$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: uDprZQLENjeyrthxWOlpu+6RN1pXxZA8IV29GS3HJ3I= Subject key identifier: B1:60:C4:A1:02:90:23:EA:0A:34:13:10:A1:5B:F0:B6:D4:84:B0:42 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3549 Signing time: Sat 04 Apr 2026 14:30:42 +0000 Manifest this update: Sat 04 Apr 2026 14:30:42 +0000 Manifest next update: Sat 11 Apr 2026 14:30:42 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: t+omyKFCDrUAm0dF5cPtHW92/GuAyNZIoPrwRlNllSQ=) 2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: 99YygClo0kB3JyoGQXR3g3LXUoBxw1KUF7KrE+OpztE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13672 (0x3568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Apr 4 14:30:42 2026 GMT Not After : Apr 11 14:30:42 2026 GMT Subject: CN=69d12092-19fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:5d:07:a2:42:65:c6:2a:e7:31:92:35:b3: 16:56:f5:ea:9a:ab:a1:f3:1a:58:e2:90:22:17:90: 21:32:42:98:3e:bf:bb:06:cb:3a:36:33:a9:81:9f: a3:41:f2:c4:87:90:a3:95:0d:19:cd:43:49:bb:4d: 22:da:70:ad:ba:77:02:dd:ea:8f:e5:39:ff:07:f0: 3f:12:af:fd:fb:65:76:b7:9f:36:01:76:54:e2:14: c3:e6:52:d8:4b:8a:bf:8c:fd:df:26:0c:c0:cf:20: 7b:49:b8:02:4b:6f:88:13:a0:cf:27:52:43:1f:0b: a1:3d:2a:05:78:6d:3a:53:de:fe:7b:62:b6:fb:04: eb:3e:ff:ad:84:72:a2:c2:4d:32:59:bc:1a:89:49: 2f:b0:de:b9:6c:c7:71:94:d5:71:8a:1d:f4:e6:ff: 40:72:9f:29:e8:77:4f:99:0f:95:6e:a4:c5:0e:90: cd:53:1a:00:78:42:cc:1f:6f:7d:1d:eb:39:12:73: 20:2d:33:a1:c0:de:1d:d2:80:30:fd:1d:b8:78:8b: 04:06:64:de:66:24:2a:1b:e3:12:59:b1:b5:4f:d1: 05:2b:84:67:d0:72:c3:d9:1f:cf:de:42:23:f4:f8: 31:f2:23:d6:08:8e:14:56:0e:26:68:54:b4:00:5e: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:C4:A1:02:90:23:EA:0A:34:13:10:A1:5B:F0:B6:D4:84:B0:42 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7c:da:41:f9:e1:9e:b0:07:a5:1f:92:0a:9b:9c:96:bd:d9: ab:31:af:9a:bd:9f:74:67:98:83:2e:73:fd:1c:ae:38:27:c2: b6:9b:49:b8:bf:bd:b9:68:ff:b2:f5:aa:45:8f:26:5a:c0:c6: cd:17:76:79:b6:96:06:e9:2b:64:60:f6:91:86:0f:7c:b4:ca: c7:66:e7:b2:01:de:11:c8:a4:e1:7d:39:9e:23:8b:57:74:15: 14:f9:b8:3f:41:a6:f3:e7:56:7a:b9:d8:cc:6c:c1:0b:f3:73: 61:9d:ca:b9:0d:bf:1e:f8:3d:b1:73:18:43:11:ba:8f:21:62: ec:bc:93:cf:3e:8e:b9:36:1c:ca:7d:7c:d8:b4:29:90:c3:20: 75:5c:1c:3b:f7:0e:d3:7f:7b:43:d2:40:de:a2:2a:a1:d8:5d: ca:ac:95:0b:04:63:b6:ee:55:23:e3:b6:78:a6:f9:50:5f:1d: 09:d4:75:75:0f:cf:ba:70:63:7e:f7:11:9a:65:a7:17:2e:31: ed:42:8c:7c:db:4c:aa:11:2e:8e:62:77:a1:17:4b:cf:76:c0: 77:ed:7d:98:b8:67:5c:0d:f3:8f:67:2d:73:bf:d6:c3:24:60: 2a:74:56:c4:ce:12:e7:f2:7b:0b:4b:32:ee:e4:f1:be:f9:14: 51:36:94:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwNDA0MTQzMDQyWhcNMjYwNDExMTQzMDQyWjAYMRYwFAYD VQQDEw02OWQxMjA5Mi0xOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW9dB6JCZcYq5zGSNbMWVvXqmquh8xpY4pAiF5AhMkKYPr+7Bss6NjOpgZ+j QfLEh5CjlQ0ZzUNJu00i2nCtuncC3eqP5Tn/B/A/Eq/9+2V2t582AXZU4hTD5lLY S4q/jP3fJgzAzyB7SbgCS2+IE6DPJ1JDHwuhPSoFeG06U97+e2K2+wTrPv+thHKi wk0yWbwaiUkvsN65bMdxlNVxih305v9Acp8p6HdPmQ+VbqTFDpDNUxoAeELMH299 Hes5EnMgLTOhwN4d0oAw/R24eIsEBmTeZiQqG+MSWbG1T9EFK4Rn0HLD2R/P3kIj 9Pgx8iPWCI4UVg4maFS0AF6rtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFgxKEC kCPqCjQTEKFb8LbUhLBCMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXzaQfnhnrAHpR+SCpuclr3ZqzGvmr2fdGeYgy5z/RyuOCfCtptJuL+9uWj/ svWqRY8mWsDGzRd2ebaWBukrZGD2kYYPfLTKx2bnsgHeEcik4X05niOLV3QVFPm4 P0Gm8+dWernYzGzBC/NzYZ3KuQ2/Hvg9sXMYQxG6jyFi7LyTzz6OuTYcyn182LQp kMMgdVwcO/cO0397Q9JA3qIqodhdyqyVCwRjtu5VI+O2eKb5UF8dCdR1dQ/PunBj fvcRmmWnFy4x7UKMfNtMqhEujmJ3oRdLz3bAd+19mLhnXA3zj2ctc7/WwyRgKnRW xM4S5/J7C0sy7uTxvvkUUTaUqQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:48 2026 by rpki-client