$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json) Hash identifier: F05TDGoxxukyl6Q4ajlHVV0Q/t7b/7jp+cBGC2WRRQ8= Subject key identifier: AB:65:BE:88:4F:EB:A7:AF:61:12:5E:2A:2C:27:23:3F:ED:99:8D:C1 Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft Manifest number: 0523 Signing time: Sat 04 Apr 2026 23:21:35 +0000 Manifest this update: Sat 04 Apr 2026 23:21:35 +0000 Manifest next update: Sat 11 Apr 2026 23:21:35 +0000 Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: 0hqxB1XeusoWL1soDyi7nerZak/gY0mpTq2oEylOiG4=) 2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: y73S8++lP8l3+TCAjF9+DFuZKIlJNrek0vx4sh6FeCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE Validity Not Before: Apr 4 23:21:35 2026 GMT Not After : Apr 11 23:21:35 2026 GMT Subject: CN=69d19cff-46f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:9f:f1:d0:7b:41:d5:83:64:ae:a4:1e:79: c0:e2:7c:bd:f6:f6:2f:49:3a:0c:41:44:d6:ec:ba: 81:d3:8b:8d:57:1e:6a:63:f0:1d:bb:1b:6b:7f:a6: b4:f5:e3:48:e6:8e:bc:21:c9:40:36:cd:cb:4c:ce: f6:8c:b9:81:94:95:97:ea:b2:a2:42:0a:cd:f2:c8: 38:59:57:5d:db:93:79:e0:16:6e:b7:93:ce:72:39: 1e:fb:10:1a:61:38:74:40:2d:3f:bc:11:8f:b6:90: bc:44:7e:0b:1d:b3:d9:76:03:b8:07:2e:0c:5c:b1: 4f:78:db:47:d7:aa:99:35:a0:f6:e1:92:8b:6f:82: d7:e8:77:3e:b8:54:a2:8f:e2:b9:69:63:ae:1d:12: cd:10:1d:cb:ca:7b:02:be:7d:0e:6a:19:2c:3c:b2: 92:8f:10:42:79:77:92:13:76:ba:1c:c2:bf:43:1b: 8c:fe:0a:d9:1e:7b:25:c2:1a:fd:5e:a0:4c:90:d1: b0:c0:5f:00:17:83:62:25:c3:6b:75:0b:1b:8e:e8: d1:73:d8:24:9e:3c:67:8a:54:2a:5f:8a:ee:00:6a: 43:ca:cb:d5:24:60:1c:a3:6a:76:9e:26:42:03:54: b5:e8:ed:0a:83:92:9b:85:e3:49:09:c1:e7:fd:21: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:65:BE:88:4F:EB:A7:AF:61:12:5E:2A:2C:27:23:3F:ED:99:8D:C1 X509v3 Authority Key Identifier: keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:24:73:26:6e:ae:4b:9a:b5:8f:57:37:74:83:e8:65:1e:e2: 69:ea:7a:5d:e8:6c:fb:fe:a5:99:9f:b5:68:96:d9:a6:6b:dc: d2:33:16:21:e2:ac:81:13:b1:15:80:d7:72:5b:e1:38:e9:6f: 83:80:fd:97:91:16:e9:ca:b4:89:93:a1:6e:73:18:7b:1f:2a: 92:de:67:ff:47:f0:0d:16:bf:1e:c5:2b:46:7f:b7:47:94:1c: 81:07:c4:9c:67:02:57:f8:a3:29:da:ef:6f:ae:51:3f:37:3d: b4:8c:1a:ae:3c:99:6b:91:3a:5c:aa:65:83:63:a0:3b:d9:c2: e2:f5:b4:8a:8c:05:4b:44:ba:55:d2:e4:f2:5d:96:35:51:93: 3e:5d:1f:13:18:f8:36:78:78:8e:3f:e5:85:97:87:46:9c:02: 2a:77:52:60:a5:f3:c6:38:e7:93:94:e9:cc:a2:6d:df:d9:2e: 74:23:4e:d5:2d:cd:61:b0:24:64:0e:36:ce:8e:dd:d8:68:5b: 46:f8:a6:0d:d3:c3:85:6a:ef:ea:eb:f5:cc:02:fa:4e:35:86: 82:78:c3:38:78:ad:05:ba:fb:49:73:a9:81:5c:8f:29:04:2a: 72:f9:4b:23:c5:40:ca:ab:89:d8:6d:94:54:ae:f0:8a:e2:9b: 52:2f:b9:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBREUxMTAvBgNVBAUTKDcwRTY4Q0U4NUEwMzhEOUUzMDcwNDM4MzdDQTZFNkIx QTY2MDk2RUUwHhcNMjYwNDA0MjMyMTM1WhcNMjYwNDExMjMyMTM1WjAYMRYwFAYD VQQDEw02OWQxOWNmZi00NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DOf8dB7QdWDZK6kHnnA4ny99vYvSToMQUTW7LqB04uNVx5qY/Aduxtrf6a0 9eNI5o68IclANs3LTM72jLmBlJWX6rKiQgrN8sg4WVdd25N54BZut5POcjke+xAa YTh0QC0/vBGPtpC8RH4LHbPZdgO4By4MXLFPeNtH16qZNaD24ZKLb4LX6Hc+uFSi j+K5aWOuHRLNEB3LynsCvn0OahksPLKSjxBCeXeSE3a6HMK/QxuM/grZHnslwhr9 XqBMkNGwwF8AF4NiJcNrdQsbjujRc9gknjxnilQqX4ruAGpDysvVJGAco2p2niZC A1S16O0Kg5KbheNJCcHn/SHLwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtlvohP 66evYRJeKiwnIz/tmY3BMB8GA1UdIwQYMBaAFHDmjOhaA42eMHBDg3ym5rGmYJbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFERS8yODczOUQzQTQx REYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpaNHdjRU9EZktibXNhWmds dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPYU02Rm9Ealo0d2NFT0RmS2Jtc2FaZ2x1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFERS8yODczOUQzQTQxREYxMUVDQTNEQzJGODVDNEY5QUUwMi9jT2FNNkZvRGpa NHdjRU9EZktibXNhWmdsdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGSRzJm6uS5q1j1c3dIPoZR7iaep6Xehs+/6lmZ+1aJbZpmvc0jMWIeKsgROx FYDXclvhOOlvg4D9l5EW6cq0iZOhbnMYex8qkt5n/0fwDRa/HsUrRn+3R5QcgQfE nGcCV/ijKdrvb65RPzc9tIwarjyZa5E6XKplg2OgO9nC4vW0iowFS0S6VdLk8l2W NVGTPl0fExj4Nnh4jj/lhZeHRpwCKndSYKXzxjjnk5TpzKJt39kudCNO1S3NYbAk ZA42zo7d2GhbRvimDdPDhWrv6uv1zAL6TjWGgnjDOHitBbr7SXOpgVyPKQQqcvlL I8VAyquJ2G2UVK7wiuKbUi+5yg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:56:19 2026 by rpki-client