$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json) Hash identifier: 56CCvGBH7z5lNE7NTnlPzS27MpNdEB/tCJ/c6SIXweo= Subject key identifier: 09:02:38:10:80:77:33:87:03:A6:A8:CF:47:F2:8A:11:70:C5:9D:E5 Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft Manifest number: 0BD9 Signing time: Sat 04 Apr 2026 18:44:46 +0000 Manifest this update: Sat 04 Apr 2026 18:44:46 +0000 Manifest next update: Sat 11 Apr 2026 18:44:46 +0000 Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: qeqL5NrnlycN0fPTYnEiOrF2/E34C9z9hNjdP0gxTl0=) 2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: 9vfMSvXUgFAWrMwGngY+4Eec7WyIf24UFnNt67nkKsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: Apr 4 18:44:46 2026 GMT Not After : Apr 11 18:44:46 2026 GMT Subject: CN=69d15c1e-ac10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8f:b6:7c:c2:d5:94:0d:07:d1:0a:e7:96:ff: df:b8:cc:15:d3:a4:07:e7:17:0b:86:4f:b4:88:f9: 19:2c:fe:99:ca:78:97:97:7d:f1:34:09:cf:ce:b4: 6f:91:6c:28:88:77:19:28:8a:3e:9f:03:c0:3b:18: 4f:6c:f5:8d:9b:2e:da:3b:77:21:30:b6:78:0a:71: 82:6a:3d:be:60:2e:33:d7:4f:3a:86:26:83:05:b2: ab:1b:64:6b:a5:22:2b:f2:f5:2c:43:e9:40:a3:dd: c9:09:81:70:b2:6d:64:1c:5a:5a:13:b5:10:49:57: 4d:de:b6:5b:f9:c3:dd:cb:8c:6c:2b:a4:cf:b6:55: e8:83:42:98:e8:56:e5:1a:d4:13:0c:fb:6d:35:3d: 3e:78:6d:3b:45:c8:da:34:36:ef:9c:8d:58:2b:b4: f4:95:7a:60:f7:e5:e4:fa:d9:3b:cc:cd:bf:14:2f: 15:f9:21:bd:15:7f:74:bc:21:67:cc:fe:4f:f4:34: 9f:36:62:2d:65:c5:9e:f6:89:51:5c:a2:20:29:38: 46:c5:22:e2:a1:75:5b:4e:80:93:97:29:9c:88:97: 7f:18:75:38:55:37:98:dc:67:47:91:7a:f2:cc:5e: 54:cb:77:de:95:92:8b:97:4d:47:a6:f1:94:f5:e8: ff:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:38:10:80:77:33:87:03:A6:A8:CF:47:F2:8A:11:70:C5:9D:E5 X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:89:96:9c:85:7e:56:6f:29:22:c2:c4:ee:e0:cb:5e:9e:6a: c1:8b:b3:c0:2d:b5:67:10:d0:03:16:2d:6d:41:06:87:95:b8: 54:ed:89:e7:7e:b7:cd:5b:ac:a6:a0:a3:1f:d3:66:7d:44:1c: e5:8a:20:bb:93:15:7c:4a:a9:f5:33:33:cc:fd:36:11:bf:f1: 80:40:63:79:18:13:81:16:d0:4e:5c:3b:07:2c:8f:c5:b2:03: 9c:40:2a:5c:37:04:9f:8f:9e:39:53:93:2b:56:d3:43:9d:7c: 7f:be:a7:9e:40:20:a6:6d:24:a4:4b:7d:a0:c9:c9:2d:82:ee: a1:c3:08:3e:c9:8f:42:a9:f0:f7:24:31:f9:3c:97:4e:36:64: 06:01:ec:d6:75:4f:73:47:b0:ae:1f:d5:af:07:c3:9e:89:99: 9b:45:e5:8b:23:bd:52:d9:98:08:3f:04:50:ae:0e:da:92:b1: 5a:74:d7:e5:c9:92:a6:75:da:64:51:d1:74:df:ab:23:bc:8b: 06:50:33:9e:35:47:48:c6:09:11:25:dd:30:64:4f:7c:1e:46: e8:4d:ac:d1:60:b7:86:a2:99:8b:fb:79:ea:3a:f4:26:15:10: 8a:2b:2b:16:d2:d4:0c:dc:1a:ff:7d:a5:39:49:76:51:76:af: 32:04:0d:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjYwNDA0MTg0NDQ2WhcNMjYwNDExMTg0NDQ2WjAYMRYwFAYD VQQDEw02OWQxNWMxZS1hYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54+2fMLVlA0H0Qrnlv/fuMwV06QH5xcLhk+0iPkZLP6ZyniXl33xNAnPzrRv kWwoiHcZKIo+nwPAOxhPbPWNmy7aO3chMLZ4CnGCaj2+YC4z1086hiaDBbKrG2Rr pSIr8vUsQ+lAo93JCYFwsm1kHFpaE7UQSVdN3rZb+cPdy4xsK6TPtlXog0KY6Fbl GtQTDPttNT0+eG07RcjaNDbvnI1YK7T0lXpg9+Xk+tk7zM2/FC8V+SG9FX90vCFn zP5P9DSfNmItZcWe9olRXKIgKThGxSLioXVbToCTlymciJd/GHU4VTeY3GdHkXry zF5Uy3felZKLl01HpvGU9ej/LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkCOBCA dzOHA6aoz0fyihFwxZ3lMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj4mWnIV+Vm8pIsLE7uDLXp5qwYuzwC21ZxDQAxYtbUEGh5W4VO2J5363zVus pqCjH9NmfUQc5Yogu5MVfEqp9TMzzP02Eb/xgEBjeRgTgRbQTlw7ByyPxbIDnEAq XDcEn4+eOVOTK1bTQ518f76nnkAgpm0kpEt9oMnJLYLuocMIPsmPQqnw9yQx+TyX TjZkBgHs1nVPc0ewrh/VrwfDnomZm0XliyO9UtmYCD8EUK4O2pKxWnTX5cmSpnXa ZFHRdN+rI7yLBlAznjVHSMYJESXdMGRPfB5G6E2s0WC3hqKZi/t56jr0JhUQiisr FtLUDNwa/32lOUl2UXavMgQN8Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:19 2026 by rpki-client