$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: vp03BSpIwWN1BCiiTfbYLSVQU71gFDomCGvv5e35UE0= Subject key identifier: 97:40:B2:5B:2C:C0:A2:59:E8:73:D6:DE:9C:22:F0:FA:41:D3:19:A3 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: 0141 Signing time: Sun 05 Apr 2026 04:44:53 +0000 Manifest this update: Sun 05 Apr 2026 04:44:52 +0000 Manifest next update: Sun 12 Apr 2026 04:44:52 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: h4c8jl1cT7N7+unFceP7jcfu92zOsVPsMU+E+HbEd7A=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Apr 5 04:44:52 2026 GMT Not After : Apr 12 04:44:52 2026 GMT Subject: CN=69d1e8c4-4835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:ca:f1:47:0d:37:43:91:d7:d4:51:f7:60: 77:23:60:e4:d1:87:73:6d:4a:39:2f:e5:28:03:34: 62:0a:18:d1:68:ba:8c:f2:ef:a1:b1:84:17:9b:86: 25:c9:fb:bf:e3:b9:17:e5:53:2d:a3:e2:c5:0c:3a: a9:d3:67:62:07:6f:51:03:81:ba:d3:76:e6:5c:eb: db:ec:9c:8a:3d:2e:0f:38:b6:06:b2:3f:f4:61:13: 31:46:ce:d0:2b:60:ba:f3:f1:42:50:8d:aa:0f:56: d5:6e:37:c1:54:d4:6f:72:ec:4f:5a:ad:4f:68:cd: c6:3b:ca:82:9b:ef:f2:76:ae:55:5e:49:a7:fd:a2: e6:49:d3:7a:83:ad:43:1d:00:54:98:ed:36:e4:b7: a9:62:0e:13:d1:af:44:bb:92:1b:d5:67:98:35:f7: d7:db:35:d7:d7:d0:74:a4:6b:2a:15:f9:81:62:fa: f9:79:b3:14:78:87:b0:6c:3e:18:af:dc:c1:99:6b: be:1c:13:e4:06:93:68:0b:ac:0e:3e:d1:59:a0:86: 74:23:f3:47:38:9e:28:0f:ce:c6:0f:3d:4f:0f:f0: b7:0b:37:bf:90:87:47:3b:a1:e3:5f:a7:a0:3a:dd: e6:d5:f9:4d:4e:9d:8b:71:8c:33:77:a8:90:cd:38: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:40:B2:5B:2C:C0:A2:59:E8:73:D6:DE:9C:22:F0:FA:41:D3:19:A3 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:15:5f:1d:2d:af:78:46:7f:17:73:3a:17:6b:9d:7e:fe:e9: 07:1a:7d:21:47:9a:9e:85:bb:a4:c4:a3:1e:e5:3d:af:8e:ad: 26:14:0e:d0:23:d8:bc:9c:3b:d8:ba:d2:d5:e3:9b:5f:73:35: 70:bd:08:87:ed:a3:ba:14:84:f0:b6:c5:49:f0:49:f7:f2:2f: d1:2f:58:a5:f8:5e:9f:4a:8f:bc:02:d7:6e:90:40:33:9e:c3: 2f:86:d2:ab:34:03:9d:c2:11:6d:45:a2:e1:43:bc:cf:cf:df: 87:be:17:3f:0f:88:47:8f:b9:c1:1d:e2:0d:02:a8:03:8e:c6: 3d:6a:dc:43:e3:a3:89:57:2a:0e:b3:9e:a5:45:3d:3e:a4:46: 90:33:b2:e3:ee:d4:3a:b6:00:aa:5e:b0:0b:94:72:7f:7c:d8: 17:2d:07:5e:2d:9a:a2:cb:95:a1:e8:3e:70:10:78:d3:7a:2e: ba:7b:f0:f8:15:85:b4:ad:e9:df:af:e8:e7:4d:1e:a5:66:5f: 52:3e:88:1f:6b:9c:e7:c1:ac:0e:e3:14:7e:f4:e5:84:a2:57: 6a:6b:28:f5:81:92:20:7d:86:8f:a6:e0:2e:5c:46:02:8b:14: db:f9:5b:69:d1:5a:0c:ac:8e:7f:6d:79:28:ae:79:d6:62:85: 84:ae:bd:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjYwNDA1MDQ0NDUyWhcNMjYwNDEyMDQ0NDUyWjAYMRYwFAYD VQQDEw02OWQxZThjNC00ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSPK8UcNN0OR19RR92B3I2Dk0YdzbUo5L+UoAzRiChjRaLqM8u+hsYQXm4Yl yfu/47kX5VMto+LFDDqp02diB29RA4G603bmXOvb7JyKPS4POLYGsj/0YRMxRs7Q K2C68/FCUI2qD1bVbjfBVNRvcuxPWq1PaM3GO8qCm+/ydq5VXkmn/aLmSdN6g61D HQBUmO025LepYg4T0a9Eu5Ib1WeYNffX2zXX19B0pGsqFfmBYvr5ebMUeIewbD4Y r9zBmWu+HBPkBpNoC6wOPtFZoIZ0I/NHOJ4oD87GDz1PD/C3Cze/kIdHO6HjX6eg Ot3m1flNTp2LcYwzd6iQzTgq9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdAslss wKJZ6HPW3pwi8PpB0xmjMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvxVfHS2veEZ/F3M6F2udfv7pBxp9IUeanoW7pMSjHuU9r46tJhQO0CPYvJw7 2LrS1eObX3M1cL0Ih+2juhSE8LbFSfBJ9/Iv0S9Ypfhen0qPvALXbpBAM57DL4bS qzQDncIRbUWi4UO8z8/fh74XPw+IR4+5wR3iDQKoA47GPWrcQ+OjiVcqDrOepUU9 PqRGkDOy4+7UOrYAql6wC5Ryf3zYFy0HXi2aosuVoeg+cBB403ouunvw+BWFtK3p 36/o500epWZfUj6IH2uc58GsDuMUfvTlhKJXamso9YGSIH2Gj6bgLlxGAosU2/lb adFaDKyOf215KK551mKFhK69IQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:02 2026 by rpki-client