$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: DC+GPcbslb3bVtWIRzZMdigEGFNpjlIgvyD6f+cUD0c= Subject key identifier: F5:72:16:E3:91:A0:D6:6E:B3:04:5D:4E:0B:CA:92:78:C4:FD:30:FA Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 0181 Signing time: Sun 05 Apr 2026 04:01:10 +0000 Manifest this update: Sun 05 Apr 2026 04:01:09 +0000 Manifest next update: Sun 12 Apr 2026 04:01:09 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: jME1HXU2bc4iQEkka94k9yrpRzv2oGRI4rXy6V4n3ZI=) 2: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: nKFo2j+4zMG+utkqyTT7eCmh94qQNizYNCAl8D99c1U=) 3: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: lJm555h+eg8dO0CHQ2nNo/R5NutYBuna/K3mXRlVmtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Apr 5 04:01:09 2026 GMT Not After : Apr 12 04:01:09 2026 GMT Subject: CN=69d1de86-40f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:93:bd:a5:28:32:7e:b6:9e:a5:17:59:1d: dd:3c:f6:8e:76:a9:31:fc:67:51:e2:75:d1:f1:42: 60:11:c6:85:75:58:6d:0d:43:d9:88:90:f1:24:bd: d1:d7:8e:d2:fb:9f:40:33:45:8c:85:b3:f3:b7:d0: 48:47:1a:bd:25:7d:a4:3a:99:4d:4b:91:c6:02:fa: 51:78:a4:9a:b5:35:a7:e5:81:26:04:28:03:55:67: 1e:05:e3:1c:62:7a:27:02:c0:df:7b:16:9f:e5:7a: ed:36:a9:2a:49:0a:f0:5a:8f:e0:c2:cb:67:18:cd: 01:c9:91:f6:51:4e:95:d8:68:03:35:54:6b:e9:b8: 49:f5:e4:0a:e4:18:c6:60:a0:83:b4:f5:71:9e:6c: c0:7c:c1:4f:52:86:27:33:3a:0c:f7:85:ac:a4:22: 57:02:a2:6f:a5:24:64:46:b6:9e:10:5e:bf:98:b2: a5:80:83:b1:a8:c1:bc:31:3a:c3:26:58:e1:52:5e: 04:0b:f9:ff:f3:3d:c6:1c:c7:26:94:9d:7b:89:3f: 83:4b:49:f8:fa:4f:f9:b2:fa:f1:7d:2c:35:e5:a2: eb:18:8b:04:e2:d9:66:c2:db:f6:7c:85:b2:21:dc: 82:9a:53:23:f8:98:2b:8e:31:5f:05:0d:3d:ca:c4: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:72:16:E3:91:A0:D6:6E:B3:04:5D:4E:0B:CA:92:78:C4:FD:30:FA X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0b:4f:ee:62:81:73:74:41:d5:9f:f2:f6:e7:84:23:05:de: e4:61:81:50:5c:1f:71:74:25:2f:fd:e9:ec:84:84:81:cd:b5: aa:18:77:18:6a:56:2d:5f:fe:69:0b:57:16:a6:f6:84:6d:3a: 7d:99:17:77:4c:8c:fc:99:a7:7b:17:a7:c6:ab:b8:07:cc:f9: a1:bf:63:8d:cb:04:47:93:95:c6:99:c1:c5:4c:0e:d7:57:7a: d8:02:8c:8a:62:80:f7:6f:f8:c6:31:5f:5b:a2:1c:0a:5c:33: c0:64:df:37:09:1a:6c:a6:54:dc:1d:46:03:1d:eb:c7:e1:dc: bb:c8:14:68:71:bf:00:b2:d7:e7:d4:97:7a:7f:5d:78:f4:0f: ac:bf:ff:6b:82:30:03:ba:c5:18:64:7a:5e:e2:24:24:67:2d: 54:5c:d3:c5:fe:7d:68:c5:09:79:2f:30:a5:11:b1:27:3c:1d: 51:a8:0d:ba:91:9a:07:fd:e5:0f:0a:d6:37:4a:fc:45:0e:b1: 9b:64:e7:eb:9a:ba:87:93:b4:05:17:7f:27:5a:57:fb:bc:ea: d2:fb:1e:58:d7:cc:7e:9c:76:14:5c:8e:5d:5d:a8:eb:1a:ff: 4b:52:63:b1:a5:fb:cc:bd:e1:54:59:57:e2:b4:11:aa:48:3b: da:f5:10:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjYwNDA1MDQwMTA5WhcNMjYwNDEyMDQwMTA5WjAYMRYwFAYD VQQDEw02OWQxZGU4Ni00MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzCTvaUoMn62nqUXWR3dPPaOdqkx/GdR4nXR8UJgEcaFdVhtDUPZiJDxJL3R 147S+59AM0WMhbPzt9BIRxq9JX2kOplNS5HGAvpReKSatTWn5YEmBCgDVWceBeMc YnonAsDfexaf5XrtNqkqSQrwWo/gwstnGM0ByZH2UU6V2GgDNVRr6bhJ9eQK5BjG YKCDtPVxnmzAfMFPUoYnMzoM94WspCJXAqJvpSRkRraeEF6/mLKlgIOxqMG8MTrD JljhUl4EC/n/8z3GHMcmlJ17iT+DS0n4+k/5svrxfSw15aLrGIsE4tlmwtv2fIWy IdyCmlMj+JgrjjFfBQ09ysTlVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVyFuOR oNZuswRdTgvKknjE/TD6MB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmAtP7mKBc3RB1Z/y9ueEIwXe5GGBUFwfcXQlL/3p7ISEgc21qhh3GGpWLV/+ aQtXFqb2hG06fZkXd0yM/Jmnexenxqu4B8z5ob9jjcsER5OVxpnBxUwO11d62AKM imKA92/4xjFfW6IcClwzwGTfNwkabKZU3B1GAx3rx+Hcu8gUaHG/ALLX59SXen9d ePQPrL//a4IwA7rFGGR6XuIkJGctVFzTxf59aMUJeS8wpRGxJzwdUagNupGaB/3l DwrWN0r8RQ6xm2Tn65q6h5O0BRd/J1pX+7zq0vseWNfMfpx2FFyOXV2o6xr/S1Jj saX7zL3hVFlX4rQRqkg72vUQOg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:03 2026 by rpki-client