$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: S+Vcrxi16hJMi9guOAocf3KSh47/M43/y/whDnFUCSg= Subject key identifier: 5B:B6:75:D2:76:FF:D6:61:B5:25:2C:F4:FC:C6:E4:35:75:DB:FC:15 Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 01A6 Signing time: Sun 05 Apr 2026 03:41:52 +0000 Manifest this update: Sun 05 Apr 2026 03:41:52 +0000 Manifest next update: Sun 12 Apr 2026 03:41:52 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: GOSVblP06RFCO5l0NgE/9XJuRD82pNa7PleTVin333c=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Apr 5 03:41:52 2026 GMT Not After : Apr 12 03:41:52 2026 GMT Subject: CN=69d1da00-a478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:8d:59:9c:d7:7f:03:bc:e1:ca:ab:d6:6a: 95:80:d0:cf:8f:cf:f4:a0:fd:db:1c:85:ea:56:e4: 77:e8:82:1a:1f:5f:f0:26:fa:4c:6c:a7:b5:f9:ff: 3a:4c:9f:c9:f0:95:ae:96:dc:b4:9c:d0:53:d3:52: 0f:8c:55:44:40:17:ee:74:c5:74:d1:02:2c:55:fa: 53:8c:c2:57:e2:ab:e6:7a:87:93:53:8d:92:02:2f: c2:56:c3:19:4b:9d:ed:d6:3f:aa:cf:79:39:41:5e: 05:d2:8d:c4:79:1e:bf:e4:d9:fe:a8:9b:cb:06:7c: be:7a:a7:c2:c7:a9:19:2c:b1:2a:15:12:83:1f:27: 4a:f0:60:b2:f9:5e:47:da:d5:7a:de:b9:ac:00:2e: 78:fb:17:32:2f:e0:1e:54:6d:ac:1e:6f:61:a7:b0: 96:f4:4f:69:c5:ed:9d:d9:bb:2d:53:1f:37:2b:45: 3c:db:fe:8d:c6:85:34:8e:b2:fb:55:af:aa:95:1d: 7b:ce:c9:4c:2a:1e:16:a0:67:2f:68:a4:41:e2:fb: 3b:d8:26:78:74:db:6e:a4:3b:7f:51:73:a6:26:cc: c6:e4:61:c6:a0:2f:86:24:88:4a:08:f6:05:96:4d: c5:b8:a9:39:30:fa:05:5c:75:4a:a6:d5:93:c2:de: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B6:75:D2:76:FF:D6:61:B5:25:2C:F4:FC:C6:E4:35:75:DB:FC:15 X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e6:85:07:2c:4e:03:1c:35:9d:51:e8:58:ee:a9:db:98:9d: 67:2f:2b:8d:d0:af:21:5f:f6:ea:37:ba:30:57:65:b8:9c:e5: 32:c9:f6:28:85:c4:fa:03:69:40:2b:52:c0:33:64:af:a5:18: 34:d8:59:20:29:4e:08:22:fb:c0:89:eb:a1:b8:32:cc:d6:8e: 6c:aa:aa:82:f4:bf:95:a9:6e:0f:5f:f4:d4:92:2e:cd:07:1f: c8:4b:b1:af:89:d8:8d:b4:7d:af:ed:a6:b4:c5:59:b8:eb:5c: 69:fc:c0:f4:d2:7b:79:b8:51:ff:70:e2:ec:0a:2a:e1:c1:0a: c7:6a:5b:98:a4:e8:30:76:52:8d:e5:75:0e:87:74:0b:fb:6f: f3:e5:30:0e:c2:66:31:d9:db:02:1b:3e:26:d5:7a:9c:88:18: 5e:5c:ac:48:3c:ca:c2:df:bc:dc:80:74:04:02:52:f4:d1:b2: c1:ca:94:35:82:81:47:74:f3:4f:87:dc:4e:4c:95:84:26:54: 7b:ca:44:2d:b2:53:5d:28:d2:eb:cb:6b:c3:4d:0c:e4:54:72: 1a:54:7c:32:02:45:78:a7:3e:7f:ea:36:aa:5d:34:f1:4d:db: 95:2d:f5:ea:b6:c4:9f:36:ee:87:f1:12:a0:13:ab:77:4e:97: 80:1c:b0:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjYwNDA1MDM0MTUyWhcNMjYwNDEyMDM0MTUyWjAYMRYwFAYD VQQDEw02OWQxZGEwMC1hNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7CNWZzXfwO84cqr1mqVgNDPj8/0oP3bHIXqVuR36IIaH1/wJvpMbKe1+f86 TJ/J8JWulty0nNBT01IPjFVEQBfudMV00QIsVfpTjMJX4qvmeoeTU42SAi/CVsMZ S53t1j+qz3k5QV4F0o3EeR6/5Nn+qJvLBny+eqfCx6kZLLEqFRKDHydK8GCy+V5H 2tV63rmsAC54+xcyL+AeVG2sHm9hp7CW9E9pxe2d2bstUx83K0U82/6NxoU0jrL7 Va+qlR17zslMKh4WoGcvaKRB4vs72CZ4dNtupDt/UXOmJszG5GHGoC+GJIhKCPYF lk3FuKk5MPoFXHVKptWTwt7oGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu2ddJ2 /9ZhtSUs9PzG5DV12/wVMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEuaFByxOAxw1nVHoWO6p25idZy8rjdCvIV/26je6MFdluJzlMsn2KIXE+gNp QCtSwDNkr6UYNNhZIClOCCL7wInrobgyzNaObKqqgvS/laluD1/01JIuzQcfyEux r4nYjbR9r+2mtMVZuOtcafzA9NJ7ebhR/3Di7Aoq4cEKx2pbmKToMHZSjeV1Dod0 C/tv8+UwDsJmMdnbAhs+JtV6nIgYXlysSDzKwt+83IB0BAJS9NGywcqUNYKBR3Tz T4fcTkyVhCZUe8pELbJTXSjS68trw00M5FRyGlR8MgJFeKc+f+o2ql008U3blS31 6rbEnzbuh/ESoBOrd06XgBywTA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:03 2026 by rpki-client