$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: lXHSV84SGXipByoSi4LKM5qlXH/NvqooB1M5UUOGxMM= Subject key identifier: E4:33:22:F6:AA:75:CD:C2:34:C6:7A:A2:29:0E:D9:E7:4F:5E:2E:14 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0208 Signing time: Sun 05 Apr 2026 02:34:38 +0000 Manifest this update: Sun 05 Apr 2026 02:34:38 +0000 Manifest next update: Sun 12 Apr 2026 02:34:38 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: /F+o/zxCyf3jrOOTsSsiCJqbEV4z0nTlLdlZSQBGkog=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) 4: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Apr 5 02:34:38 2026 GMT Not After : Apr 12 02:34:38 2026 GMT Subject: CN=69d1ca3e-af4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:f8:53:71:c8:a5:84:e4:cf:42:3e:f9:97: 0f:cc:74:3b:16:4d:b0:c1:8d:e3:99:7c:fb:ab:00: f7:1c:45:dd:84:a1:09:77:6e:62:fc:50:71:bb:5d: 20:02:92:4e:c5:f8:4c:17:5e:67:f5:ff:ed:8c:b4: 0d:a5:57:c8:01:65:33:47:85:fb:f8:ad:8c:f1:16: 44:61:fe:a8:be:55:bd:ec:fe:ef:e5:e3:2d:a6:c9: a7:32:0a:4e:b0:89:dd:ef:42:85:14:e5:d3:b3:b7: 62:06:2d:70:df:4c:1f:6f:23:be:1e:2b:55:d7:17: 2f:18:bb:14:f9:0e:98:05:0b:2a:7f:f3:94:8a:b6: 24:b7:bc:fe:2d:aa:7e:88:80:07:1d:fa:16:f4:ab: d3:a0:dc:27:80:40:bd:dd:9e:0c:52:c2:0f:66:df: f2:f0:89:9f:43:e2:3e:11:60:04:e0:27:20:b8:62: 3c:6b:eb:75:6c:6d:f8:a7:66:05:93:5d:75:b3:d8: 82:98:98:cd:4d:d3:14:f7:ca:7e:a9:23:44:e5:dc: fa:16:38:92:ea:36:5c:c7:4d:52:d9:9e:c5:78:d6: 59:2f:92:25:96:d2:19:6f:74:3a:45:36:92:f5:3a: 11:1f:a9:a4:dd:93:4c:3b:7c:31:96:78:b1:a5:3c: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:22:F6:AA:75:CD:C2:34:C6:7A:A2:29:0E:D9:E7:4F:5E:2E:14 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:be:25:ae:1e:d9:d2:c9:ae:2b:df:e8:8b:54:a0:d6:40:17: e4:94:34:bc:48:b0:56:8b:9e:29:d6:97:49:3a:59:32:e4:26: 92:af:fe:85:7e:1b:5b:ab:49:70:82:4a:3b:78:89:88:ed:76: ab:bd:fe:5e:34:c4:7b:d0:af:28:b7:44:74:bb:1a:a7:39:7f: b1:52:2b:b3:85:b2:43:3f:b3:95:82:a8:22:87:c2:ee:c8:76: 3e:10:eb:f4:f7:8b:ab:f6:04:ca:17:53:18:37:bf:b6:72:d7: f2:87:09:2e:da:3a:52:80:72:b5:ef:07:3f:0c:d7:1f:10:c5: 3e:03:ba:f7:18:49:43:40:24:ce:92:a6:f0:9b:67:f0:fa:76: a3:a2:ec:cf:92:ef:a8:46:e9:86:99:94:d2:c9:ca:65:05:83: 32:03:10:73:52:b0:70:75:38:e3:d2:53:c8:5a:78:9a:be:88: 85:6c:3a:82:c9:3f:f4:e5:93:87:72:8c:f7:d0:23:73:ee:b2: 50:07:0e:49:0e:68:b7:f7:3a:bd:43:d6:cc:bc:3e:5f:48:fb: 43:40:8b:4e:08:9f:f4:c8:51:60:5e:51:7b:a1:57:4c:36:17: 0b:f5:22:0a:9a:b4:69:77:6f:06:46:ca:14:fa:7b:ad:38:49: db:70:a3:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwNDA1MDIzNDM4WhcNMjYwNDEyMDIzNDM4WjAYMRYwFAYD VQQDEw02OWQxY2EzZS1hZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspX4U3HIpYTkz0I++ZcPzHQ7Fk2wwY3jmXz7qwD3HEXdhKEJd25i/FBxu10g ApJOxfhMF15n9f/tjLQNpVfIAWUzR4X7+K2M8RZEYf6ovlW97P7v5eMtpsmnMgpO sInd70KFFOXTs7diBi1w30wfbyO+HitV1xcvGLsU+Q6YBQsqf/OUirYkt7z+Lap+ iIAHHfoW9KvToNwngEC93Z4MUsIPZt/y8ImfQ+I+EWAE4CcguGI8a+t1bG34p2YF k111s9iCmJjNTdMU98p+qSNE5dz6FjiS6jZcx01S2Z7FeNZZL5IlltIZb3Q6RTaS 9ToRH6mk3ZNMO3wxlnixpTwDowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQzIvaq dc3CNMZ6oikO2edPXi4UMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArr4lrh7Z0smuK9/oi1Sg1kAX5JQ0vEiwVoueKdaXSTpZMuQmkq/+hX4bW6tJ cIJKO3iJiO12q73+XjTEe9CvKLdEdLsapzl/sVIrs4WyQz+zlYKoIofC7sh2PhDr 9PeLq/YEyhdTGDe/tnLX8ocJLto6UoByte8HPwzXHxDFPgO69xhJQ0AkzpKm8Jtn 8Pp2o6Lsz5LvqEbphpmU0snKZQWDMgMQc1KwcHU449JTyFp4mr6IhWw6gsk/9OWT h3KM99Ajc+6yUAcOSQ5ot/c6vUPWzLw+X0j7Q0CLTgif9MhRYF5Re6FXTDYXC/Ui Cpq0aXdvBkbKFPp7rThJ23Cjwg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:20 2026 by rpki-client