update: Sat 11 Apr 2026 19:44:04 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: rztJ0PJXmX+gDiHB/f+t2EcPw5VsytguAj2wigtzN/8=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: +2e0ypBMf/2EVb6MaYRFXsgQhBqjAZqucCJc3CHmtVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Apr 4 19:44:04 2026 GMT Not After : Apr 11 19:44:04 2026 GMT Subject: CN=69d16a04-0cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:18:11:91:f0:4b:f9:58:27:39:ab:b8:1a: 6e:87:7e:e5:ca:3a:8b:1c:49:92:36:cc:7b:2c:85: 6d:62:c3:78:9f:41:72:65:99:c5:cf:b1:91:98:73: 93:d5:55:2c:17:7f:4f:e7:31:38:2c:74:a8:83:4c: 36:a5:4d:e8:06:11:02:df:0c:56:5f:a7:f6:fc:7b: bb:67:79:5c:91:b3:d1:6e:18:49:da:a8:da:74:3b: 22:b0:4a:a6:bc:b8:99:62:c5:c7:70:c9:32:56:89: 69:f1:d7:83:dc:19:38:ea:bf:24:28:e7:55:47:c5: 39:47:08:aa:4e:b7:4a:31:c8:2a:1e:6c:61:02:f2: 18:25:d6:94:75:a9:ce:07:40:6d:ef:6b:69:16:42: 99:ab:38:69:5a:44:58:1d:b2:0a:f3:48:0c:08:fd: eb:a4:bb:9f:33:5d:8f:05:f1:95:36:a8:76:9d:27: ab:c5:cc:29:69:02:53:00:f7:e7:fc:5f:e3:ff:7f: 30:34:9d:75:c7:09:a4:e0:b2:0d:ad:df:1d:d3:c9: f6:15:24:d1:83:eb:49:3f:fb:6c:bc:11:ee:1b:16: 00:3a:6d:5f:f6:77:7c:1a:0d:1b:64:05:9e:b3:a6: 09:23:83:1e:76:49:58:89:31:92:7c:59:24:3e:f2: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:19:46:35:9D:CE:D0:18:73:FB:A9:0F:14:7A:24:4C:80:B6:2C:E1 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:bd:23:ff:f9:4a:fe:07:32:5e:52:7e:29:7b:9a:53:6a:57: 5d:07:5b:86:7d:8e:eb:2f:1a:6c:60:e8:de:88:cf:3c:ae:e3: 16:42:f5:1e:3c:f2:c3:b1:29:e2:11:61:b5:6f:de:78:11:14: 68:8b:06:6d:85:25:9a:47:3e:8b:a7:d6:c6:f1:c4:a4:a2:66: 20:27:20:1e:09:17:91:d1:e9:2a:90:a7:89:7e:d1:75:26:3a: 8c:35:ad:85:57:4e:7d:85:f2:51:dc:9f:91:3d:e8:7d:e7:11: b2:bc:61:34:c0:7a:c1:01:9b:ce:4d:3a:32:d1:9d:0a:17:b2: eb:11:5d:e5:57:f6:69:81:66:7a:73:02:6d:3b:0c:49:6a:3b: fa:fc:79:f2:1a:26:a6:03:34:84:cf:1f:ae:e3:07:5a:3a:d6: 17:3b:ef:3f:16:c5:5d:e7:b3:05:79:fc:f3:52:7e:87:3d:c6: a5:dd:29:c3:b8:9b:15:07:60:ba:03:58:6a:b7:2d:d0:0e:9e: 8d:e9:35:36:f0:03:99:3a:14:96:e6:86:09:2b:2d:83:09:ec: cc:91:65:4a:fc:22:27:80:5b:81:16:d3:35:09:f9:76:0b:4b: 08:79:a5:b1:ab:bf:fa:26:80:f9:8d:21:2d:3d:d8:ad:0b:23: f7:bd:f6:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjYwNDA0MTk0NDA0WhcNMjYwNDExMTk0NDA0WjAYMRYwFAYD VQQDEw02OWQxNmEwNC0wY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+oYEZHwS/lYJzmruBpuh37lyjqLHEmSNsx7LIVtYsN4n0FyZZnFz7GRmHOT 1VUsF39P5zE4LHSog0w2pU3oBhEC3wxWX6f2/Hu7Z3lckbPRbhhJ2qjadDsisEqm vLiZYsXHcMkyVolp8deD3Bk46r8kKOdVR8U5RwiqTrdKMcgqHmxhAvIYJdaUdanO B0Bt72tpFkKZqzhpWkRYHbIK80gMCP3rpLufM12PBfGVNqh2nSerxcwpaQJTAPfn /F/j/38wNJ11xwmk4LINrd8d08n2FSTRg+tJP/tsvBHuGxYAOm1f9nd8Gg0bZAWe s6YJI4MedklYiTGSfFkkPvJIUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8ZRjWd ztAYc/upDxR6JEyAtizhMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZL0j//lK/gcyXlJ+KXuaU2pXXQdbhn2O6y8abGDo3ojPPK7jFkL1Hjzyw7Ep 4hFhtW/eeBEUaIsGbYUlmkc+i6fWxvHEpKJmICcgHgkXkdHpKpCniX7RdSY6jDWt hVdOfYXyUdyfkT3ofecRsrxhNMB6wQGbzk06MtGdChey6xFd5Vf2aYFmenMCbTsM SWo7+vx58hompgM0hM8fruMHWjrWFzvvPxbFXeezBXn881J+hz3Gpd0pw7ibFQdg ugNYarct0A6ejek1NvADmToUluaGCSstgwnszJFlSvwiJ4BbgRbTNQn5dgtLCHml sau/+iaA+Y0hLT3YrQsj9732aw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:52:08 2026 by rpki-client