$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: KSrKGlVjuQV+r5uTpoT2O+WnhpDRLeTkClXdNX/gwLo= Subject key identifier: 31:AC:D0:45:E8:5D:A0:B4:49:BD:90:53:D0:8C:5C:E8:04:88:2B:8E Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1FBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1FB6 Signing time: Sat 04 Apr 2026 15:54:34 +0000 Manifest this update: Sat 04 Apr 2026 15:54:34 +0000 Manifest next update: Sat 11 Apr 2026 15:54:34 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: Wnl4635FHpZC1kHm4EfmYG0yUwKzfEeHZ5CfVo3jbGc=) 2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: GjOMUfWbv01wGvJ1FvR6+5UWkPxfCYmtbqRruiSURbE=) 3: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: t9f19zC5S/IYriertqckeC3YEvgJ+JaLXV3b4hj/fXo=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8126 (0x1fbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Apr 4 15:54:34 2026 GMT Not After : Apr 11 15:54:34 2026 GMT Subject: CN=69d1343a-160e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:22:83:5c:8a:21:ea:1f:84:d9:f8:cc:26: 54:89:af:8b:29:cd:c2:1e:a4:97:f3:63:90:19:18: 01:01:8b:cf:0b:7f:25:b2:6b:8a:af:f7:2f:95:1d: d7:36:7e:98:13:48:5c:13:43:02:e2:6f:fd:8b:38: fe:56:cc:0d:bc:8a:01:83:bc:32:9b:61:9d:10:71: 3c:7b:70:3f:4d:3e:2e:9c:0e:e0:fa:20:45:17:23: 71:63:8a:ce:88:d7:27:fc:43:51:2c:8c:9e:dd:aa: 62:7a:55:ea:bd:1a:e7:1f:d8:82:47:fd:83:22:4d: a3:c5:10:a9:1e:b8:77:8e:78:15:08:6c:07:2d:40: 1c:de:58:64:e5:d0:c0:4c:b0:1c:09:25:6b:3d:cb: 9a:2f:42:0c:94:22:26:68:26:74:d2:0b:af:d9:a9: 54:b0:3a:d6:0f:cf:ee:94:79:67:0b:b0:6c:06:ea: c6:5f:21:f9:36:18:d5:41:69:ea:3e:3b:21:a3:c4: ac:b9:5f:e2:eb:79:e9:dd:bd:fb:29:9b:9a:f7:3b: e5:9d:a4:ca:76:c2:d0:31:67:d9:c8:67:30:77:19: 9f:bf:39:5a:c4:08:5d:3d:d7:1d:a7:26:e7:29:26: 37:c2:db:95:ef:4c:db:87:be:8c:95:3a:dd:cc:c5: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AC:D0:45:E8:5D:A0:B4:49:BD:90:53:D0:8C:5C:E8:04:88:2B:8E X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:0e:29:52:c0:c9:a1:1b:8b:1b:18:53:85:05:48:21:5a: be:70:23:c8:28:a7:a6:8b:de:31:cf:48:d5:7e:77:fd:75:5e: c7:38:60:5d:f1:b0:fc:cc:75:ca:51:26:61:74:1c:29:99:1a: b6:28:d3:25:de:22:3c:29:5b:24:2f:cb:6f:16:7a:d2:8e:e2: 9a:53:bd:f6:ac:bd:8a:e5:bb:40:11:47:33:4e:14:84:d6:21: ce:a7:cf:e3:97:30:1b:46:cf:52:17:ac:d8:2e:6c:da:d3:a1: c8:11:fd:29:d2:4a:64:69:19:6f:3d:ce:f3:ef:c6:d0:5c:a7: 3c:73:9e:b9:fc:d5:c7:02:48:a8:f9:a9:40:cc:d9:be:a7:5d: bc:8e:ac:92:23:94:cf:62:90:97:8d:2c:6c:fe:db:fd:15:95: 8c:68:2b:58:61:00:5a:9f:e2:f8:b6:0e:90:2a:1d:0d:2d:92: 1e:c9:a4:f3:97:91:0e:a3:38:2b:57:23:1d:a8:6b:89:c6:22: c7:3a:eb:8f:37:94:16:23:0e:77:b1:17:1b:fc:9f:e2:0b:56: 9c:ea:5e:a9:e2:d7:08:e9:b7:cb:9e:e9:ec:0d:1f:b9:03:54: 12:05:5a:ee:68:97:31:c9:d8:49:d6:73:c2:c9:fb:44:79:9f: b0:a1:09:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYwNDA0MTU1NDM0WhcNMjYwNDExMTU1NDM0WjAYMRYwFAYD VQQDEw02OWQxMzQzYS0xNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunoig1yKIeofhNn4zCZUia+LKc3CHqSX82OQGRgBAYvPC38lsmuKr/cvlR3X Nn6YE0hcE0MC4m/9izj+VswNvIoBg7wym2GdEHE8e3A/TT4unA7g+iBFFyNxY4rO iNcn/ENRLIye3apielXqvRrnH9iCR/2DIk2jxRCpHrh3jngVCGwHLUAc3lhk5dDA TLAcCSVrPcuaL0IMlCImaCZ00guv2alUsDrWD8/ulHlnC7BsBurGXyH5NhjVQWnq Pjsho8SsuV/i63np3b37KZua9zvlnaTKdsLQMWfZyGcwdxmfvzlaxAhdPdcdpybn KSY3wtuV70zbh76MlTrdzMVWbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGs0EXo XaC0Sb2QU9CMXOgEiCuOMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDwOKVLAyaEbixsYU4UFSCFavnAjyCinpoveMc9I1X53/XVexzhgXfGw/Mx1 ylEmYXQcKZkatijTJd4iPClbJC/LbxZ60o7imlO99qy9iuW7QBFHM04UhNYhzqfP 45cwG0bPUhes2C5s2tOhyBH9KdJKZGkZbz3O8+/G0FynPHOeufzVxwJIqPmpQMzZ vqddvI6skiOUz2KQl40sbP7b/RWVjGgrWGEAWp/i+LYOkCodDS2SHsmk85eRDqM4 K1cjHahricYixzrrjzeUFiMOd7EXG/yf4gtWnOpeqeLXCOm3y57p7A0fuQNUEgVa 7miXMcnYSdZzwsn7RHmfsKEJbg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:51:44 2026 by rpki-client