$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: Fps5YW9f10hBGHxd8wV+eWoNgyj8ezC2wWL0EketbBY= Subject key identifier: 03:94:80:D4:28:F6:F7:ED:18:3E:09:FB:BA:47:08:77:20:CE:8D:6C Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 99 Signing time: Sun 05 Apr 2026 06:45:50 +0000 Manifest this update: Sun 05 Apr 2026 06:45:50 +0000 Manifest next update: Sun 12 Apr 2026 06:45:50 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: tB+ZZjasHnh327CXxRvouaNERfSU0tBwlz6A3fblS10=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2C2sOivYWsfKN0PHSEL43JM0n0rxZssOB/cieKzKbtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Apr 5 06:45:50 2026 GMT Not After : Apr 12 06:45:50 2026 GMT Subject: CN=69d2051e-4a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:9e:81:ac:64:da:f9:9a:61:af:ae:21:c8: 55:45:5a:5a:97:f5:85:f7:8e:9a:77:d3:73:98:6a: 25:bb:b9:d0:c9:be:98:dd:bc:c6:fb:1c:87:c1:e4: 4e:e0:d8:a7:0f:61:33:a8:f9:91:c3:4d:04:05:2d: 80:0b:4a:c5:37:d2:6d:74:76:c4:4b:b0:6a:49:b4: ae:03:d7:eb:db:b8:05:7a:36:a4:ab:1c:dd:cd:fc: ed:75:04:d3:55:c3:c8:0d:9f:77:96:03:f3:37:82: 23:11:55:cf:ed:22:49:d8:f8:bb:81:94:9b:84:1b: e9:12:ba:c4:46:89:c5:76:3e:b5:34:62:32:b5:c1: 6b:87:19:8f:be:3a:be:ca:5d:ad:77:12:e3:b2:36: 61:d8:f0:15:a6:2a:24:73:2d:29:d9:22:2a:66:3a: 6d:19:1c:6e:66:71:37:f3:97:3d:b8:fd:2c:f5:48: 5b:ed:e9:81:b5:66:07:e8:9f:83:d3:50:cf:6b:54: 15:b3:26:bf:94:ec:a3:e8:83:dc:21:7e:5d:59:6d: d0:ea:97:d0:4a:9f:cb:10:16:d5:16:0f:ae:49:50: b8:c5:5b:9a:51:fe:9b:88:02:0b:3e:c5:73:90:c6: 8c:2c:13:c2:c2:21:40:d6:ac:40:4c:4f:af:23:fa: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:94:80:D4:28:F6:F7:ED:18:3E:09:FB:BA:47:08:77:20:CE:8D:6C X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:3e:7e:22:f3:2e:40:9d:72:63:c2:57:10:24:7c:7f:f1:0e: 38:ca:92:50:14:48:a4:8f:13:5f:c7:ee:d5:d0:5a:96:f4:f6: e3:a8:4d:f5:8b:5d:39:6a:77:15:fc:98:02:dc:b4:66:7d:23: 50:96:ae:96:5d:d1:dc:11:3b:75:c1:c1:2c:cf:4e:f5:0a:81: 3a:9b:b1:18:a1:23:9d:22:94:e6:51:8d:bc:fa:c0:d0:a4:ab: d7:03:dc:f7:bd:ba:dd:62:3a:a3:4d:b9:78:36:69:87:dc:2f: af:5e:89:2d:67:5a:62:c4:c9:e2:5c:05:96:74:75:ef:5a:3f: 7a:88:94:99:85:20:08:b5:56:39:38:e9:30:89:33:c2:f6:3c: 9c:9e:31:d6:e1:e7:79:cf:a0:fe:2c:b6:c5:16:66:df:d8:18: 30:94:b2:88:47:88:38:35:5b:21:5d:c0:25:5f:d8:94:80:3d: 29:6b:04:7f:1f:82:00:f7:3b:b0:95:e0:fd:07:be:60:e3:23: ea:b8:28:77:78:2c:19:ce:3f:cc:02:c9:2c:cd:f6:7d:c5:dd: 42:65:2d:01:22:cf:03:45:3a:02:a9:b1:ac:8e:f2:c4:5b:88: 48:4b:4f:94:37:c1:e0:3f:06:a2:aa:73:4c:2b:30:ac:3a:5e: dc:92:e6:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDM1NDMzQzlFQzQwODA5OUY3MDE4QkM1MTQ0MUQyMkM0 QzExRkMzODUwHhcNMjYwNDA1MDY0NTUwWhcNMjYwNDEyMDY0NTUwWjAYMRYwFAYD VQQDEw02OWQyMDUxZS00YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2eegaxk2vmaYa+uIchVRVpal/WF946ad9NzmGolu7nQyb6Y3bzG+xyHweRO 4NinD2EzqPmRw00EBS2AC0rFN9JtdHbES7BqSbSuA9fr27gFejakqxzdzfztdQTT VcPIDZ93lgPzN4IjEVXP7SJJ2Pi7gZSbhBvpErrERonFdj61NGIytcFrhxmPvjq+ yl2tdxLjsjZh2PAVpiokcy0p2SIqZjptGRxuZnE385c9uP0s9Uhb7emBtWYH6J+D 01DPa1QVsya/lOyj6IPcIX5dWW3Q6pfQSp/LEBbVFg+uSVC4xVuaUf6biAILPsVz kMaMLBPCwiFA1qxATE+vI/rLrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOUgNQo 9vftGD4J+7pHCHcgzo1sMB8GA1UdIwQYMBaAFDVDPJ7ECAmfcBi8UUQdIsTBH8OF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BQjk3NUJDRTQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNaOXdHTHhSUkIwaXhNRWZ3 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BQjk3NUJDRTQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNa OXdHTHhSUkIwaXhNRWZ3NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQT5+IvMuQJ1yY8JXECR8f/EOOMqSUBRIpI8TX8fu1dBalvT246hN9YtdOWp3 FfyYAty0Zn0jUJaull3R3BE7dcHBLM9O9QqBOpuxGKEjnSKU5lGNvPrA0KSr1wPc 97263WI6o025eDZph9wvr16JLWdaYsTJ4lwFlnR171o/eoiUmYUgCLVWOTjpMIkz wvY8nJ4x1uHnec+g/iy2xRZm39gYMJSyiEeIODVbIV3AJV/YlIA9KWsEfx+CAPc7 sJXg/Qe+YOMj6rgod3gsGc4/zALJLM32fcXdQmUtASLPA0U6AqmxrI7yxFuISEtP lDfB4D8GoqpzTCswrDpe3JLmUA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:32 2026 by rpki-client