$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: R8n8B9/zTY2lk0VN5Zhu8EL3BAbdFB47Is2U32SOzOM= Subject key identifier: A8:A6:7A:62:DA:4A:99:06:EF:3E:5E:78:70:02:A4:CD:E7:D9:05:C9 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1DD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1DC5 Signing time: Thu 16 Apr 2026 16:03:38 +0000 Manifest this update: Thu 16 Apr 2026 16:03:37 +0000 Manifest next update: Thu 23 Apr 2026 16:03:37 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: 8ViWSjThQaVWw/7y3A4BR6NcGcSjL9yglcVO1wtOt18=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: kR4y+WvgC3hkyFfy0t8WKjcUjP/sBiTZjAGWQPxf694=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: seFaisKP4ec6q9qFGmFZNr4zMFjr0TKVJUyLwQHYJXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7640 (0x1dd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Apr 16 16:03:37 2026 GMT Not After : Apr 23 16:03:37 2026 GMT Subject: CN=69e1085a-5c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:bc:82:42:aa:e1:3c:63:4e:d0:23:b7:c5: 81:c0:56:cf:37:9a:cd:a9:40:dc:65:6e:23:f5:52: 24:1a:9d:82:68:96:eb:15:9b:f0:56:8a:f0:2c:ee: 08:b2:1f:21:ea:01:47:1b:46:40:c8:f4:f7:9c:5f: 7b:b9:ea:28:90:26:1e:95:b7:a5:c4:68:f2:b9:a6: 5b:76:25:bf:76:a8:83:72:57:eb:52:3a:c5:05:19: ee:cf:c1:44:1a:38:9f:3a:75:60:2a:a5:16:01:61: 8f:ed:1a:17:d0:cd:cc:83:86:d1:01:03:78:c4:a9: 71:cf:b9:d7:32:6e:35:d3:cd:59:7b:e3:65:23:35: 96:95:e0:48:a5:65:e7:48:c6:6e:81:13:7c:4f:9f: 71:cf:ce:13:88:ea:17:11:d5:2e:d9:a4:cd:7f:1e: ac:c3:33:7f:21:cf:4e:0f:d1:dc:2b:51:fc:b7:b0: 6d:c2:c6:bf:a8:a4:c0:f7:73:dc:5c:52:3e:b9:ad: b4:14:d5:98:09:38:4a:dd:4d:af:43:80:15:55:ca: 4d:f4:b7:4b:ce:74:1a:25:9f:60:12:7a:60:53:63: a0:35:0f:a1:18:1f:26:36:87:3d:ba:43:24:e8:20: 9b:d8:74:17:44:50:57:dc:65:c1:f6:2c:8e:ef:bf: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A6:7A:62:DA:4A:99:06:EF:3E:5E:78:70:02:A4:CD:E7:D9:05:C9 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9e:cd:bc:e3:4e:96:1c:71:f5:ad:49:80:ab:2b:f5:d0:ac: 55:1f:8b:7c:47:89:30:cb:50:05:c8:0b:9f:a4:d2:84:ec:90: 28:7a:63:b7:71:55:70:27:dd:02:e5:e9:56:a9:81:e4:80:d3: 33:be:97:83:45:fe:0a:61:c1:b5:47:fd:a7:50:f8:fd:f2:20: 11:10:d9:11:15:a7:3d:b3:9a:0a:13:04:bf:ef:97:ad:bc:b3: ce:b4:5f:9c:41:20:52:0e:58:4b:7d:4c:5a:0c:b0:74:b7:d6: 50:e9:c3:a3:a2:a2:0f:0f:67:03:32:00:2a:70:8a:dc:97:40: 32:6e:2c:1d:89:63:b8:b3:a4:41:ee:53:4e:57:a4:12:78:35: bd:e0:5e:8e:93:7a:9f:9a:c9:8e:dc:fc:0e:9d:5b:6c:88:ff: fa:8c:94:d3:ce:aa:bd:8d:42:59:64:63:22:d2:44:18:dd:57: 01:9b:34:d6:15:0f:30:01:b9:ca:6b:c6:39:bf:aa:0d:d0:1b: 1e:c4:ef:0a:cd:59:26:14:6b:78:40:2c:b8:ae:30:c8:57:44: ee:65:20:5d:4c:5a:36:28:36:8c:5d:a5:3c:54:5d:d9:61:1b: 9a:3d:4e:b9:42:a7:a0:71:54:1d:85:11:1b:49:6a:98:74:af: 17:37:6b:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjYwNDE2MTYwMzM3WhcNMjYwNDIzMTYwMzM3WjAYMRYwFAYD VQQDEw02OWUxMDg1YS01YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEm8gkKq4TxjTtAjt8WBwFbPN5rNqUDcZW4j9VIkGp2CaJbrFZvwVorwLO4I sh8h6gFHG0ZAyPT3nF97ueookCYelbelxGjyuaZbdiW/dqiDclfrUjrFBRnuz8FE GjifOnVgKqUWAWGP7RoX0M3Mg4bRAQN4xKlxz7nXMm41081Ze+NlIzWWleBIpWXn SMZugRN8T59xz84TiOoXEdUu2aTNfx6swzN/Ic9OD9HcK1H8t7Btwsa/qKTA93Pc XFI+ua20FNWYCThK3U2vQ4AVVcpN9LdLznQaJZ9gEnpgU2OgNQ+hGB8mNoc9ukMk 6CCb2HQXRFBX3GXB9iyO77/Y9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKimemLa SpkG7z5eeHACpM3n2QXJMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgZ7NvONOlhxx9a1JgKsr9dCsVR+LfEeJMMtQBcgLn6TShOyQKHpjt3FVcCfd AuXpVqmB5IDTM76Xg0X+CmHBtUf9p1D4/fIgERDZERWnPbOaChMEv++XrbyzzrRf nEEgUg5YS31MWgywdLfWUOnDo6KiDw9nAzIAKnCK3JdAMm4sHYljuLOkQe5TTlek Eng1veBejpN6n5rJjtz8Dp1bbIj/+oyU086qvY1CWWRjItJEGN1XAZs01hUPMAG5 ymvGOb+qDdAbHsTvCs1ZJhRreEAsuK4wyFdE7mUgXUxaNig2jF2lPFRd2WEbmj1O uUKnoHFUHYURG0lqmHSvFzdr1g== -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:23 2026 by rpki-client