$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json) Hash identifier: ll44wziVkaQU8EzYYT9p2TO+K/1xu+WIsnV0+M3ZZjw= Subject key identifier: 43:A3:D8:F0:99:65:BA:89:2E:4C:AE:29:79:E1:6B:D4:B7:B2:0D:E0 Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft Manifest number: 0248 Signing time: Sun 05 Apr 2026 01:59:35 +0000 Manifest this update: Sun 05 Apr 2026 01:59:35 +0000 Manifest next update: Sun 12 Apr 2026 01:59:35 +0000 Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: qbv6VDMFepAb8GdqBAD3CfcPV4wuFicgBYhTPo9RSvY=) 2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: BSVTwwRbq3VYo1MDzrnaZmnq1w5wQREhmFrVERfDa/4=) 3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: /BZUmLi+tmRANpipkr295WYxkHJvgSpDNND0oQHBar8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: Apr 5 01:59:35 2026 GMT Not After : Apr 12 01:59:35 2026 GMT Subject: CN=69d1c207-2211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:a1:6f:d0:c8:0b:43:8c:ab:fa:c3:3c:15: da:66:34:c8:c1:f6:b0:96:1c:ab:20:f7:ff:c9:5c: 4a:b7:5c:04:05:7a:f7:49:41:04:29:ad:49:bd:99: 35:6a:d7:7e:b3:18:76:a8:e8:88:b7:2c:78:48:d9: 71:fa:15:36:c3:9d:c7:06:08:5e:e7:8d:01:4b:56: 98:05:3e:81:22:51:a0:42:ea:4b:70:05:d6:51:43: 13:c1:fc:4a:b2:26:d1:49:ad:8f:5b:10:5e:54:db: b1:2b:13:ff:26:0e:d1:21:d3:af:d4:b9:32:f8:76: b5:57:7d:7b:f6:2c:fb:01:71:24:02:3b:b6:5f:87: b1:8b:64:b0:cf:37:fd:2c:0e:c9:3d:db:26:ab:34: a7:bf:1a:e3:36:84:8a:97:db:1c:8d:0b:b1:b7:21: dd:0a:08:46:2e:b9:bc:0a:e1:75:c8:ef:15:a7:d9: a1:53:52:dc:4a:b5:ba:65:ce:4f:4a:f6:69:3c:20: dd:05:c7:93:7a:a3:77:c6:ce:34:55:2f:61:f0:4d: 21:a5:32:32:f3:bb:7f:53:a2:4f:d5:db:c0:30:36: 58:9e:c2:41:3f:9e:69:d8:c9:13:77:00:0e:44:37: 0c:da:9a:1e:30:d8:48:1d:ba:22:a5:f6:8b:88:68: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A3:D8:F0:99:65:BA:89:2E:4C:AE:29:79:E1:6B:D4:B7:B2:0D:E0 X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a9:aa:e9:8b:4b:e3:1e:23:79:6d:df:5c:6d:25:3f:eb:73: 48:88:1e:80:4f:fa:09:e9:f7:05:3c:71:16:75:46:f3:2c:2e: 26:da:fa:cc:12:09:f5:03:9c:8a:50:7c:b0:55:d8:da:b5:c2: 4a:4c:7d:27:1f:02:35:a5:22:c1:26:78:61:3b:62:89:25:3f: 32:91:fb:98:c5:f6:43:8e:ac:9d:fa:15:e1:8f:5c:57:10:4a: 8c:d8:14:ed:a3:c0:a5:5b:b9:62:75:50:1b:61:42:af:ea:00: ed:a7:75:cb:64:79:db:c5:db:b5:15:ad:bd:83:a0:cd:cc:0a: 4c:77:95:85:5c:b4:68:39:9b:82:b3:aa:64:ae:6d:62:9f:32: 90:86:99:f7:b5:62:6b:d5:5a:42:d1:3a:50:ed:fc:f0:21:c8: 32:2a:4d:43:7b:8a:61:c8:3c:a2:ed:89:8f:5b:e4:9b:96:30: 35:74:b2:49:12:1e:7d:60:22:02:09:71:d4:87:77:be:9d:cc: 6d:03:f7:05:00:66:1b:a6:21:a5:c3:77:ca:58:5f:2f:40:92: b8:fb:61:a6:03:b5:c5:a4:b2:ec:c5:42:d4:ee:ef:38:e8:5e: 51:92:b9:2f:be:2d:d7:34:b6:8f:b0:e4:2f:ce:70:14:7b:83: 19:df:51:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjYwNDA1MDE1OTM1WhcNMjYwNDEyMDE1OTM1WjAYMRYwFAYD VQQDEw02OWQxYzIwNy0yMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkDOhb9DIC0OMq/rDPBXaZjTIwfawlhyrIPf/yVxKt1wEBXr3SUEEKa1JvZk1 atd+sxh2qOiItyx4SNlx+hU2w53HBghe540BS1aYBT6BIlGgQupLcAXWUUMTwfxK sibRSa2PWxBeVNuxKxP/Jg7RIdOv1Lky+Ha1V3179iz7AXEkAju2X4exi2Swzzf9 LA7JPdsmqzSnvxrjNoSKl9scjQuxtyHdCghGLrm8CuF1yO8Vp9mhU1LcSrW6Zc5P SvZpPCDdBceTeqN3xs40VS9h8E0hpTIy87t/U6JP1dvAMDZYnsJBP55p2MkTdwAO RDcM2poeMNhIHboipfaLiGgjjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOj2PCZ ZbqJLkyuKXnha9S3sg3gMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKmq6YtL4x4jeW3fXG0lP+tzSIgegE/6Cen3BTxxFnVG8ywuJtr6zBIJ9QOc ilB8sFXY2rXCSkx9Jx8CNaUiwSZ4YTtiiSU/MpH7mMX2Q46snfoV4Y9cVxBKjNgU 7aPApVu5YnVQG2FCr+oA7ad1y2R528XbtRWtvYOgzcwKTHeVhVy0aDmbgrOqZK5t Yp8ykIaZ97Via9VaQtE6UO388CHIMipNQ3uKYcg8ou2Jj1vkm5YwNXSySRIefWAi Aglx1Id3vp3MbQP3BQBmG6YhpcN3ylhfL0CSuPthpgO1xaSy7MVC1O7vOOheUZK5 L74t1zS2j7DkL85wFHuDGd9R3Q== -----END CERTIFICATE-----Generated at Mon Apr 6 14:43:09 2026 by rpki-client