$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: XAVwXKaMS0ajr39Aq8sbu8aqWjNYrNtFceD6TxN7GEI= Subject key identifier: 8E:4C:BD:86:97:FC:2E:9F:9C:03:40:96:F5:F0:22:42:79:2E:B6:9D Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0ECF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0EAE Signing time: Sat 04 Apr 2026 17:35:09 +0000 Manifest this update: Sat 04 Apr 2026 17:35:08 +0000 Manifest next update: Sat 11 Apr 2026 17:35:08 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: +pPXbMuxEYaiZQnJyVd/xxK34HobJT5naCTUhLiZNJQ=) 2: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: 9DZO4gtEwqGm1N7r2iLEutY8W3IqMNDQEag8fkVAF7Q=) 3: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: x2dbHHpd6lHu6U/D+Z5h6UrLSps4ACkU8JTV2sRYFDo=) 4: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: 8ERTDv7Mz23v2Rbdakt8Gt3XJ8tL5M1Uk1kQf/u/YMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3791 (0xecf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Apr 4 17:35:08 2026 GMT Not After : Apr 11 17:35:08 2026 GMT Subject: CN=69d14bcd-3733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:ec:c0:95:13:51:f1:5d:b9:40:ad:a9:9e: 56:55:22:fc:7c:33:89:1a:b1:f3:bf:51:a4:5b:33: 73:e8:81:0a:65:1b:20:5e:69:69:4b:77:19:aa:5c: d1:cd:ed:28:93:89:09:81:05:4b:12:5d:18:c1:69: 9f:4d:3d:62:ed:86:df:20:01:a0:e5:16:80:4e:5f: 19:f5:80:32:0b:d0:2f:8d:02:62:73:7f:fd:ca:af: 47:28:43:db:5c:53:a1:6f:aa:34:f5:d7:e0:20:76: 22:1c:02:3e:4e:63:ae:27:f0:d1:0d:6e:4c:22:33: b1:6b:22:75:44:8a:8e:0e:d6:33:ee:f6:ec:c2:05: 0f:10:c8:d0:dc:b2:7c:45:d5:f8:fa:9a:64:b6:8c: 12:5a:c4:cc:7e:7c:cb:3c:2e:d6:82:88:d9:a1:84: a4:4a:b4:50:e5:b2:8d:00:84:7f:cc:91:65:f3:32: 1c:3d:c0:12:e1:55:5b:be:45:74:b2:8d:ed:c6:05: 0b:98:2e:bc:05:e5:18:72:d1:96:40:53:93:c6:78: 0f:02:86:db:5c:04:b9:f0:e7:3c:12:61:38:e6:64: e3:4f:1e:7f:90:59:d4:71:f8:99:9d:21:01:11:b3: d0:f3:ed:8e:c7:f4:ef:28:40:29:1a:bf:0e:1a:18: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:BD:86:97:FC:2E:9F:9C:03:40:96:F5:F0:22:42:79:2E:B6:9D X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:6d:01:28:6a:79:cc:b3:ee:ef:45:73:c0:bf:1d:aa:bf:43: a3:23:fe:49:7f:b7:0b:93:c6:39:16:c8:fe:b9:a0:df:d6:c3: 30:50:12:5b:c1:fd:b5:f2:85:48:e3:4b:c1:45:20:2e:70:01: 3a:14:e2:6d:93:a8:cb:47:f7:2c:dd:59:ac:98:e4:4e:cd:80: de:95:f0:2c:66:30:3a:88:12:6e:29:59:08:c3:e7:68:1b:e5: 67:8d:c9:58:33:ef:79:0a:07:11:63:d7:50:c6:46:82:a3:c1: 7f:b0:37:fb:46:cd:0e:46:5f:ca:0c:c7:fb:be:24:a1:d1:db: 8c:0a:f3:89:ba:96:53:9d:29:d8:f6:a1:b4:c9:3a:eb:c4:7e: 48:eb:1f:b2:c9:f9:40:b4:26:30:6f:69:57:fb:b0:c5:80:a1: 86:2d:42:96:cd:47:96:61:c7:3e:7a:b2:07:cf:c3:73:97:67: 76:5d:41:15:21:d9:51:bc:33:f4:f6:69:fd:34:b4:ea:ab:df: 72:d8:94:e3:8f:f4:12:06:cd:29:b4:ea:93:74:e6:e2:e7:77: 27:51:d4:a2:b4:92:64:09:b0:6d:62:0d:b2:6a:91:2a:e3:87: da:b5:ef:20:6e:65:2a:73:bc:70:93:0a:ef:18:10:29:23:6e: 24:aa:2a:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjYwNDA0MTczNTA4WhcNMjYwNDExMTczNTA4WjAYMRYwFAYD VQQDEw02OWQxNGJjZC0zNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFPswJUTUfFduUCtqZ5WVSL8fDOJGrHzv1GkWzNz6IEKZRsgXmlpS3cZqlzR ze0ok4kJgQVLEl0YwWmfTT1i7YbfIAGg5RaATl8Z9YAyC9AvjQJic3/9yq9HKEPb XFOhb6o09dfgIHYiHAI+TmOuJ/DRDW5MIjOxayJ1RIqODtYz7vbswgUPEMjQ3LJ8 RdX4+ppktowSWsTMfnzLPC7WgojZoYSkSrRQ5bKNAIR/zJFl8zIcPcAS4VVbvkV0 so3txgULmC68BeUYctGWQFOTxngPAobbXAS58Oc8EmE45mTjTx5/kFnUcfiZnSEB EbPQ8+2Ox/TvKEApGr8OGhi5BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5MvYaX /C6fnANAlvXwIkJ5LradMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq20BKGp5zLPu70VzwL8dqr9DoyP+SX+3C5PGORbI/rmg39bDMFASW8H9tfKF SONLwUUgLnABOhTibZOoy0f3LN1ZrJjkTs2A3pXwLGYwOogSbilZCMPnaBvlZ43J WDPveQoHEWPXUMZGgqPBf7A3+0bNDkZfygzH+74kodHbjArzibqWU50p2PahtMk6 68R+SOsfssn5QLQmMG9pV/uwxYChhi1Cls1HlmHHPnqyB8/Dc5dndl1BFSHZUbwz 9PZp/TS06qvfctiU44/0EgbNKbTqk3Tm4ud3J1HUorSSZAmwbWINsmqRKuOH2rXv IG5lKnO8cJMK7xgQKSNuJKoqUA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:21 2026 by rpki-client