$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: 3LV0PJwnpEvRD3vm2iK6iK28W/2Y7NoCC7PVhvU2UBs= Subject key identifier: EB:81:A6:CD:6B:A1:54:EC:17:06:70:CF:C7:58:93:B1:55:F2:2D:FC Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 0161 Signing time: Sun 05 Apr 2026 04:22:58 +0000 Manifest this update: Sun 05 Apr 2026 04:22:58 +0000 Manifest next update: Sun 12 Apr 2026 04:22:58 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: awrj2Yafd5uHuvQpIzp2OO4dw+OQICswl8TLUInO1ys=) 2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: 2X6rU+Jt1kusg1IcBqKvM06CQwBTBfrmqQ7drmfa1tQ=) 3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: fPiQQSxTOwbdMOV255D4bAXvgu9GO9QsaMcZ6OWDgrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Apr 5 04:22:58 2026 GMT Not After : Apr 12 04:22:58 2026 GMT Subject: CN=69d1e3a2-2bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:25:a2:55:7f:17:67:30:b1:15:cc:93:8b: 46:08:96:9e:18:10:6c:8b:f8:3b:11:91:0c:9f:74: 95:5a:a7:f3:64:3f:ce:74:41:ff:41:c5:b7:b5:6c: 2e:07:a0:3e:2c:6c:e5:b3:bc:c9:7a:c3:07:87:05: a7:6e:a5:2f:c7:b3:ba:a7:ef:67:aa:c6:4d:9f:db: 72:82:c8:77:49:ba:5f:17:6b:f9:fb:24:37:6f:22: a5:e8:53:79:07:47:6a:e8:8b:ae:3d:e0:b3:22:7d: 2b:fa:e0:1d:2f:43:39:52:4b:d1:3d:51:83:04:39: aa:14:10:da:ec:5c:46:7b:e7:5a:16:18:8a:ff:d9: c4:38:47:66:00:17:26:a6:9e:da:72:b9:7b:e0:9a: 74:4f:0a:10:99:17:11:4e:10:7b:8f:7d:10:2f:1d: b3:b1:13:54:83:79:b0:66:1f:fe:e0:06:40:42:54: ba:6d:7e:ad:07:27:ad:18:ff:dd:d1:22:0c:38:e8: 56:bb:77:65:b8:d4:b0:f2:45:8c:88:99:ba:90:43: 1c:cf:fc:82:4c:5a:9e:7e:7f:a1:29:bc:0a:8b:b2: 6b:7f:52:dd:42:03:1d:ff:b8:8e:97:3f:d0:f3:60: a9:3f:ab:85:ca:5a:5e:60:97:de:d1:14:ab:72:a0: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:A6:CD:6B:A1:54:EC:17:06:70:CF:C7:58:93:B1:55:F2:2D:FC X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:33:ee:7e:0e:de:71:d1:23:05:aa:52:b2:f0:90:ac:92:8c: 0b:0d:fd:4a:ec:d2:65:59:92:a9:d8:0d:14:98:c1:c2:20:96: 56:b4:53:dc:dc:a5:9c:91:f3:2d:aa:85:39:00:e7:ff:8f:3c: 2a:ba:cb:12:3a:ae:a2:e6:86:37:48:d3:e4:e1:01:58:04:c9: 1f:b7:52:a9:82:d6:a3:ac:88:58:f2:27:bb:70:0a:04:72:29: d0:ce:24:34:52:18:e8:dd:5c:af:4f:79:de:14:46:ed:fc:49: 12:3e:ee:cf:63:22:d0:90:ba:ae:fe:56:36:81:9e:8d:5f:6f: 08:89:7e:c1:5d:ab:6d:2b:b3:5a:45:e3:bb:cd:74:c2:dc:4f: fb:4d:01:74:4e:b5:cb:ce:1e:ec:b2:06:f0:7c:25:b7:b5:cf: 68:67:e7:71:78:b2:31:95:ff:8c:27:0a:c5:f6:bd:92:ad:84: c0:c6:1b:bd:2c:5c:d7:df:23:08:14:1e:a4:ae:9c:a0:d4:51: 1a:1b:17:b0:06:28:44:cc:97:96:ca:36:e5:9a:1d:0f:cf:2e: 1e:ae:7c:37:5b:51:11:df:30:b2:10:11:bc:76:79:4b:3b:42: 13:6b:d8:9e:ae:d0:55:4c:88:5e:d5:33:01:bf:e0:9b:59:8d: 18:83:a2:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjYwNDA1MDQyMjU4WhcNMjYwNDEyMDQyMjU4WjAYMRYwFAYD VQQDEw02OWQxZTNhMi0yYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3j4lolV/F2cwsRXMk4tGCJaeGBBsi/g7EZEMn3SVWqfzZD/OdEH/QcW3tWwu B6A+LGzls7zJesMHhwWnbqUvx7O6p+9nqsZNn9tygsh3SbpfF2v5+yQ3byKl6FN5 B0dq6IuuPeCzIn0r+uAdL0M5UkvRPVGDBDmqFBDa7FxGe+daFhiK/9nEOEdmABcm pp7acrl74Jp0TwoQmRcRThB7j30QLx2zsRNUg3mwZh/+4AZAQlS6bX6tByetGP/d 0SIMOOhWu3dluNSw8kWMiJm6kEMcz/yCTFqefn+hKbwKi7Jrf1LdQgMd/7iOlz/Q 82CpP6uFylpeYJfe0RSrcqDNPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuBps1r oVTsFwZwz8dYk7FV8i38MB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtjPufg7ecdEjBapSsvCQrJKMCw39SuzSZVmSqdgNFJjBwiCWVrRT3NylnJHz LaqFOQDn/488KrrLEjquouaGN0jT5OEBWATJH7dSqYLWo6yIWPInu3AKBHIp0M4k NFIY6N1cr0953hRG7fxJEj7uz2Mi0JC6rv5WNoGejV9vCIl+wV2rbSuzWkXju810 wtxP+00BdE61y84e7LIG8Hwlt7XPaGfncXiyMZX/jCcKxfa9kq2EwMYbvSxc198j CBQepK6coNRRGhsXsAYoRMyXlso25ZodD88uHq58N1tREd8wshARvHZ5SztCE2vY nq7QVUyIXtUzAb/gm1mNGIOi4Q== -----END CERTIFICATE-----Generated at Mon Apr 6 19:17:08 2026 by rpki-client