$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: sPCjB1R8CEWUr+dQ0Bd5qa8d3XKsmhOML3OM12+K4Og= Subject key identifier: F4:4A:13:EB:60:40:CB:E7:61:20:8C:3F:CD:2F:E0:6E:02:35:59:F1 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 357E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 48EB Signing time: Sat 04 Apr 2026 14:21:08 +0000 Manifest this update: Sat 04 Apr 2026 14:21:08 +0000 Manifest next update: Sat 11 Apr 2026 14:21:08 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: O2+ZdmWxAlxsV5bylrO/paJ4rwNN8N/jitc6qpceRso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13694 (0x357e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Apr 4 14:21:08 2026 GMT Not After : Apr 11 14:21:08 2026 GMT Subject: CN=69d11e54-de36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:b0:1a:e9:7e:00:36:d8:c0:73:3c:c1:6a: ee:2a:c3:20:24:6b:a4:fa:02:99:4f:af:44:2c:06: 42:a0:f7:16:49:18:19:b4:98:38:6f:a2:85:63:7b: 22:1a:75:e3:93:a2:43:96:99:d2:38:30:e7:7c:30: 10:5d:72:2e:cc:bf:03:4f:1e:cd:fd:61:a2:ce:e4: 90:4e:d3:7d:c9:6c:e3:25:0e:1f:ea:4e:4e:4e:a1: 74:59:24:6f:ae:a6:ba:c3:ff:a8:46:21:b7:17:64: cc:bc:66:21:d5:5b:67:2d:94:4c:f9:e4:76:12:9c: 1d:45:19:23:13:c7:b6:b0:79:48:b5:d9:64:bf:cb: 06:1a:b8:02:32:86:ac:34:09:8f:4a:b5:4a:d8:f3: 0d:b5:a6:cc:af:2e:c7:2f:7f:98:8d:97:2d:bd:9f: da:65:d0:d0:cc:bc:72:6a:42:01:1b:8b:18:38:74: 41:f3:8a:7b:03:a9:ce:82:58:4a:60:a7:42:4d:ec: 3f:47:f0:bd:d4:9d:f4:14:9c:1f:c1:6e:99:55:b7: 92:89:92:b1:53:a4:8a:ac:a1:35:0e:57:27:50:8a: ba:39:d5:b0:82:3c:58:5e:84:50:f2:6b:83:19:ef: 47:e2:5e:c6:84:62:ea:6b:46:2e:c7:df:c7:37:eb: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4A:13:EB:60:40:CB:E7:61:20:8C:3F:CD:2F:E0:6E:02:35:59:F1 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:59:d5:e3:7f:b0:84:19:97:76:3a:aa:bd:e1:fe:5d:dd:c4: 09:05:00:b9:c0:8f:74:80:6a:da:b9:3f:ab:ad:22:d1:13:73: b0:62:a4:b9:a5:47:00:13:5d:fd:3b:1f:6c:50:69:98:f7:7b: 21:fa:75:3c:ed:a3:9c:fb:b2:f3:6c:40:b6:94:cb:0f:68:08: ea:51:63:31:88:e2:bb:f5:27:52:c1:69:d0:da:c3:db:88:75: b0:43:27:dd:d8:53:a1:7c:9e:0a:7c:6e:1d:a1:00:b9:9f:fd: 3e:a9:7d:c6:23:d8:d1:f1:b8:45:b3:f5:e7:bb:11:12:4c:57: 74:be:de:60:f0:c7:c2:94:3a:ac:da:2d:c4:c8:6a:45:7f:d6: 93:15:9c:d7:2c:b0:80:ca:9b:7f:4c:7f:4b:b1:26:cd:9b:db: 49:2d:af:c6:eb:37:fd:a3:5d:da:43:0a:dd:31:f6:0b:e5:bc: ce:9b:42:99:6a:48:ed:78:42:ff:24:cc:45:f4:cd:60:45:3c: b8:69:34:78:1c:ec:ec:01:05:4d:78:5b:33:9f:d2:1f:88:1f: 87:a9:a7:97:a7:f1:e8:6e:dd:de:54:20:5f:26:1f:45:31:e2: 6b:43:00:c6:c3:ca:0f:cf:58:ad:e6:4a:d7:e5:42:1b:4e:d9: 46:40:af:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjYwNDA0MTQyMTA4WhcNMjYwNDExMTQyMTA4WjAYMRYwFAYD VQQDEw02OWQxMWU1NC1kZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF+wGul+ADbYwHM8wWruKsMgJGuk+gKZT69ELAZCoPcWSRgZtJg4b6KFY3si GnXjk6JDlpnSODDnfDAQXXIuzL8DTx7N/WGizuSQTtN9yWzjJQ4f6k5OTqF0WSRv rqa6w/+oRiG3F2TMvGYh1VtnLZRM+eR2EpwdRRkjE8e2sHlItdlkv8sGGrgCMoas NAmPSrVK2PMNtabMry7HL3+YjZctvZ/aZdDQzLxyakIBG4sYOHRB84p7A6nOglhK YKdCTew/R/C91J30FJwfwW6ZVbeSiZKxU6SKrKE1DlcnUIq6OdWwgjxYXoRQ8muD Ge9H4l7GhGLqa0Yux9/HN+tGfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRKE+tg QMvnYSCMP80v4G4CNVnxMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAslnV43+whBmXdjqqveH+Xd3ECQUAucCPdIBq2rk/q60i0RNzsGKkuaVHABNd /TsfbFBpmPd7Ifp1PO2jnPuy82xAtpTLD2gI6lFjMYjiu/UnUsFp0NrD24h1sEMn 3dhToXyeCnxuHaEAuZ/9Pql9xiPY0fG4RbP157sREkxXdL7eYPDHwpQ6rNotxMhq RX/WkxWc1yywgMqbf0x/S7EmzZvbSS2vxus3/aNd2kMK3TH2C+W8zptCmWpI7XhC /yTMRfTNYEU8uGk0eBzs7AEFTXhbM5/SH4gfh6mnl6fx6G7d3lQgXyYfRTHia0MA xsPKD89YreZK1+VCG07ZRkCv/g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:56:41 2026 by rpki-client