$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: MxA8Cw2AtuH1bcpLT8R5Ul93Oec+IfT33OhzXEneLqw= Subject key identifier: 06:89:28:60:7C:8D:FF:3E:71:F4:7B:79:3C:AC:18:1B:8F:27:22:D1 Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0CE6 Signing time: Sat 04 Apr 2026 18:05:24 +0000 Manifest this update: Sat 04 Apr 2026 18:05:23 +0000 Manifest next update: Sat 11 Apr 2026 18:05:23 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: JWNh/Og3RR/d3i7gPz4nAuZvk9y2WXG1YoObUWbKotE=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Apr 4 18:05:23 2026 GMT Not After : Apr 11 18:05:23 2026 GMT Subject: CN=69d152e3-fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:1c:3c:0a:12:b3:7e:4d:48:1b:6f:1d:5e: d6:8a:1a:41:09:b3:84:83:4f:2b:2c:19:e0:f3:e4: 5a:bb:74:53:71:5a:5f:17:eb:83:b4:0e:4f:ef:d1: f6:02:4b:82:ca:4d:c8:99:30:f5:5c:6b:d7:b7:6c: 2c:2b:c9:34:45:62:4a:15:66:47:17:75:9c:95:fa: 5c:57:f9:06:81:16:ce:af:0d:f9:5b:b2:6f:08:43: 1e:7b:0f:0b:eb:d4:1c:8a:ac:b1:ed:a1:1f:73:85: 9a:ea:69:11:cc:2f:27:88:ac:28:02:b4:01:7a:be: 3e:e1:ac:41:de:8c:b8:db:8a:0d:72:48:6b:cd:3d: 16:93:d8:e1:00:46:70:7f:73:e0:52:67:95:f8:8f: 94:e3:d4:34:2f:2c:c6:dc:e9:74:ef:91:20:c9:ba: bd:b3:8c:f8:bc:50:73:15:bd:3c:c4:a0:64:fd:77: 36:a2:58:32:01:e9:bc:e4:13:81:ba:05:74:ea:8d: eb:ba:8b:75:48:52:d6:16:a4:2c:e3:3a:4f:15:35: 3b:ab:7e:b2:ba:c4:75:6a:8f:b7:00:53:17:b2:4e: 06:8a:39:17:f5:4e:20:4e:fe:5d:52:85:79:3f:91: 49:c3:dc:5b:6e:25:39:c5:9d:5f:97:27:29:d8:39: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:89:28:60:7C:8D:FF:3E:71:F4:7B:79:3C:AC:18:1B:8F:27:22:D1 X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0c:b0:10:e6:51:8f:2f:c4:f2:a6:60:3f:d8:c9:a8:7f:86: 69:02:06:5a:94:e1:49:44:53:71:a7:cb:24:71:6f:d1:88:8f: 8e:8d:21:ae:13:63:53:15:5d:a1:29:55:27:87:54:82:98:11: 46:0b:35:aa:89:ec:de:f8:53:fe:83:cb:0d:35:56:73:d6:47: c7:cd:2a:14:f6:62:91:5b:8c:d7:a7:8a:2a:d8:d5:7f:98:1c: ac:13:70:d4:26:71:b6:ef:a5:3b:03:d3:90:06:86:6f:b8:ea: b6:00:ef:09:b1:40:0a:a3:cf:b5:6d:8c:7e:57:ef:01:50:34: 97:57:1b:98:4e:2e:10:a4:46:bb:35:77:d5:54:cd:13:5c:af: bb:e2:06:6d:02:e3:ec:b6:e4:ab:e1:29:d3:f3:e8:f8:24:6f: e1:96:68:a4:2c:b0:c5:bf:46:42:16:6a:b6:d0:5f:1b:4f:42: 17:9e:84:27:87:eb:6f:cc:d9:d6:f4:c4:76:ba:ac:58:af:96: d6:48:f3:cc:3f:9a:2e:c7:4c:f6:d9:2f:9b:8a:87:c4:59:32: 55:9a:64:cd:b9:28:82:7a:75:64:75:78:48:a6:6b:23:9a:e1: ae:55:e0:16:dc:40:e2:22:f1:6e:9e:27:8b:46:68:97:45:2b: 2c:02:ab:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjYwNDA0MTgwNTIzWhcNMjYwNDExMTgwNTIzWjAYMRYwFAYD VQQDEw02OWQxNTJlMy1mZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucgcPAoSs35NSBtvHV7WihpBCbOEg08rLBng8+Rau3RTcVpfF+uDtA5P79H2 AkuCyk3ImTD1XGvXt2wsK8k0RWJKFWZHF3WclfpcV/kGgRbOrw35W7JvCEMeew8L 69Qciqyx7aEfc4Wa6mkRzC8niKwoArQBer4+4axB3oy424oNckhrzT0Wk9jhAEZw f3PgUmeV+I+U49Q0LyzG3Ol075Egybq9s4z4vFBzFb08xKBk/Xc2olgyAem85BOB ugV06o3ruot1SFLWFqQs4zpPFTU7q36yusR1ao+3AFMXsk4GijkX9U4gTv5dUoV5 P5FJw9xbbiU5xZ1flycp2Dk4dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaJKGB8 jf8+cfR7eTysGBuPJyLRMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfgywEOZRjy/E8qZgP9jJqH+GaQIGWpThSURTcafLJHFv0YiPjo0hrhNjUxVd oSlVJ4dUgpgRRgs1qons3vhT/oPLDTVWc9ZHx80qFPZikVuM16eKKtjVf5gcrBNw 1CZxtu+lOwPTkAaGb7jqtgDvCbFACqPPtW2MflfvAVA0l1cbmE4uEKRGuzV31VTN E1yvu+IGbQLj7Lbkq+Ep0/Po+CRv4ZZopCywxb9GQhZqttBfG09CF56EJ4frb8zZ 1vTEdrqsWK+W1kjzzD+aLsdM9tkvm4qHxFkyVZpkzbkognp1ZHV4SKZrI5rhrlXg FtxA4iLxbp4ni0Zol0UrLAKrkA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:19 2026 by rpki-client