$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: XymMDI/m4VOJRFdi+j3w/YYRJpU/hdxJ6tENlryhy2A= Subject key identifier: 3D:40:7C:2F:B6:DF:FD:0E:2B:50:21:1F:5D:CD:B3:79:37:97:52:6D Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 052A Signing time: Sat 04 Apr 2026 23:22:37 +0000 Manifest this update: Sat 04 Apr 2026 23:22:36 +0000 Manifest next update: Sat 11 Apr 2026 23:22:36 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: DSpdM/uz0Kt+Cel8TEKphz9J4IubOKcJ10o67s93Hno=) 2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=) 3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Apr 4 23:22:36 2026 GMT Not After : Apr 11 23:22:36 2026 GMT Subject: CN=69d19d3c-b912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:8f:d3:b8:d1:06:2f:83:5d:8e:f1:5f:e5: b4:9e:64:16:d1:4d:10:ed:57:ff:bb:11:4a:4d:00: fb:f6:91:a1:c6:4b:73:4b:b9:c7:33:da:80:c1:8c: 58:18:49:f0:c5:38:26:09:34:d0:3a:d6:8f:e1:bd: ce:b3:58:43:7d:fb:b0:42:32:81:f1:51:05:ad:8a: 01:ca:68:0a:fc:e8:96:1f:d8:0b:00:b7:14:63:0a: b2:3a:02:30:d8:ad:a2:e7:27:d9:47:8f:d3:d6:13: 10:f5:74:e5:ac:36:fc:6c:3d:ca:29:de:43:ae:a3: 93:b3:b7:8e:ee:1c:88:0f:63:1a:50:c8:41:ea:6e: 6e:2d:b6:ee:17:53:9a:96:62:cf:0f:b7:dc:49:37: 9c:4e:fa:f3:88:6b:ef:1c:d1:b7:ca:af:71:4c:bc: d2:e2:17:85:31:83:54:e8:45:2e:38:25:f4:ec:13: 39:82:63:51:a2:26:2c:ed:01:db:df:ab:0d:d7:97: de:ea:fb:42:fe:59:a6:8c:3b:9b:b8:ac:0c:ae:30: b0:48:30:14:0b:53:71:1b:42:c2:75:64:fb:a0:68: f6:c6:97:4e:12:a7:cc:53:6b:0a:4d:bc:a2:6e:96: ab:c5:86:9a:d5:c6:89:9f:15:6a:ae:ab:26:2a:20: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:40:7C:2F:B6:DF:FD:0E:2B:50:21:1F:5D:CD:B3:79:37:97:52:6D X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ad:7c:b9:75:2e:fb:95:95:cd:59:87:9d:af:88:7c:5d:c1: 94:6a:3f:15:cc:d5:1f:4a:f8:8a:04:d2:0a:bf:83:73:6c:47: 90:f9:48:1c:ef:a3:d3:03:f0:8b:01:b2:e8:de:f1:08:41:b7: 60:8d:ee:41:08:6d:87:bf:69:fb:1b:23:04:95:36:a3:85:67: 20:aa:9e:24:ae:42:56:03:7f:95:16:12:79:c2:4c:4d:be:47: 73:38:d6:f6:60:8c:ea:13:e9:f0:f2:10:21:42:13:56:82:f3: e2:15:28:be:71:97:de:c8:7f:35:8b:d7:0b:99:84:a9:50:8d: 11:cf:34:8b:2c:09:e7:3a:60:c5:8d:b6:fc:fd:44:eb:90:ec: 76:11:51:f2:50:43:15:4a:04:60:4b:43:87:b2:83:2e:06:57: 78:87:7d:84:ee:e4:0e:2b:10:ba:1e:66:56:e4:75:a8:54:0b: e1:7c:f0:f6:a4:54:b4:5a:8f:c7:b9:c1:ee:76:18:81:2b:c5: 6a:8b:8e:2c:eb:ea:15:f0:22:69:b9:4a:df:2e:02:98:3b:e6: c4:3c:49:50:44:b1:bf:99:71:71:38:a2:a9:41:61:14:6d:93: fb:ec:51:fa:3e:bd:32:5d:1f:19:35:d4:b9:4b:0d:ba:96:3c: ce:8a:ee:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjYwNDA0MjMyMjM2WhcNMjYwNDExMjMyMjM2WjAYMRYwFAYD VQQDEw02OWQxOWQzYy1iOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts2P07jRBi+DXY7xX+W0nmQW0U0Q7Vf/uxFKTQD79pGhxktzS7nHM9qAwYxY GEnwxTgmCTTQOtaP4b3Os1hDffuwQjKB8VEFrYoBymgK/OiWH9gLALcUYwqyOgIw 2K2i5yfZR4/T1hMQ9XTlrDb8bD3KKd5DrqOTs7eO7hyID2MaUMhB6m5uLbbuF1Oa lmLPD7fcSTecTvrziGvvHNG3yq9xTLzS4heFMYNU6EUuOCX07BM5gmNRoiYs7QHb 36sN15fe6vtC/lmmjDubuKwMrjCwSDAUC1NxG0LCdWT7oGj2xpdOEqfMU2sKTbyi bparxYaa1caJnxVqrqsmKiDVuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1AfC+2 3/0OK1AhH13Ns3k3l1JtMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPq18uXUu+5WVzVmHna+IfF3BlGo/FczVH0r4igTSCr+Dc2xHkPlIHO+j0wPw iwGy6N7xCEG3YI3uQQhth79p+xsjBJU2o4VnIKqeJK5CVgN/lRYSecJMTb5HczjW 9mCM6hPp8PIQIUITVoLz4hUovnGX3sh/NYvXC5mEqVCNEc80iywJ5zpgxY22/P1E 65DsdhFR8lBDFUoEYEtDh7KDLgZXeId9hO7kDisQuh5mVuR1qFQL4Xzw9qRUtFqP x7nB7nYYgSvFaouOLOvqFfAiablK3y4CmDvmxDxJUESxv5lxcTiiqUFhFG2T++xR +j69Ml0fGTXUuUsNupY8zoruVA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:04 2026 by rpki-client