$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: dPRQRpOgAT2C7M4swYyA1OtFVwQrhEGwh3lInAPqUqw= Subject key identifier: 0A:BB:2B:3A:5B:78:DB:81:8D:9C:77:C5:32:42:3E:5E:2A:F7:C7:CC Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 022D Signing time: Sun 05 Apr 2026 02:25:14 +0000 Manifest this update: Sun 05 Apr 2026 02:25:14 +0000 Manifest next update: Sun 12 Apr 2026 02:25:14 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: 89/S6MfIPJI7xiGZMmZC+Gzq/xE1rpvzhEHIccC1hC0=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: gKGc9eS8Hon8n4wZkVMeLGUVuNuDd19Olmxzqv4FnNw=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: WF4BdfrjlUEbgLanwPar/SCOH9ZwGY05ZV/+90DJ4oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Apr 5 02:25:14 2026 GMT Not After : Apr 12 02:25:14 2026 GMT Subject: CN=69d1c80a-e20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:c9:dc:2a:ce:24:d6:6d:28:ad:f6:91:95: 30:82:75:36:06:bf:63:f5:c2:5c:c9:3e:0b:c8:d8: 23:32:7f:50:c9:d6:63:11:81:0d:5b:b9:ae:94:8e: 68:23:af:a2:f8:76:58:44:d7:47:17:0e:73:a9:7b: c3:23:36:8b:fb:99:26:f4:f2:ce:ee:d8:cf:c9:35: 28:e4:8c:13:64:01:af:d4:d3:bd:0f:fc:f1:f2:25: 3b:94:81:15:94:61:9c:a6:97:6d:d9:0b:c9:6c:ba: d4:88:aa:b3:77:50:e8:9d:bb:fb:49:a1:3c:9a:05: ce:7c:7e:27:18:7f:fc:d8:f6:93:d8:d4:8d:b1:25: 7a:ad:b7:ff:ed:cb:db:e0:a9:df:19:ed:d8:d4:ff: 14:61:8e:82:99:2e:e9:ce:31:9f:3e:a8:63:48:44: a1:18:fc:29:7b:bf:9d:0c:9c:d8:22:2c:f6:3a:13: 51:ff:97:ba:7f:88:7d:4a:c9:08:58:35:60:ca:0c: 4f:73:d7:4b:28:40:a1:31:ce:73:33:74:d0:1e:2b: 45:bd:38:e8:e4:81:fd:79:24:84:8e:4f:b6:51:63: 12:5f:8c:08:1c:d4:99:80:3a:da:3f:89:63:2d:6b: a6:5c:ed:40:93:d4:1b:14:a8:f4:f2:bb:58:82:c7: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BB:2B:3A:5B:78:DB:81:8D:9C:77:C5:32:42:3E:5E:2A:F7:C7:CC X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:80:ab:94:8a:1d:8a:15:5c:28:16:7c:b2:ef:2b:e7:c8:9b: 0b:f1:ea:e3:77:e0:1a:a7:c1:84:ec:b9:d3:2f:73:91:ec:61: 0d:89:1b:09:45:51:00:bd:bc:d2:19:60:ac:da:94:19:94:63: c3:a9:5a:62:f0:92:a3:7d:c6:53:81:7c:13:bf:d9:b8:55:00: 30:53:27:ea:a7:4c:7c:3c:cb:cd:0e:93:0b:24:7c:72:b1:ef: 17:b6:0d:e1:79:d3:f8:0a:b3:a5:63:1a:79:94:27:e1:50:82: ac:d8:0a:a7:c4:18:06:c8:11:b9:89:b7:63:8f:9e:d8:66:c1: 78:27:cb:94:fd:8e:0c:49:96:21:e6:2d:af:f1:de:0c:04:0c: c4:44:b9:62:82:5a:8b:cf:40:b2:97:ce:9d:15:e1:69:f4:f5: 0e:ff:9a:45:22:84:5b:e2:63:68:23:95:5b:48:97:b5:61:0c: 7f:fd:9b:c2:f0:2c:7d:68:53:35:88:d9:86:67:66:1e:8e:18: bd:3a:ba:be:8d:2e:c3:ac:fc:d7:05:5e:2b:11:a1:9f:36:f7: 21:ae:7c:4c:a2:4e:53:6e:68:ab:92:12:81:b0:52:3a:23:b5: 58:62:e9:50:6d:e9:73:f1:9c:ae:de:75:b8:ca:f8:17:65:52: a8:5f:d0:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjYwNDA1MDIyNTE0WhcNMjYwNDEyMDIyNTE0WjAYMRYwFAYD VQQDEw02OWQxYzgwYS1lMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqnJ3CrOJNZtKK32kZUwgnU2Br9j9cJcyT4LyNgjMn9QydZjEYENW7mulI5o I6+i+HZYRNdHFw5zqXvDIzaL+5km9PLO7tjPyTUo5IwTZAGv1NO9D/zx8iU7lIEV lGGcppdt2QvJbLrUiKqzd1Donbv7SaE8mgXOfH4nGH/82PaT2NSNsSV6rbf/7cvb 4KnfGe3Y1P8UYY6CmS7pzjGfPqhjSEShGPwpe7+dDJzYIiz2OhNR/5e6f4h9SskI WDVgygxPc9dLKEChMc5zM3TQHitFvTjo5IH9eSSEjk+2UWMSX4wIHNSZgDraP4lj LWumXO1Ak9QbFKj08rtYgsfRdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAq7Kzpb eNuBjZx3xTJCPl4q98fMMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsoCrlIodihVcKBZ8su8r58ibC/Hq43fgGqfBhOy50y9zkexhDYkbCUVRAL28 0hlgrNqUGZRjw6laYvCSo33GU4F8E7/ZuFUAMFMn6qdMfDzLzQ6TCyR8crHvF7YN 4XnT+AqzpWMaeZQn4VCCrNgKp8QYBsgRuYm3Y4+e2GbBeCfLlP2ODEmWIeYtr/He DAQMxES5YoJai89AspfOnRXhafT1Dv+aRSKEW+JjaCOVW0iXtWEMf/2bwvAsfWhT NYjZhmdmHo4YvTq6vo0uw6z81wVeKxGhnzb3Ia58TKJOU25oq5ISgbBSOiO1WGLp UG3pc/Gcrt51uMr4F2VSqF/QdA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:40:38 2026 by rpki-client