$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: Xyr43tTbLb9eK0TTQK8eOfyMfpL1YPDzVQRU7UQ2hsw= Subject key identifier: FC:01:5D:C8:E8:FA:BC:DA:F3:38:E5:79:B0:12:58:5C:0B:9E:7C:7A Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 01E4 Signing time: Fri 17 Apr 2026 03:10:16 +0000 Manifest this update: Fri 17 Apr 2026 03:10:15 +0000 Manifest next update: Fri 24 Apr 2026 03:10:15 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: gWkD0gIoxNShUijgX7vizLsiipzmejK9E5S7nR1fYq8=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Apr 17 03:10:15 2026 GMT Not After : Apr 24 03:10:15 2026 GMT Subject: CN=69e1a498-33fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:8b:dd:ab:cf:75:df:d0:56:8b:7d:87:67: 8b:8b:a9:c6:ee:39:a0:91:df:43:c9:4a:03:7f:22: 16:73:cd:c7:88:de:34:dd:8d:ce:b0:b3:d3:c6:8a: 10:b3:19:96:11:0b:37:d9:21:dc:7d:e8:71:d8:43: 32:43:2d:62:47:28:b5:fe:66:6e:f6:11:9a:d6:ff: 60:5a:a2:a5:0c:d4:0d:8a:1b:48:b4:a9:34:91:c9: c0:e6:43:1d:68:de:ea:91:a8:3f:78:5b:5d:e6:f1: d9:87:7f:2c:1b:c8:56:d8:39:32:d3:5c:9f:22:60: a0:25:7a:c6:bf:f1:01:31:fc:30:1d:1d:90:d0:d8: 7f:c5:dd:b6:9b:5c:fc:69:94:44:73:1a:1b:bd:ff: 08:54:63:60:2a:7b:6d:41:67:12:48:de:10:ae:2a: 61:08:0a:c7:d8:5b:42:1f:17:07:70:3c:79:3b:40: e4:a3:f9:a4:8a:4e:ef:e2:04:a9:c6:5a:70:f3:c2: cf:db:b8:36:2c:34:26:13:78:0a:e4:9b:75:82:ed: 01:bd:1e:0e:21:bc:a1:48:c2:58:c7:27:f1:70:73: f2:15:56:66:25:39:c4:d8:af:db:16:19:6e:3c:5f: 43:cd:d6:e5:0f:bf:76:2d:69:f5:f6:e7:1b:10:6f: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:01:5D:C8:E8:FA:BC:DA:F3:38:E5:79:B0:12:58:5C:0B:9E:7C:7A X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:73:a6:1f:d1:c3:df:f9:28:24:33:7a:61:85:6a:66:d0:58: 7e:03:36:16:49:fb:7a:1f:39:88:e8:12:09:96:cc:89:1a:aa: 05:12:d1:a3:9a:e6:d7:8d:79:b1:d8:28:22:e3:36:48:6e:87: cd:1b:d7:f4:2a:41:15:3e:4a:55:7c:97:24:6e:73:52:53:09: f3:e4:60:6b:44:69:3c:58:bc:bd:33:a4:9c:97:bf:39:3a:ef: 4e:fb:3f:a8:c1:97:61:3f:55:97:62:98:61:ef:02:ca:f5:08: f8:94:01:66:2a:6c:11:9e:62:3e:3a:b3:e4:0c:7e:58:e0:9f: 00:5d:f0:70:c0:2c:a7:bf:2d:c5:bc:bb:2f:4d:c4:7d:d0:b1: 13:7f:f2:38:f1:fa:b4:13:03:21:f8:3d:a6:97:6f:b8:c3:45: 46:96:30:34:14:85:e6:dd:3a:a9:4b:8a:02:34:e8:e7:04:9d: 1d:67:45:8f:dd:1c:a4:ef:c3:78:04:1b:52:67:94:ab:14:e1: ea:4e:96:e8:f1:b9:d4:ed:7c:77:38:4e:63:7c:04:0e:55:80: 5b:56:17:8f:a9:1a:40:ed:22:8f:51:ab:7f:35:41:16:c8:ea: e8:8e:d6:14:5c:1f:7e:58:ca:6c:26:3b:a2:e3:ad:51:ce:54: fb:4f:25:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjYwNDE3MDMxMDE1WhcNMjYwNDI0MDMxMDE1WjAYMRYwFAYD VQQDEw02OWUxYTQ5OC0zM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFiL3avPdd/QVot9h2eLi6nG7jmgkd9DyUoDfyIWc83HiN403Y3OsLPTxooQ sxmWEQs32SHcfehx2EMyQy1iRyi1/mZu9hGa1v9gWqKlDNQNihtItKk0kcnA5kMd aN7qkag/eFtd5vHZh38sG8hW2Dky01yfImCgJXrGv/EBMfwwHR2Q0Nh/xd22m1z8 aZREcxobvf8IVGNgKnttQWcSSN4QriphCArH2FtCHxcHcDx5O0Dko/mkik7v4gSp xlpw88LP27g2LDQmE3gK5Jt1gu0BvR4OIbyhSMJYxyfxcHPyFVZmJTnE2K/bFhlu PF9DzdblD792LWn19ucbEG98uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwBXcjo +rza8zjlebASWFwLnnx6MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYnOmH9HD3/koJDN6YYVqZtBYfgM2Fkn7eh85iOgSCZbMiRqqBRLRo5rm1415 sdgoIuM2SG6HzRvX9CpBFT5KVXyXJG5zUlMJ8+Rga0RpPFi8vTOknJe/OTrvTvs/ qMGXYT9Vl2KYYe8CyvUI+JQBZipsEZ5iPjqz5Ax+WOCfAF3wcMAsp78txby7L03E fdCxE3/yOPH6tBMDIfg9ppdvuMNFRpYwNBSF5t06qUuKAjTo5wSdHWdFj90cpO/D eAQbUmeUqxTh6k6W6PG51O18dzhOY3wEDlWAW1YXj6kaQO0ij1GrfzVBFsjq6I7W FFwffljKbCY7ouOtUc5U+08lEw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:54:10 2026 by rpki-client