$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: MVSFlz9E4O0vsN/xollt/HKAIa9Lhpn7XP0qsfl0njc= Subject key identifier: 93:2A:B9:8D:C5:45:EC:70:3E:A2:9F:1F:04:2F:72:57:3A:38:F1:27 Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 07CE Signing time: Sat 04 Apr 2026 21:09:35 +0000 Manifest this update: Sat 04 Apr 2026 21:09:35 +0000 Manifest next update: Sat 11 Apr 2026 21:09:35 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: vzOc0gtonyoykCwIUprHw1UI0jNnZ0dyM/TdYzAaljw=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: MIjawd33la/jBdvWj1qHhi7fRFhJrDfr9QRihhf5huE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Apr 4 21:09:35 2026 GMT Not After : Apr 11 21:09:35 2026 GMT Subject: CN=69d17e0f-c6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:22:ab:c1:11:d2:99:5f:71:41:b0:d4:05: 93:04:ca:b1:df:95:25:93:5d:43:a5:eb:7c:5b:b6: 5d:fa:8c:99:0a:39:97:31:0c:a2:24:0c:9e:f6:4d: f0:43:30:46:60:ff:db:8e:1e:2b:c7:5a:5d:94:06: b2:97:5b:bd:ea:0c:fa:2d:3d:8d:8c:c3:80:78:99: f7:4f:35:05:ee:00:a5:8d:d9:6d:df:8f:7e:49:97: cd:d3:7d:02:25:5b:d1:bf:7e:37:8d:0f:7f:2c:bc: 86:55:af:ef:ef:f7:d9:f3:93:7e:99:19:fd:19:fa: a0:15:ef:b0:fb:10:31:0e:d0:3b:22:53:a8:23:64: c3:34:c9:b5:fc:9f:19:dc:80:3c:a9:03:79:a0:8b: 66:89:0a:f3:fb:a2:22:1f:e3:b4:cb:d4:5e:33:d5: 88:dd:af:b5:a4:51:10:a5:2c:6c:0c:b8:a1:2b:4b: e1:e9:85:c9:cc:25:75:c1:3a:86:03:73:36:8f:2f: 88:60:3b:5b:f5:47:3c:cb:95:f6:ed:e9:6a:9b:10: 11:46:04:41:bd:11:bb:b5:32:79:78:f3:3f:27:4f: b6:e0:f0:85:7f:d4:f6:70:45:bb:a3:f0:e9:b4:08: 8b:5a:8b:88:d2:39:c9:30:ab:87:d3:43:2c:d5:46: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:B9:8D:C5:45:EC:70:3E:A2:9F:1F:04:2F:72:57:3A:38:F1:27 X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:07:8f:6d:85:33:64:a0:71:ff:14:51:14:20:e6:b2:fc: 9f:dc:66:17:9b:76:67:1a:4a:f6:e3:e6:22:c6:1f:de:b9:08: 04:4f:f5:a9:ee:b1:13:cf:a5:77:46:4b:b0:af:79:f9:ff:0b: 93:80:32:68:de:63:aa:79:f8:a3:3c:55:be:67:2c:fc:97:bc: d9:86:f1:5f:1a:70:b6:0a:80:b9:f7:cb:bf:73:1b:7f:08:cf: 83:c7:dc:83:fc:3a:b9:31:6d:3c:55:84:dd:3e:2d:a9:70:07: f6:7f:ca:f1:9d:67:56:f6:22:ca:26:f5:90:dd:5e:16:41:e4: d3:b5:cd:db:da:d7:96:0e:2f:0f:e5:44:a1:55:c2:cf:bf:f3: ca:b3:3f:c9:af:b1:33:bb:9d:90:bd:9e:93:53:ad:d8:58:e6: e9:98:15:12:10:79:4a:15:14:88:a6:4d:ca:ed:7e:58:2b:71: 0a:0b:1d:de:16:b2:03:f3:3a:2b:29:a2:f7:0a:85:a0:0b:cb: 98:66:86:fc:10:ba:0f:33:58:55:1d:20:29:53:e4:ba:93:be: 51:2d:12:12:06:0d:e3:4b:28:da:e5:22:91:2f:20:94:e5:13: 9d:df:b7:b5:22:56:77:bb:5d:c3:88:7a:34:7e:51:f5:87:b0: de:73:6f:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjYwNDA0MjEwOTM1WhcNMjYwNDExMjEwOTM1WjAYMRYwFAYD VQQDEw02OWQxN2UwZi1jNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznwiq8ER0plfcUGw1AWTBMqx35Ulk11Dpet8W7Zd+oyZCjmXMQyiJAye9k3w QzBGYP/bjh4rx1pdlAayl1u96gz6LT2NjMOAeJn3TzUF7gCljdlt349+SZfN030C JVvRv343jQ9/LLyGVa/v7/fZ85N+mRn9GfqgFe+w+xAxDtA7IlOoI2TDNMm1/J8Z 3IA8qQN5oItmiQrz+6IiH+O0y9ReM9WI3a+1pFEQpSxsDLihK0vh6YXJzCV1wTqG A3M2jy+IYDtb9Uc8y5X27elqmxARRgRBvRG7tTJ5ePM/J0+24PCFf9T2cEW7o/Dp tAiLWouI0jnJMKuH00Ms1UZrzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMquY3F RexwPqKfHwQvclc6OPEnMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdkHj22FM2Sgcf8UURQg5rL8n9xmF5t2ZxpK9uPmIsYf3rkIBE/1qe6xE8+l d0ZLsK95+f8Lk4AyaN5jqnn4ozxVvmcs/Je82YbxXxpwtgqAuffLv3MbfwjPg8fc g/w6uTFtPFWE3T4tqXAH9n/K8Z1nVvYiyib1kN1eFkHk07XN29rXlg4vD+VEoVXC z7/zyrM/ya+xM7udkL2ek1Ot2Fjm6ZgVEhB5ShUUiKZNyu1+WCtxCgsd3hayA/M6 Kymi9wqFoAvLmGaG/BC6DzNYVR0gKVPkupO+US0SEgYN40so2uUikS8glOUTnd+3 tSJWd7tdw4h6NH5R9Yew3nNvVQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:08 2026 by rpki-client