$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: giMYkAKwIbHNPo3gFY8tqiFob79IyqSOOOQ+FETfRO8= Subject key identifier: 77:1F:AC:8D:5E:B4:B0:94:29:6A:04:C5:E2:C3:7A:FD:1C:02:22:21 Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 03C3 Signing time: Sun 05 Apr 2026 00:23:42 +0000 Manifest this update: Sun 05 Apr 2026 00:23:42 +0000 Manifest next update: Sun 12 Apr 2026 00:23:42 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: bi645UD4oOszZquWovMS0hmnsO1EtgD1bTaXZhtj/5g=) 2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: R2MlUYOf/u8171LrTBkcBiWITVJtW2ZO6spsvzdi5ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: Apr 5 00:23:42 2026 GMT Not After : Apr 12 00:23:42 2026 GMT Subject: CN=69d1ab8e-b0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:f9:57:03:67:8f:4e:17:88:3c:c9:ea:e3: 73:80:cf:2f:bb:be:01:a9:97:48:2e:97:02:d8:da: 98:e5:50:d5:84:f8:5e:62:3a:a8:7f:a4:66:2c:9d: dc:08:e5:a4:2c:35:ef:5d:c1:3c:2e:2a:06:64:ab: 41:b1:8b:fe:2e:9d:8f:62:c7:de:1a:27:e4:03:8b: 28:64:fd:d1:44:69:6a:2c:7c:db:26:66:3a:bd:91: 33:73:ae:87:bb:ff:25:8e:97:7e:eb:ee:46:b4:c0: 6d:ab:4f:8b:16:5a:f2:61:e2:bb:a8:24:c6:1d:45: bf:ad:3f:ff:d8:29:eb:36:40:c3:29:4d:6f:83:0b: 75:cb:6b:c1:18:75:79:6d:55:fa:df:42:f8:69:b2: 9f:5e:2a:f1:ee:3b:a0:30:83:f6:52:9d:8d:77:64: df:37:cd:8a:29:87:72:f0:ef:1d:d2:56:14:db:11: bb:14:36:c3:b4:77:40:95:2f:4f:7b:cf:93:72:7f: 66:19:ae:7f:86:85:50:ad:c5:38:ab:97:f4:ec:ca: 4d:cd:51:5d:68:69:d3:cb:3c:d2:07:38:e8:f4:41: f0:7d:25:d0:be:65:ff:24:2f:e1:36:1b:14:16:d6: 25:f1:dd:ef:83:4b:fd:47:37:12:78:7b:ce:6d:19: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1F:AC:8D:5E:B4:B0:94:29:6A:04:C5:E2:C3:7A:FD:1C:02:22:21 X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:76:c1:42:8b:e9:7b:b6:63:6f:83:69:a8:71:62:1c:3f:a5: 86:2c:63:96:30:7e:c9:dd:06:2e:86:54:81:e5:2c:e3:75:1f: 99:ec:00:7b:34:cf:f7:b1:8f:20:92:2d:43:98:e0:51:6b:fa: c5:09:f3:1e:16:d6:df:cf:59:00:8c:8a:4a:79:cb:d1:d3:0a: c6:2f:99:5b:ad:25:05:c9:7b:d8:8d:10:a5:1e:08:c8:43:df: f8:ab:bb:60:1e:a6:f1:10:15:4f:06:eb:e1:88:5c:6d:75:c0: 8f:4a:20:15:a9:47:30:27:59:89:03:d8:89:e2:4f:5b:b0:1a: 2c:b0:a2:ea:2f:7f:2d:fa:6f:7c:91:6d:f3:e4:a4:9d:ee:fb: 77:87:ad:08:22:e8:19:3f:05:76:92:02:64:09:40:0d:ea:3a: 12:ee:be:7b:ee:4b:6e:88:87:0b:8b:ee:d7:76:c6:13:b3:6c: 28:6c:57:ac:99:58:fd:21:4b:f5:04:61:a1:26:99:0c:0c:24: 5d:d4:8a:1b:5c:fd:35:32:ab:86:34:78:40:00:d7:eb:61:1a: 1e:f3:13:c4:6b:5b:16:17:07:38:c4:37:af:9a:23:e2:d0:e8: 0d:a7:a6:c5:fd:f4:99:89:88:6e:e2:c4:11:1f:56:fb:a6:8b: 40:29:44:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjYwNDA1MDAyMzQyWhcNMjYwNDEyMDAyMzQyWjAYMRYwFAYD VQQDEw02OWQxYWI4ZS1iMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIL5VwNnj04XiDzJ6uNzgM8vu74BqZdILpcC2NqY5VDVhPheYjqof6RmLJ3c COWkLDXvXcE8LioGZKtBsYv+Lp2PYsfeGifkA4soZP3RRGlqLHzbJmY6vZEzc66H u/8ljpd+6+5GtMBtq0+LFlryYeK7qCTGHUW/rT//2CnrNkDDKU1vgwt1y2vBGHV5 bVX630L4abKfXirx7jugMIP2Up2Nd2TfN82KKYdy8O8d0lYU2xG7FDbDtHdAlS9P e8+Tcn9mGa5/hoVQrcU4q5f07MpNzVFdaGnTyzzSBzjo9EHwfSXQvmX/JC/hNhsU FtYl8d3vg0v9RzcSeHvObRkdAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcfrI1e tLCUKWoExeLDev0cAiIhMB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvnbBQovpe7Zjb4NpqHFiHD+lhixjljB+yd0GLoZUgeUs43UfmewAezTP97GP IJItQ5jgUWv6xQnzHhbW389ZAIyKSnnL0dMKxi+ZW60lBcl72I0QpR4IyEPf+Ku7 YB6m8RAVTwbr4YhcbXXAj0ogFalHMCdZiQPYieJPW7AaLLCi6i9/LfpvfJFt8+Sk ne77d4etCCLoGT8FdpICZAlADeo6Eu6+e+5LboiHC4vu13bGE7NsKGxXrJlY/SFL 9QRhoSaZDAwkXdSKG1z9NTKrhjR4QADX62EaHvMTxGtbFhcHOMQ3r5oj4tDoDaem xf30mYmIbuLEER9W+6aLQClELA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:34 2026 by rpki-client