$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json) Hash identifier: STs+2Gbobl4c7Y/hRftbMPp88JoPDw6fPGDELEMeDHc= Subject key identifier: B1:25:BE:20:77:FD:D2:89:F5:9B:63:19:63:20:FD:46:BD:96:4A:46 Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft Manifest number: D0 Signing time: Sun 05 Apr 2026 06:09:17 +0000 Manifest this update: Sun 05 Apr 2026 06:09:17 +0000 Manifest next update: Sun 12 Apr 2026 06:09:17 +0000 Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: 08sq969K7UAskzu5sdzM++x6sDKGOWelr2YdTQoNIfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Validity Not Before: Apr 5 06:09:17 2026 GMT Not After : Apr 12 06:09:17 2026 GMT Subject: CN=69d1fc8d-d0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:cd:61:b7:7c:0c:bc:54:57:d1:07:e9:d5: 0f:82:fa:31:33:bb:41:0c:4d:eb:4a:32:03:4c:b2: 74:96:dc:89:7a:43:27:f0:53:9d:e3:12:cd:cd:59: c1:0c:44:ba:aa:d1:5e:14:c8:3d:a7:27:53:48:06: 55:2b:aa:aa:81:4e:38:1d:29:87:98:cc:03:15:21: e8:06:1b:bc:1f:25:9e:5e:b6:b0:6e:8e:c9:bd:40: 43:fa:fd:9f:fc:72:5b:85:68:98:90:0f:b4:c9:f0: 90:77:01:43:4a:7e:75:e4:40:2f:7a:8f:a3:7f:73: 06:d9:c3:d7:40:62:e7:f2:a3:95:33:1f:d0:32:fd: 99:c8:36:78:11:d8:f8:bc:cf:94:8c:58:bf:d6:ee: 2e:1a:1c:5c:79:76:58:fc:62:97:fb:fd:17:fe:98: f4:e3:dc:e9:14:a6:f6:77:0b:a3:b7:7a:1e:f4:4c: b8:52:0c:a0:b8:ad:10:66:3e:55:09:e0:62:82:60: 57:5a:f9:43:2f:c4:9d:d3:56:12:51:57:e2:ad:f1: 99:76:ce:30:b0:4d:20:a0:6b:79:d1:b3:f9:38:74: 6e:2f:0e:99:2b:52:39:d4:7a:c6:d8:54:54:e0:81: 01:ba:cf:e6:4b:2a:ad:8a:84:59:5a:d1:44:7e:ff: b8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:BE:20:77:FD:D2:89:F5:9B:63:19:63:20:FD:46:BD:96:4A:46 X509v3 Authority Key Identifier: keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d3:76:8f:cb:2b:94:6b:ca:63:22:be:7a:61:1d:9e:cf:c1: ee:88:df:aa:44:af:87:7d:22:13:36:f3:6d:0c:1a:81:40:b6: 7a:ea:0d:3f:b6:ba:25:cf:68:b1:fa:a7:1f:9d:4a:35:9e:73: 3a:48:02:d9:aa:20:0b:b0:b3:f6:89:89:71:2a:5c:ff:44:ac: 6f:23:c7:98:02:ae:92:b6:89:2f:64:14:b2:b5:75:dd:8b:0b: 8b:a9:c8:31:8f:1b:23:f5:a0:62:12:b7:60:f7:b4:53:c1:f0: 20:97:e9:1f:0a:5b:20:a2:03:63:1f:a2:b2:ba:d9:5a:60:50: 46:7a:fa:cc:18:80:a9:b0:82:5d:f6:16:17:6d:89:7d:b5:05: fa:26:d1:d3:d0:e7:71:71:58:58:f3:c4:a3:6c:e8:55:b0:72: d8:05:75:67:97:0d:7e:98:44:c3:04:79:50:3b:b0:c5:82:94: 26:3d:0d:bb:15:05:28:4f:95:fc:52:f2:de:cc:39:6b:c8:d1: 4c:c4:d0:55:55:77:a8:c5:8c:a1:0a:a3:c9:cd:0d:09:fc:54: 9a:a7:9e:93:6e:a3:48:15:fc:c5:db:d3:c2:53:26:cd:74:30: 4e:ed:ce:34:49:43:e3:4e:a3:99:90:8b:d9:1d:dd:84:ee:7c: fe:d5:39:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMzcxMTAvBgNVBAUTKDc5RjVFREE0QzcwRTJFMDNFOTA4QjgxOEMxNzc1OEYy QTY2OTc3NTcwHhcNMjYwNDA1MDYwOTE3WhcNMjYwNDEyMDYwOTE3WjAYMRYwFAYD VQQDEw02OWQxZmM4ZC1kMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GPNYbd8DLxUV9EH6dUPgvoxM7tBDE3rSjIDTLJ0ltyJekMn8FOd4xLNzVnB DES6qtFeFMg9pydTSAZVK6qqgU44HSmHmMwDFSHoBhu8HyWeXrawbo7JvUBD+v2f /HJbhWiYkA+0yfCQdwFDSn515EAveo+jf3MG2cPXQGLn8qOVMx/QMv2ZyDZ4Edj4 vM+UjFi/1u4uGhxceXZY/GKX+/0X/pj049zpFKb2dwujt3oe9Ey4UgyguK0QZj5V CeBigmBXWvlDL8Sd01YSUVfirfGZds4wsE0goGt50bP5OHRuLw6ZK1I51HrG2FRU 4IEBus/mSyqtioRZWtFEfv+4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLElviB3 /dKJ9ZtjGWMg/Ua9lkpGMB8GA1UdIwQYMBaAFHn17aTHDi4D6Qi4GMF3WPKmaXdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy80OUVFMjMxNkY1 RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9lZlh0cE1jT0xnUHBDTGdZd1hkWThxWnBk MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIzNy80OUVFMjMxNkY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9lZlh0cE1jT0xn UHBDTGdZd1hkWThxWnBkMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtN2j8srlGvKYyK+emEdns/B7ojfqkSvh30iEzbzbQwagUC2euoNP7a6Jc9o sfqnH51KNZ5zOkgC2aogC7Cz9omJcSpc/0SsbyPHmAKukraJL2QUsrV13YsLi6nI MY8bI/WgYhK3YPe0U8HwIJfpHwpbIKIDYx+isrrZWmBQRnr6zBiAqbCCXfYWF22J fbUF+ibR09DncXFYWPPEo2zoVbBy2AV1Z5cNfphEwwR5UDuwxYKUJj0NuxUFKE+V /FLy3sw5a8jRTMTQVVV3qMWMoQqjyc0NCfxUmqeek26jSBX8xdvTwlMmzXQwTu3O NElD406jmZCL2R3dhO58/tU5iA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:38 2026 by rpki-client