$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: fJ6PpkqpCrubgnlbS/pyxPIQb628aQXbwqEnSskT8H4= Subject key identifier: D3:DB:D1:3F:F3:7B:8D:7E:F9:0E:8F:02:B0:AA:4A:5B:FF:FA:55:89 Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 37 Signing time: Tue 21 Apr 2026 08:23:27 +0000 Manifest this update: Tue 21 Apr 2026 08:23:27 +0000 Manifest next update: Tue 28 Apr 2026 08:23:27 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: RMJ3+r4/NfKDHgiM0mjCA4XNEZYJFnm1Gwtnzos0lXw=) 2: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) 3: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Apr 21 08:23:27 2026 GMT Not After : Apr 28 08:23:27 2026 GMT Subject: CN=69e733ff-c7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:0a:60:c1:8b:17:21:83:45:91:e6:62:cb: b4:64:8f:61:0f:bf:8f:c5:06:be:5c:5d:57:d3:d8: 9f:b2:d0:56:2f:cc:52:f3:26:d0:11:48:39:35:10: dd:15:0c:e0:9f:2c:63:0a:25:9f:6c:37:a8:b0:10: 49:da:bc:09:f4:8f:55:06:6e:c3:50:77:fb:78:59: f1:7c:13:9c:6d:b5:a8:1d:91:56:6b:6e:03:28:75: f4:1b:52:f5:7e:1a:26:66:53:7e:73:7a:05:c2:05: 1d:8b:5e:51:50:43:ba:4b:0b:2e:82:a3:02:b1:ac: d8:4a:8e:e7:61:69:c2:4a:67:d9:57:b8:34:66:c1: df:f1:5b:98:b5:e9:d0:e5:26:56:c7:9e:55:e0:ee: 83:32:b4:73:14:bc:25:43:77:dd:e4:73:30:6e:ae: 56:0f:fe:dc:c8:cc:7b:7e:c0:f3:6a:8f:19:93:65: 39:02:88:39:3b:76:b3:ac:9f:71:73:c1:e9:03:8b: ea:4b:6c:f6:9a:5a:2c:cc:73:55:27:37:b8:f4:73: 35:09:50:d1:80:49:71:8b:8d:b9:0f:a7:ef:07:ef: fc:09:a7:b6:1b:9d:1c:0f:4b:ea:9c:45:8d:ec:62: a5:e6:8e:e6:b8:ee:cf:1e:39:e4:83:a4:a7:09:0b: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:D1:3F:F3:7B:8D:7E:F9:0E:8F:02:B0:AA:4A:5B:FF:FA:55:89 X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:82:8f:a3:d9:4e:b2:90:96:e8:82:d0:2b:17:f8:51:8b:43: 7d:2c:99:e3:18:79:81:76:54:a5:13:d3:aa:71:bf:d6:36:25: 0f:c3:a4:a5:5c:64:ac:5a:f5:fb:13:80:da:cb:d1:59:1f:90: ba:74:b8:4d:a8:fb:4b:63:04:5e:50:88:75:37:a6:88:5a:d7: 00:7d:31:c2:ea:f3:67:07:8b:eb:3c:4a:ee:74:6c:6c:88:c0: 0b:c9:91:c5:a6:2b:62:45:ed:45:98:e1:5d:29:97:67:65:4f: 78:bb:49:30:3e:ad:f5:bc:81:f0:60:5b:db:75:f4:28:7d:3c: 24:0c:1c:c9:82:c9:2f:d0:c3:79:e1:84:c7:8f:73:93:17:ec: e5:34:a3:95:f6:41:72:2a:fe:25:38:97:a0:01:92:a2:cb:df: 80:ff:89:f6:17:a2:a6:83:bf:c8:bb:96:b3:82:18:ff:30:71: 7f:dc:25:52:50:53:a4:7b:36:aa:c3:d9:7f:ef:5d:46:d1:8b: e8:a9:ef:84:8a:21:8a:fc:9a:99:93:32:48:38:bb:a2:32:2e: e0:70:31:a6:66:67:2e:c6:98:8c:21:60:00:5f:8c:7d:ed:0d: 3e:2d:9b:96:f5:60:60:bf:fb:44:f7:79:68:2d:67:7b:0f:8d: ac:d1:f7:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoOThFOTk1QkMzQTRGRjJDRDA4QzZFMzU1NEI2NjM3NEI2 Njk3OTI3MDAeFw0yNjA0MjEwODIzMjdaFw0yNjA0MjgwODIzMjdaMBgxFjAUBgNV BAMTDTY5ZTczM2ZmLWM3ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFBgpgwYsXIYNFkeZiy7Rkj2EPv4/FBr5cXVfT2J+y0FYvzFLzJtARSDk1EN0V DOCfLGMKJZ9sN6iwEEnavAn0j1UGbsNQd/t4WfF8E5xttagdkVZrbgModfQbUvV+ GiZmU35zegXCBR2LXlFQQ7pLCy6CowKxrNhKjudhacJKZ9lXuDRmwd/xW5i16dDl JlbHnlXg7oMytHMUvCVDd93kczBurlYP/tzIzHt+wPNqjxmTZTkCiDk7drOsn3Fz wekDi+pLbPaaWizMc1UnN7j0czUJUNGASXGLjbkPp+8H7/wJp7YbnRwPS+qcRY3s YqXmjua47s8eOeSDpKcJC/3NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU09vRP/N7 jX75Do8CsKpKW//6VYkwHwYDVR0jBBgwFoAUmOmVvDpP8s0IxuNVS2Y3S2aXknAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0YwRENDREQ0RjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbU9tVnZEcFA4czBJeHVOVlMyWTNTMmFYa25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NUY3L0YwRENDREQ0RjFGMTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMw SXh1TlZTMlkzUzJhWGtuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBggo+j2U6ykJbogtArF/hRi0N9LJnjGHmBdlSlE9Oqcb/WNiUPw6SlXGSsWvX7 E4Day9FZH5C6dLhNqPtLYwReUIh1N6aIWtcAfTHC6vNnB4vrPErudGxsiMALyZHF pitiRe1FmOFdKZdnZU94u0kwPq31vIHwYFvbdfQofTwkDBzJgskv0MN54YTHj3OT F+zlNKOV9kFyKv4lOJegAZKiy9+A/4n2F6Kmg7/Iu5azghj/MHF/3CVSUFOkezaq w9l/711G0Yvoqe+EiiGK/JqZkzJIOLuiMi7gcDGmZmcuxpiMIWAAX4x97Q0+LZuW 9WBgv/tE93loLWd7D42s0fcl -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:34 2026 by rpki-client