$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: NsqjdCoP8QbUIbUFNnLJfzrpCqwmOZ9ywy/ujHpwm3s= Subject key identifier: D6:B7:D0:D0:77:60:50:D6:34:DA:7F:51:49:02:83:AE:F9:84:A6:08 Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 08F4 Signing time: Sat 04 Apr 2026 20:09:29 +0000 Manifest this update: Sat 04 Apr 2026 20:09:28 +0000 Manifest next update: Sat 11 Apr 2026 20:09:28 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: uwVz9q3tjsVPjWrbJrUn95tCsE7Z94l7NAvt6TN7pns=) 2: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=) 3: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=) 4: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (hash: e1E68Ho50ngwWh9r7dC17sN0VAiVWs7P5I7wOcaITiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Apr 4 20:09:28 2026 GMT Not After : Apr 11 20:09:28 2026 GMT Subject: CN=69d16ff9-747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:42:3e:ec:93:69:ce:46:8c:82:de:23:c5: 75:57:e6:76:67:bb:c8:a2:19:2c:3c:b0:c5:0d:34: 53:3f:76:3e:07:96:b8:3e:d8:38:00:2c:bc:95:cb: 83:60:f6:5d:82:d0:67:29:8a:21:bb:fc:e5:77:01: 0a:ed:97:24:b8:49:90:11:47:d3:5a:62:e4:ac:89: b8:68:7d:7b:da:1d:f5:8e:d8:c8:8a:fa:d7:94:91: 83:60:51:3e:7c:a0:bf:8d:6b:4a:52:91:48:51:92: 7c:61:8c:cd:8c:dc:9c:a8:df:c7:83:43:45:1b:72: 86:30:b6:11:ef:cf:cd:3b:03:b2:81:d3:57:d9:3a: 3e:7f:8e:96:f8:f1:eb:59:43:53:ed:75:21:58:83: a4:87:7a:5c:84:ff:98:e2:b6:68:a5:70:8d:a2:fd: bd:28:30:e1:46:42:34:bd:91:c8:e7:28:09:e4:1d: 6d:13:72:9a:f3:53:c7:f8:b9:43:28:18:de:59:69: 98:a7:9b:30:62:1f:c8:5d:15:b6:5e:5d:66:30:6b: f0:b8:7d:2d:cb:c8:dc:eb:9a:b0:3b:4e:5e:19:fb: f3:57:b1:f8:1d:97:53:d2:a9:67:73:89:d5:40:8b: f0:44:57:c8:17:e9:33:40:2d:26:14:34:f3:a3:fa: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:D0:D0:77:60:50:D6:34:DA:7F:51:49:02:83:AE:F9:84:A6:08 X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d6:52:02:fb:74:68:68:9b:6a:6c:91:8e:57:f4:06:42:6b: 59:b8:2a:ff:a5:98:96:05:e1:67:28:15:60:60:3c:0c:fc:59: e7:f2:76:4a:b0:35:c0:c2:8c:9c:62:b6:d8:d2:8f:b8:75:bf: 45:8f:06:2a:10:a5:64:cd:51:f2:93:b9:91:07:4d:cc:dd:f0: e7:56:4c:46:a8:a1:75:09:32:94:df:d1:22:e0:55:45:ac:41: 71:3d:ce:5f:65:16:20:e7:02:34:8d:97:26:ba:47:d9:d7:00: 72:ce:67:98:6d:65:66:ac:cd:ba:01:b8:39:25:74:e5:14:e3: 3e:37:92:38:23:e7:b2:f9:51:e3:0a:17:ae:9f:8b:c9:9b:fa: 40:ec:1d:16:09:f0:73:70:fc:4b:9c:7d:f5:e6:30:c0:c2:21: 69:66:32:ed:cf:64:3d:7e:e6:09:c0:ad:f1:c8:d3:78:22:0a: fe:1e:0f:73:a5:fa:18:52:91:db:eb:10:a5:f9:33:74:8b:12: 8d:88:7e:8d:70:a8:61:20:c3:da:8f:4e:48:12:0e:8b:a2:4e: 00:5b:68:80:21:8d:0e:56:15:fb:d9:4c:77:16:ba:28:08:82: 73:c0:28:1f:73:97:2c:dc:6d:c1:f1:76:f4:c8:ec:f0:57:af: 89:80:5f:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYwNDA0MjAwOTI4WhcNMjYwNDExMjAwOTI4WjAYMRYwFAYD VQQDEw02OWQxNmZmOS03NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JNCPuyTac5GjILeI8V1V+Z2Z7vIohksPLDFDTRTP3Y+B5a4Ptg4ACy8lcuD YPZdgtBnKYohu/zldwEK7ZckuEmQEUfTWmLkrIm4aH172h31jtjIivrXlJGDYFE+ fKC/jWtKUpFIUZJ8YYzNjNycqN/Hg0NFG3KGMLYR78/NOwOygdNX2To+f46W+PHr WUNT7XUhWIOkh3pchP+Y4rZopXCNov29KDDhRkI0vZHI5ygJ5B1tE3Ka81PH+LlD KBjeWWmYp5swYh/IXRW2Xl1mMGvwuH0ty8jc65qwO05eGfvzV7H4HZdT0qlnc4nV QIvwRFfIF+kzQC0mFDTzo/oGaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNa30NB3 YFDWNNp/UUkCg675hKYIMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAztZSAvt0aGibamyRjlf0BkJrWbgq/6WYlgXhZygVYGA8DPxZ5/J2SrA1wMKM nGK22NKPuHW/RY8GKhClZM1R8pO5kQdNzN3w51ZMRqihdQkylN/RIuBVRaxBcT3O X2UWIOcCNI2XJrpH2dcAcs5nmG1lZqzNugG4OSV05RTjPjeSOCPnsvlR4woXrp+L yZv6QOwdFgnwc3D8S5x99eYwwMIhaWYy7c9kPX7mCcCt8cjTeCIK/h4Pc6X6GFKR 2+sQpfkzdIsSjYh+jXCoYSDD2o9OSBIOi6JOAFtogCGNDlYV+9lMdxa6KAiCc8Ao H3OXLNxtwfF29Mjs8FeviYBfEA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:42 2026 by rpki-client