$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: e4nY6uGXzVXy+vXh4Cb7kATNUmv/D4MMZpyAdDi87e0= Subject key identifier: E5:68:BA:CA:95:85:86:A7:C8:2C:1A:D6:C3:5B:5C:EC:5A:C6:BF:5E Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0B67 Signing time: Sat 04 Apr 2026 19:01:50 +0000 Manifest this update: Sat 04 Apr 2026 19:01:50 +0000 Manifest next update: Sat 11 Apr 2026 19:01:50 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: 6GxLkrZNfpKCpz1bWDoV8SGDYEWNQPHAVYuzVx4tIcY=) 2: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: FlilM/koVByJN7Uw72af4g42T01so31c53bUniW9lIE=) 3: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: oxvZQxfI2lrclpcwuHvgZQ5erEVbaDSTdEtNZCqnaFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Apr 4 19:01:50 2026 GMT Not After : Apr 11 19:01:50 2026 GMT Subject: CN=69d1601e-0205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:47:39:84:1e:83:32:4a:1f:8f:94:9c:5a: 71:46:b6:0d:07:83:c2:ae:f6:59:ff:6d:fd:de:41: 10:fc:10:af:de:4d:e5:47:bd:9d:8d:9f:61:05:09: 14:23:0c:b7:35:ca:04:25:a9:a0:2b:6f:56:9d:94: 0c:c3:2b:09:da:8b:de:a8:03:fa:16:b3:17:ad:52: 78:49:69:0c:b0:f3:43:39:32:55:93:6e:26:7d:d7: b8:82:db:4f:d5:41:20:27:59:3b:2e:19:6f:04:17: 34:ef:24:6b:9d:7e:31:75:44:4a:29:ba:52:af:f7: 30:4e:69:17:43:42:e0:00:25:7a:1c:3f:f8:44:db: 14:72:83:0a:66:78:8e:a3:5b:39:a1:cb:42:da:21: bc:41:b3:0f:a1:47:a8:93:7f:bc:5d:04:50:e9:8a: ec:29:7d:96:fb:18:e4:79:71:22:4e:fd:eb:2b:bc: 3e:93:c9:79:07:12:7e:ee:e9:b9:df:34:c6:be:b3: ed:4d:26:b3:75:2b:f0:4a:81:56:b9:e3:c3:e4:8f: 30:29:ae:d7:6f:5d:32:02:6a:3d:bc:58:5e:d8:bf: 03:59:ea:1e:ee:31:93:40:10:d3:84:50:5a:db:3b: f1:e9:ba:a9:cd:c9:39:b7:e8:55:c9:a8:58:0c:14: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:68:BA:CA:95:85:86:A7:C8:2C:1A:D6:C3:5B:5C:EC:5A:C6:BF:5E X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d1:42:26:37:a3:a7:f4:be:05:ef:bf:85:6a:76:a2:7b:fd: cb:07:d9:d4:12:d5:7a:cf:fb:40:f7:62:e3:47:dd:7f:6a:be: b5:22:8b:c5:5e:4b:10:6b:96:f8:40:31:3d:f2:b6:af:bc:76: 0d:8c:8a:08:af:3e:94:b8:fd:95:0c:01:30:41:e1:4c:1c:4b: 81:c0:d7:b7:62:a2:3a:a4:ed:3c:0d:5c:9b:18:e0:50:c0:7d: be:d5:c7:c4:16:a5:d2:38:b7:f2:e2:f3:d1:56:f7:69:dd:01: 50:8a:c1:29:7d:6f:c9:81:59:52:70:32:3a:67:d3:54:e8:05: e3:6b:d6:29:40:0e:4f:bf:78:b7:6b:49:e1:8b:de:b9:5f:89: c6:35:71:5c:72:c4:1d:aa:88:c3:c4:41:6a:78:f3:9b:56:ba: 79:fc:db:a7:65:87:68:f2:90:3a:3f:73:5f:06:70:33:ca:0f: 55:ce:58:6c:fc:39:39:55:70:76:81:b9:1a:f7:bf:3b:b6:46: 59:2c:28:a0:3f:5a:ac:8d:d6:19:9f:a6:7b:e9:ca:67:6a:21: 14:8b:f9:1f:4f:7d:85:17:67:b4:f9:92:e8:f4:63:ef:62:36: 60:5a:04:22:57:83:6f:d4:e5:0f:75:a4:21:87:07:f1:d8:06: 88:28:3a:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjYwNDA0MTkwMTUwWhcNMjYwNDExMTkwMTUwWjAYMRYwFAYD VQQDEw02OWQxNjAxZS0wMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAne9HOYQegzJKH4+UnFpxRrYNB4PCrvZZ/2393kEQ/BCv3k3lR72djZ9hBQkU Iwy3NcoEJamgK29WnZQMwysJ2oveqAP6FrMXrVJ4SWkMsPNDOTJVk24mfde4gttP 1UEgJ1k7LhlvBBc07yRrnX4xdURKKbpSr/cwTmkXQ0LgACV6HD/4RNsUcoMKZniO o1s5octC2iG8QbMPoUeok3+8XQRQ6YrsKX2W+xjkeXEiTv3rK7w+k8l5BxJ+7um5 3zTGvrPtTSazdSvwSoFWuePD5I8wKa7Xb10yAmo9vFhe2L8DWeoe7jGTQBDThFBa 2zvx6bqpzck5t+hVyahYDBTGNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVousqV hYanyCwa1sNbXOxaxr9eMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPdFCJjejp/S+Be+/hWp2onv9ywfZ1BLVes/7QPdi40fdf2q+tSKLxV5LEGuW +EAxPfK2r7x2DYyKCK8+lLj9lQwBMEHhTBxLgcDXt2KiOqTtPA1cmxjgUMB9vtXH xBal0ji38uLz0Vb3ad0BUIrBKX1vyYFZUnAyOmfTVOgF42vWKUAOT794t2tJ4Yve uV+JxjVxXHLEHaqIw8RBanjzm1a6efzbp2WHaPKQOj9zXwZwM8oPVc5YbPw5OVVw doG5Gve/O7ZGWSwooD9arI3WGZ+me+nKZ2ohFIv5H099hRdntPmS6PRj72I2YFoE IleDb9TlD3WkIYcH8dgGiCg64A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:42:09 2026 by rpki-client