$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: ezg4T2frDo2eIPhILBO41CaIkxOJgJ/w6IkXqUYwicU= Subject key identifier: 6A:CA:91:17:FD:74:BA:0D:A7:B0:A7:F3:19:E8:6F:9E:28:92:EC:AE Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0DC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0DB5 Signing time: Sat 04 Apr 2026 17:46:58 +0000 Manifest this update: Sat 04 Apr 2026 17:46:58 +0000 Manifest next update: Sat 11 Apr 2026 17:46:58 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: n0I5jHdxExhkJXNciLBpkgwogwQdnXtfbIwiamiYe6Q=) 2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: 5UiluviLkvdmrPxj6Fg50iGwlauvTqLugtpFjTJWRPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3524 (0xdc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Apr 4 17:46:58 2026 GMT Not After : Apr 11 17:46:58 2026 GMT Subject: CN=69d14e92-3eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:72:6e:c7:85:84:5c:fd:e5:34:76:2d:9f: bd:a6:34:fa:f6:16:b8:a7:38:c0:e7:a6:2b:45:33: c8:dd:6c:83:c0:35:32:09:bf:ee:60:f1:79:9a:ab: 56:ad:43:bd:f7:6a:25:cf:0c:34:21:21:06:61:0f: 9f:d2:b9:cd:f2:6c:c5:53:c0:a3:07:6a:2f:2d:76: db:d2:ef:76:58:e8:16:c5:70:38:41:01:ca:76:29: b0:9b:87:3e:e0:3c:a1:2d:42:17:10:81:ba:9d:9a: 72:9b:81:13:55:ab:ad:e1:71:b5:cc:f2:e0:b4:c2: 4d:9a:e7:c3:7b:d2:d1:db:53:00:8c:d5:da:63:4a: 0b:91:66:ea:52:87:12:5d:36:87:ca:b5:10:58:12: da:1b:7f:d5:7a:52:4a:00:8a:28:ab:9f:61:06:27: ef:fb:7e:19:2b:12:0a:62:5a:36:81:ff:ed:f1:b1: a2:2a:43:0d:72:8f:ca:c2:3b:62:7a:47:0c:9c:dd: 1d:4d:26:cc:01:1b:15:d5:75:60:9b:3c:e0:12:a1: a0:35:c2:13:75:74:b0:51:1c:f6:d8:cd:eb:91:43: 07:63:1e:52:b3:39:85:84:52:23:ca:41:aa:bc:aa: 67:89:6c:e8:39:b3:21:3b:23:5e:62:7b:47:1f:be: 5e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:91:17:FD:74:BA:0D:A7:B0:A7:F3:19:E8:6F:9E:28:92:EC:AE X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:02:19:5e:39:4c:bb:5d:b0:57:c7:92:ec:1a:ee:39:11:6b: 1d:93:24:92:0c:b5:56:e9:e4:50:d0:37:36:d9:bb:ca:fc:49: b8:51:e5:82:c8:75:4f:32:3c:d1:c2:89:6f:75:34:eb:dc:65: fe:97:ec:f5:0c:c4:ef:de:e9:4c:7e:d6:cb:d2:9c:82:dc:43: 09:17:31:41:8c:38:00:8a:46:20:39:11:0b:2a:4c:b6:fc:8a: 56:ce:ab:fa:dc:13:af:bd:a8:25:a0:f5:d0:74:0b:76:35:96: 76:72:ce:5b:2a:3d:c4:e0:e4:cf:7d:bf:0d:3e:85:95:1f:2c: 27:7e:68:ab:b6:ce:0a:99:2e:48:d8:0b:19:24:fc:86:fc:e9: 0b:ab:d0:0a:da:4f:f8:3a:bd:9e:4e:41:fb:d0:7c:6a:62:cf: 4a:55:31:4f:ce:30:18:86:5f:06:e0:00:c5:5f:3f:64:84:bf: 21:b5:fe:9d:df:e5:4d:fb:e2:be:9d:f7:80:cf:30:40:b0:3d: 92:90:0b:15:75:33:43:01:0a:52:4c:f6:79:5f:1e:05:04:24: 51:86:70:f6:3d:44:ed:23:15:08:eb:9e:da:92:05:45:bf:03: e0:dd:d9:0c:7a:55:3c:a7:77:82:5b:0d:67:d3:83:31:85:f6: d8:0e:07:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjYwNDA0MTc0NjU4WhcNMjYwNDExMTc0NjU4WjAYMRYwFAYD VQQDEw02OWQxNGU5Mi0zZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIpybseFhFz95TR2LZ+9pjT69ha4pzjA56YrRTPI3WyDwDUyCb/uYPF5mqtW rUO992olzww0ISEGYQ+f0rnN8mzFU8CjB2ovLXbb0u92WOgWxXA4QQHKdimwm4c+ 4DyhLUIXEIG6nZpym4ETVaut4XG1zPLgtMJNmufDe9LR21MAjNXaY0oLkWbqUocS XTaHyrUQWBLaG3/VelJKAIooq59hBifv+34ZKxIKYlo2gf/t8bGiKkMNco/Kwjti ekcMnN0dTSbMARsV1XVgmzzgEqGgNcITdXSwURz22M3rkUMHYx5SszmFhFIjykGq vKpniWzoObMhOyNeYntHH75egQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrKkRf9 dLoNp7Cn8xnob54okuyuMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQIZXjlMu12wV8eS7BruORFrHZMkkgy1VunkUNA3Ntm7yvxJuFHlgsh1TzI8 0cKJb3U069xl/pfs9QzE797pTH7Wy9KcgtxDCRcxQYw4AIpGIDkRCypMtvyKVs6r +twTr72oJaD10HQLdjWWdnLOWyo9xODkz32/DT6FlR8sJ35oq7bOCpkuSNgLGST8 hvzpC6vQCtpP+Dq9nk5B+9B8amLPSlUxT84wGIZfBuAAxV8/ZIS/IbX+nd/lTfvi vp33gM8wQLA9kpALFXUzQwEKUkz2eV8eBQQkUYZw9j1E7SMVCOue2pIFRb8D4N3Z DHpVPKd3glsNZ9ODMYX22A4HOg== -----END CERTIFICATE-----Generated at Mon Apr 6 14:00:07 2026 by rpki-client