$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: laKo+UeLRQeMaCZKvqUplL8CTRK68GnFcQYwIc5S410= Subject key identifier: EA:AB:F7:B9:FF:B3:96:80:D2:C7:10:38:1C:C1:AA:03:BF:51:DC:64 Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: 0195 Signing time: Fri 17 Apr 2026 04:05:53 +0000 Manifest this update: Fri 17 Apr 2026 04:05:52 +0000 Manifest next update: Fri 24 Apr 2026 04:05:52 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: nKhRLsotpFOeeHbwd6Nh05pC1n6sxr0xYaZbi2UxFC8=) 2: C63D0814097B11F0B1329480C4F9AE02.roa (hash: LEeEoPnurqHLkUUVSu9yJBsBMhkrOlJ07WCt3kv1lkk=) 3: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: UQkvKEtmPCHJz+Q8ZNQvg67RXBCPC2Ebr74K46kUePA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Apr 17 04:05:52 2026 GMT Not After : Apr 24 04:05:52 2026 GMT Subject: CN=69e1b1a0-f6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:0c:e0:78:02:e8:fc:4c:8e:cb:07:dc:b3: f2:ca:5b:e3:6f:d1:b7:7a:96:c2:3f:6c:d5:ab:7c: 40:b7:23:af:b2:8f:d1:c6:55:64:98:b9:3d:07:75: ad:23:d5:0d:92:8c:02:af:09:c7:7b:e2:e5:f4:60: 53:95:56:41:6d:0f:d8:44:7e:43:b6:45:d1:1f:44: cc:43:6a:d7:14:6c:6d:0e:16:34:38:c2:61:1e:6d: 4d:fc:90:eb:22:f1:dc:bc:e7:fb:31:05:7f:d0:6c: d1:a7:be:91:53:0e:7e:6d:e8:2d:fa:d7:bc:fb:33: b7:38:3c:4a:84:6d:d7:5e:54:ac:a9:00:a9:bc:89: ac:5f:db:97:5e:d0:aa:e3:c7:46:f5:6c:d7:99:c1: 07:cc:09:6b:73:83:08:63:e4:f5:dc:f5:44:1d:2e: 7b:8a:2a:d9:f8:c0:f1:51:1c:b1:ac:c9:95:27:03: 38:fd:83:68:0f:d7:41:1d:c5:29:3c:0d:8f:d6:ec: 1d:19:5a:9a:75:03:a0:d9:a0:f4:c5:fa:95:ab:4a: 3d:83:88:d8:bc:bc:26:dc:09:4f:55:c2:56:04:a3: 33:41:83:4e:a4:14:4f:8b:96:2c:23:cb:6c:06:93: 06:10:c7:b1:75:9c:e9:e4:2b:8a:44:45:43:8c:f4: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AB:F7:B9:FF:B3:96:80:D2:C7:10:38:1C:C1:AA:03:BF:51:DC:64 X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:16:f2:a8:51:69:fd:10:d2:9c:2e:fc:ed:1b:5b:d9:cb:e3: e6:24:36:df:5a:d8:08:ed:03:5c:5a:03:81:a3:49:1e:d0:32: 80:04:2c:c5:d4:b0:9f:15:1e:7c:e1:81:75:98:fa:bf:7c:c8: 0a:49:73:49:53:2d:f1:3b:98:e5:c4:d6:f8:0c:93:6f:dc:ab: 3a:62:d5:c1:c8:2f:15:c0:b3:38:a5:67:e2:c1:14:ab:cb:9c: 64:f1:1e:93:2e:f9:df:04:2b:bf:c2:a6:5d:b8:a6:43:8e:3e: af:57:8d:ad:c6:d0:a1:61:d3:33:6b:1e:5b:06:0e:4f:33:71: ef:aa:ed:fb:60:45:f7:5a:6c:fd:6a:e0:5e:6d:da:04:79:23: d8:fe:38:94:0a:48:14:c3:77:1d:93:2f:41:19:2b:8f:e4:f2: 26:31:e2:d9:36:a8:e4:06:00:fe:e8:c7:b8:62:c7:5e:d4:6f: e9:0a:1d:3e:69:c7:cb:bf:fa:87:00:0f:46:29:a3:cb:61:59: 2f:16:c3:a3:d8:7e:7a:c7:4a:26:cf:b2:50:b5:e2:ef:68:1f: 6c:28:e4:ae:31:57:b1:88:ae:43:d4:a5:fd:8b:a6:3a:b7:a1: 4c:bf:87:2e:e9:ed:76:34:c2:bf:8f:67:d0:2d:c6:c2:06:f1: da:f0:73:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjYwNDE3MDQwNTUyWhcNMjYwNDI0MDQwNTUyWjAYMRYwFAYD VQQDEw02OWUxYjFhMC1mNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppQM4HgC6PxMjssH3LPyylvjb9G3epbCP2zVq3xAtyOvso/RxlVkmLk9B3Wt I9UNkowCrwnHe+Ll9GBTlVZBbQ/YRH5DtkXRH0TMQ2rXFGxtDhY0OMJhHm1N/JDr IvHcvOf7MQV/0GzRp76RUw5+begt+te8+zO3ODxKhG3XXlSsqQCpvImsX9uXXtCq 48dG9WzXmcEHzAlrc4MIY+T13PVEHS57iirZ+MDxURyxrMmVJwM4/YNoD9dBHcUp PA2P1uwdGVqadQOg2aD0xfqVq0o9g4jYvLwm3AlPVcJWBKMzQYNOpBRPi5YsI8ts BpMGEMexdZzp5CuKREVDjPRAAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqr97n/ s5aA0scQOBzBqgO/UdxkMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAshbyqFFp/RDSnC787Rtb2cvj5iQ231rYCO0DXFoDgaNJHtAygAQsxdSwnxUe fOGBdZj6v3zICklzSVMt8TuY5cTW+AyTb9yrOmLVwcgvFcCzOKVn4sEUq8ucZPEe ky753wQrv8KmXbimQ44+r1eNrcbQoWHTM2seWwYOTzNx76rt+2BF91ps/WrgXm3a BHkj2P44lApIFMN3HZMvQRkrj+TyJjHi2Tao5AYA/ujHuGLHXtRv6QodPmnHy7/6 hwAPRimjy2FZLxbDo9h+esdKJs+yULXi72gfbCjkrjFXsYiuQ9Sl/YumOrehTL+H LuntdjTCv49n0C3Gwgbx2vBzag== -----END CERTIFICATE-----Generated at Fri Apr 17 09:38:44 2026 by rpki-client