$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: /F6tVPFtIrSZPjsMSUOIwlOqVFpJxH3matV1fO3oKP0= Subject key identifier: 25:31:F9:E9:11:13:E2:3E:00:7C:08:75:C4:A6:03:D7:B2:F3:C4:6D Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 0727 Signing time: Sun 26 Apr 2026 21:45:56 +0000 Manifest this update: Sun 26 Apr 2026 21:45:55 +0000 Manifest next update: Sun 03 May 2026 21:45:55 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: gRkwHYSvYvGuB5F//97DyQ7XKgFqwO8y2+dM4LfSpAg=) 2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=) 3: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=) 4: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 21:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: Apr 26 21:45:55 2026 GMT Not After : May 3 21:45:55 2026 GMT Subject: CN=69ee8794-89ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:62:52:29:f4:4c:32:50:eb:1e:1f:7d:b1: 7f:af:41:10:bc:c5:e9:4a:8e:17:56:22:cc:98:1c: c1:01:80:8f:d7:39:cc:96:f4:62:5b:26:52:b5:04: a5:3c:fb:72:6c:32:85:bf:00:67:93:be:77:57:74: cb:35:ed:d4:d8:1c:f9:a9:b5:72:a7:19:97:2d:dd: bd:57:f4:7f:8e:9f:d5:fb:4d:7b:13:f0:3a:3a:ba: ef:2c:87:1e:28:43:74:94:db:a7:59:7b:37:08:ba: 77:b6:cc:bb:8a:dd:df:2d:4d:16:c1:c3:8a:b2:42: 41:8d:1b:e2:25:fe:e9:bf:3c:1d:2b:6e:06:72:7e: 37:e1:a7:ba:96:83:c7:27:9a:55:9b:2a:22:14:f4: 96:09:10:b7:d8:46:f6:c9:b7:6d:06:fe:d9:bd:36: eb:cb:09:6e:be:41:8f:4b:d5:a5:45:e9:25:cd:5b: 3d:ad:43:3f:35:fb:5b:73:e3:65:ef:04:77:50:85: b6:c5:39:5a:f6:31:16:09:fe:a6:04:56:23:cb:f9: a2:b9:91:56:4e:dc:f3:e0:ec:8d:1b:08:c0:22:be: 28:7d:ad:9d:07:4a:f1:2a:fe:3e:9e:18:cb:ed:88: 8f:0c:9a:9e:3a:67:bf:7f:81:7b:16:fc:0c:fe:e9: fb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:F9:E9:11:13:E2:3E:00:7C:08:75:C4:A6:03:D7:B2:F3:C4:6D X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:80:24:07:f8:a7:b4:ef:8e:3e:01:4e:52:f8:8c:98:ad:ef: a9:a2:00:0c:4d:30:5d:93:f7:d3:ef:82:a6:f8:75:78:1e:88: 00:da:66:81:cd:58:20:c2:f4:77:c6:08:51:c8:01:a4:94:b8: 1e:43:01:94:a5:dc:37:e6:4e:c3:db:64:89:f4:56:4a:dd:2f: bf:6b:7d:a5:94:b3:fe:d3:e0:a8:18:88:eb:71:d6:fe:03:9a: e4:c4:26:e0:c2:be:84:8c:c6:b5:85:c0:1e:6c:73:a5:a5:4e: 53:fb:d4:43:25:f8:11:66:d2:90:3b:04:cc:e0:8b:e0:ee:ad: 7e:d7:38:d0:7d:65:f1:69:17:07:8d:97:06:80:45:75:f7:6d: 9e:cc:cd:53:68:de:75:1d:cb:f5:66:44:12:b7:ab:ce:ba:be: 66:19:ab:cd:f5:e4:0d:21:1a:95:5b:73:1f:96:34:c7:08:09: 79:2f:d7:8f:be:53:e4:d3:0c:9e:8d:8a:03:08:6b:fe:bd:58: f9:ad:4a:91:78:76:10:ec:d3:3a:33:43:31:52:a1:0d:21:13: cf:a3:02:c0:88:ff:4c:26:53:72:9b:76:b5:61:02:c8:71:db: c6:70:a5:de:c8:07:7d:b6:f2:dd:9a:73:95:43:25:ac:bc:4c: 78:87:db:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjYwNDI2MjE0NTU1WhcNMjYwNTAzMjE0NTU1WjAYMRYwFAYD VQQDEw02OWVlODc5NC04OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLJiUin0TDJQ6x4ffbF/r0EQvMXpSo4XViLMmBzBAYCP1znMlvRiWyZStQSl PPtybDKFvwBnk753V3TLNe3U2Bz5qbVypxmXLd29V/R/jp/V+017E/A6OrrvLIce KEN0lNunWXs3CLp3tsy7it3fLU0WwcOKskJBjRviJf7pvzwdK24Gcn434ae6loPH J5pVmyoiFPSWCRC32Eb2ybdtBv7ZvTbrywluvkGPS9WlReklzVs9rUM/Nftbc+Nl 7wR3UIW2xTla9jEWCf6mBFYjy/miuZFWTtzz4OyNGwjAIr4ofa2dB0rxKv4+nhjL 7YiPDJqeOme/f4F7FvwM/un7dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCUx+ekR E+I+AHwIdcSmA9ey88RtMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYoAkB/intO+OPgFOUviMmK3vqaIADE0wXZP30++Cpvh1eB6IANpmgc1YIML0 d8YIUcgBpJS4HkMBlKXcN+ZOw9tkifRWSt0vv2t9pZSz/tPgqBiI63HW/gOa5MQm 4MK+hIzGtYXAHmxzpaVOU/vUQyX4EWbSkDsEzOCL4O6tftc40H1l8WkXB42XBoBF dfdtnszNU2jedR3L9WZEErerzrq+ZhmrzfXkDSEalVtzH5Y0xwgJeS/Xj75T5NMM no2KAwhr/r1Y+a1KkXh2EOzTOjNDMVKhDSETz6MCwIj/TCZTcpt2tWECyHHbxnCl 3sgHfbby3ZpzlUMlrLxMeIfbNw== -----END CERTIFICATE-----Generated at Mon Apr 27 17:40:58 2026 by rpki-client