$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft File: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json) Hash identifier: dAvxIpgOIcJI8g+JtaWe4clqiDCjUW4ShRnf4lH1eCo= Subject key identifier: 1B:34:FC:DA:FA:C1:4E:12:19:D4:8D:DD:B5:11:C7:17:E1:13:19:54 Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4 Certificate issuer: /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft Manifest number: 85 Signing time: Sun 05 Apr 2026 07:01:36 +0000 Manifest this update: Sun 05 Apr 2026 07:01:35 +0000 Manifest next update: Sun 12 Apr 2026 07:01:35 +0000 Files and hashes: 1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: r9KOE7GRZtc585vV02vPCa8YOjKg1Q2Dp8NQwnSFv2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4 Validity Not Before: Apr 5 07:01:35 2026 GMT Not After : Apr 12 07:01:35 2026 GMT Subject: CN=69d208cf-9a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:0e:db:e2:dc:a9:72:b8:45:21:6e:af:e7: 9f:2a:f2:41:bc:30:6e:c6:3b:d3:7b:67:d3:03:e5: ca:0f:9b:67:cb:9b:5e:85:2f:ef:83:f2:e7:7e:80: 31:83:73:17:33:e9:10:5c:8b:b6:9f:1e:cc:72:2c: a7:63:e0:c0:e2:b3:d4:23:d1:cf:e5:1f:45:7f:1d: 59:86:41:e9:42:bc:7b:5e:f8:f7:af:e0:b9:5a:87: a0:86:5c:00:e3:cc:64:a7:ba:7c:63:6c:bf:21:73: 59:57:71:a3:43:cf:59:75:8c:6d:5c:96:30:6e:a5: 2c:9f:46:49:21:90:be:0e:53:d1:c7:fb:9f:d4:84: 8c:df:0b:7b:c5:0e:96:c3:e7:d9:ec:06:d8:40:fd: 59:f1:fc:34:ec:61:fb:3b:3e:a0:03:bd:5c:8f:83: a6:95:ec:f0:88:51:bb:b5:be:fc:ea:88:e4:16:79: af:ef:63:13:57:96:7d:77:7c:f8:62:9b:ba:41:1f: 65:b0:9f:7f:0b:0d:c6:1d:16:37:3a:46:48:2b:3b: 30:e5:c3:e4:73:1f:c4:f6:12:0f:56:57:76:eb:30: 2e:32:73:a3:79:68:b3:5d:81:a7:1f:9b:e1:83:f7: 6a:15:6d:14:05:f6:fe:5b:38:2d:56:4d:9e:a7:54: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:FC:DA:FA:C1:4E:12:19:D4:8D:DD:B5:11:C7:17:E1:13:19:54 X509v3 Authority Key Identifier: keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:6c:1a:b2:24:6a:56:f4:ed:8d:ae:69:68:0e:b4:b0:29: 3b:1e:d8:95:73:c3:46:8b:f5:73:42:06:1a:75:d2:d2:dc:f1: 3a:b9:0d:f6:06:88:7f:6b:ae:02:09:96:47:e0:0c:5b:80:85: 11:49:39:10:fd:91:9f:97:7b:58:8c:58:8b:e8:51:14:8e:0b: 99:ce:44:cf:76:07:4e:4d:2c:aa:1b:db:79:d8:eb:9d:ea:ed: 67:e0:5d:1c:f7:06:85:2d:ab:99:3e:ee:89:1c:a1:d5:7f:5a: 0b:78:07:53:4c:15:96:62:3f:84:6a:ae:09:7a:d8:67:f8:77: 37:22:2f:49:79:4c:9a:4b:49:b8:a7:c1:34:c7:86:9a:68:b3: 2b:cf:4f:f7:73:01:73:7d:8c:30:35:93:0e:a8:46:48:f3:41: 13:49:2d:df:f8:3b:37:8b:b3:40:cf:f8:29:0c:80:7c:61:b9: a4:67:aa:52:7d:ec:e6:a0:db:bb:b2:c1:89:76:2a:6b:0d:f3: 32:9b:f1:a2:e4:49:4b:38:1e:55:d5:70:cb:65:4b:e8:b0:c6: a5:4d:a1:5c:fc:97:be:f5:14:e1:c3:4f:cc:09:d5:74:3b:35: db:6b:41:11:6e:0c:d1:93:28:9e:95:a0:df:57:d5:81:8e:ad: ec:04:38:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI4MjAxMTAvBgNVBAUTKEQwRTAzQUMwOTdEQzAwMTI5RDAzMjUzRjFDOURENzZE MkE3MUQ4RjQwHhcNMjYwNDA1MDcwMTM1WhcNMjYwNDEyMDcwMTM1WjAYMRYwFAYD VQQDEw02OWQyMDhjZi05YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6oO2+LcqXK4RSFur+efKvJBvDBuxjvTe2fTA+XKD5tny5tehS/vg/LnfoAx g3MXM+kQXIu2nx7MciynY+DA4rPUI9HP5R9Ffx1ZhkHpQrx7Xvj3r+C5WoeghlwA 48xkp7p8Y2y/IXNZV3GjQ89ZdYxtXJYwbqUsn0ZJIZC+DlPRx/uf1ISM3wt7xQ6W w+fZ7AbYQP1Z8fw07GH7Oz6gA71cj4OmlezwiFG7tb786ojkFnmv72MTV5Z9d3z4 Ypu6QR9lsJ9/Cw3GHRY3OkZIKzsw5cPkcx/E9hIPVld26zAuMnOjeWizXYGnH5vh g/dqFW0UBfb+WzgtVk2ep1TqGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs0/Nr6 wU4SGdSN3bURxxfhExlUMB8GA1UdIwQYMBaAFNDgOsCX3AASnQMlPxyd120qcdj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjgyMC85QTIyREVDNDY4 NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi8wT0E2d0pmY0FCS2RBeVVfSEozWGJTcHgy UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBPQTZ3SmZjQUJLZEF5VV9ISjNYYlNweDJQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjgyMC85QTIyREVDNDY4NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi8wT0E2d0pmY0FC S2RBeVVfSEozWGJTcHgyUFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABStsGrIkalb07Y2uaWgOtLApOx7YlXPDRov1c0IGGnXS0tzxOrkN9gaIf2uu AgmWR+AMW4CFEUk5EP2Rn5d7WIxYi+hRFI4Lmc5Ez3YHTk0sqhvbedjrnertZ+Bd HPcGhS2rmT7uiRyh1X9aC3gHU0wVlmI/hGquCXrYZ/h3NyIvSXlMmktJuKfBNMeG mmizK89P93MBc32MMDWTDqhGSPNBE0kt3/g7N4uzQM/4KQyAfGG5pGeqUn3s5qDb u7LBiXYqaw3zMpvxouRJSzgeVdVwy2VL6LDGpU2hXPyXvvUU4cNPzAnVdDs122tB EW4M0ZMonpWg31fVgY6t7AQ40g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:00 2026 by rpki-client