$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json) Hash identifier: F8gcSvMdfowKcCAEBcZTk4Z2YZYT1ZIsCEyuY0pTM3M= Subject key identifier: 3C:E3:E4:C3:18:70:8D:1C:FB:D4:34:6B:39:4B:31:F5:A6:80:1E:A4 Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft Manifest number: 0212 Signing time: Sun 05 Apr 2026 02:32:24 +0000 Manifest this update: Sun 05 Apr 2026 02:32:23 +0000 Manifest next update: Sun 12 Apr 2026 02:32:23 +0000 Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: sWvWj1qsXL6qaNVvejNe5MKUI84FVs265QF+MK9VBhU=) 2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: ZFhHCFeUOh6APH456On8FdyIkUmcfvvz5IW62S7F69c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D Validity Not Before: Apr 5 02:32:23 2026 GMT Not After : Apr 12 02:32:23 2026 GMT Subject: CN=69d1c9b8-ed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:67:05:46:43:b1:19:b4:8f:bf:1b:5a:e3: 0d:5f:b3:8f:9f:b8:49:32:ae:c2:75:d4:3a:3f:fc: a8:4c:b2:ab:8d:2c:d5:79:b1:61:8d:8b:bb:46:af: 27:51:5a:72:6d:36:c0:9f:da:ee:6d:8c:29:d8:2e: 60:71:3c:d1:c0:d2:82:78:19:34:e7:8c:d9:3d:07: ed:79:2a:10:58:7e:19:b1:8c:83:00:9d:2a:37:34: 64:51:c3:9c:f1:76:bf:b5:01:b9:07:48:1b:91:b0: 16:47:e8:d8:be:5e:55:64:af:ff:3c:ca:c3:e7:f3: a2:fb:a7:ab:15:40:71:c8:69:30:cb:84:69:0d:f7: 86:62:8a:ca:cb:23:c3:dd:2e:a9:67:b6:a6:42:a1: fb:d2:38:80:b2:b5:3a:1b:8e:4d:30:52:79:41:17: c8:5e:bb:e0:ec:af:ed:d4:bd:a9:dd:da:e2:5d:2f: 1e:81:49:21:f2:4a:f2:e8:48:10:b2:6a:48:be:f0: f2:e5:f8:49:86:60:c2:c2:f8:1a:03:b8:42:07:e0: 6f:44:c1:6b:e6:89:1b:c6:ae:48:f5:90:42:93:c2: 7b:28:62:8e:4c:fc:2e:40:51:25:f2:20:d8:e8:54: c5:c8:da:62:e4:31:b2:6a:71:19:87:15:59:25:d1: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E3:E4:C3:18:70:8D:1C:FB:D4:34:6B:39:4B:31:F5:A6:80:1E:A4 X509v3 Authority Key Identifier: keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c9:4e:42:c3:d7:43:0e:87:14:b2:25:3c:61:2e:9c:6e:84: cf:bd:54:bd:2f:cb:1f:14:a9:4e:01:92:10:92:5d:64:e8:63: 14:4d:90:a3:dc:03:b5:6c:fc:ec:b4:81:b1:7f:c8:b4:94:0d: 65:bf:51:f6:8a:10:88:e8:7a:80:4d:de:71:43:15:1d:ac:ef: 54:71:33:df:19:7b:5c:30:d1:05:b7:f6:f8:1f:f6:7e:a8:ca: 95:1a:d3:75:84:09:cd:9a:a9:23:ad:d2:2e:c3:d5:ad:4e:01: d3:07:eb:b7:a6:a0:d0:34:8e:d1:6e:fa:eb:db:fa:ef:8d:4c: 00:74:6c:3c:e4:5c:05:41:fe:29:3b:c9:91:20:b0:10:b5:80: 9b:2d:a9:e6:3b:7c:79:b9:91:3b:b3:ad:27:bb:2e:b5:d3:e5: 17:04:7b:00:c5:e0:58:da:e7:01:fc:3b:8a:20:1f:9b:16:13: 1b:e0:84:01:5c:b3:26:91:44:df:f6:92:ea:89:6b:24:60:bb: 83:b7:43:e2:b2:c7:96:5f:18:dc:9a:35:14:58:91:ee:08:44: 8b:49:93:cb:2d:78:70:82:ed:b5:7f:be:2a:41:4b:19:e5:e3: 4c:c5:4b:d3:c1:68:ca:08:94:69:96:08:0e:c8:b6:9e:65:65: 1f:82:ea:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2MjMxMTAvBgNVBAUTKEE2MTUwNzgwRTBCQTExRUEwQURDNDM0QUVEMzgzQzhC ODJBODk2MUQwHhcNMjYwNDA1MDIzMjIzWhcNMjYwNDEyMDIzMjIzWjAYMRYwFAYD VQQDEw02OWQxYzliOC1lZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0FnBUZDsRm0j78bWuMNX7OPn7hJMq7CddQ6P/yoTLKrjSzVebFhjYu7Rq8n UVpybTbAn9rubYwp2C5gcTzRwNKCeBk054zZPQfteSoQWH4ZsYyDAJ0qNzRkUcOc 8Xa/tQG5B0gbkbAWR+jYvl5VZK//PMrD5/Oi+6erFUBxyGkwy4RpDfeGYorKyyPD 3S6pZ7amQqH70jiAsrU6G45NMFJ5QRfIXrvg7K/t1L2p3driXS8egUkh8kry6EgQ smpIvvDy5fhJhmDCwvgaA7hCB+BvRMFr5okbxq5I9ZBCk8J7KGKOTPwuQFEl8iDY 6FTFyNpi5DGyanEZhxVZJdHwQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzj5MMY cI0c+9Q0azlLMfWmgB6kMB8GA1UdIwQYMBaAFKYVB4DguhHqCtxDSu04PIuCqJYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTYyMy80MTA3MzVDQTE0 OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVlb0szRU5LN1RnOGk0S29s aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoVUhnT0M2RWVvSzNFTks3VGc4aTRLb2xoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTYyMy80MTA3MzVDQTE0OUExMUVFQURGMUM2MTBDNEY5QUUwMi9waFVIZ09DNkVl b0szRU5LN1RnOGk0S29saDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZMlOQsPXQw6HFLIlPGEunG6Ez71UvS/LHxSpTgGSEJJdZOhjFE2Qo9wDtWz8 7LSBsX/ItJQNZb9R9ooQiOh6gE3ecUMVHazvVHEz3xl7XDDRBbf2+B/2fqjKlRrT dYQJzZqpI63SLsPVrU4B0wfrt6ag0DSO0W7669v6741MAHRsPORcBUH+KTvJkSCw ELWAmy2p5jt8ebmRO7OtJ7sutdPlFwR7AMXgWNrnAfw7iiAfmxYTG+CEAVyzJpFE 3/aS6olrJGC7g7dD4rLHll8Y3Jo1FFiR7ghEi0mTyy14cILttX++KkFLGeXjTMVL 08FoygiUaZYIDsi2nmVlH4LqEg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:44 2026 by rpki-client