$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: rbWdQ4Cd4D3bs8NTgywm93+oda4a2Sc5ZfxZl3F9FLU= Subject key identifier: AE:49:F3:40:BC:31:C9:76:B5:AE:5A:50:57:E6:39:7A:53:3C:AA:30 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 01D2 Signing time: Fri 17 Apr 2026 03:21:24 +0000 Manifest this update: Fri 17 Apr 2026 03:21:23 +0000 Manifest next update: Fri 24 Apr 2026 03:21:23 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: KXSdZuUEFR/mzKeJUZVKplOns66THYKo0gff+lbb8Do=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Apr 17 03:21:23 2026 GMT Not After : Apr 24 03:21:23 2026 GMT Subject: CN=69e1a734-1288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:a5:ca:e3:32:9b:b4:45:91:05:02:f1:bd: cf:f0:3e:bc:8d:d8:67:2a:ce:4d:aa:f8:53:fd:34: 8c:f8:bd:13:d3:3b:be:e6:88:61:d9:27:8d:ad:4a: d5:67:62:2e:aa:c4:a7:f9:cb:1e:56:65:e4:d8:f9: 11:b1:3a:c2:e5:9c:07:fb:e6:49:69:33:f2:b9:d4: 92:75:0f:3d:8b:93:f1:9e:07:cc:71:03:b5:d3:7a: 37:ee:15:5d:d0:30:02:bf:5c:31:00:4e:e6:5b:29: 59:fe:a8:e4:44:d1:9a:db:b8:9b:31:42:89:89:af: a2:e3:99:bc:08:6c:55:6c:dc:ec:1d:f9:f0:73:30: 01:2f:ce:5f:cd:0e:7c:f0:91:93:02:c0:7d:b7:f5: 1b:b4:1c:62:d2:cf:8c:33:ab:07:8e:50:af:ce:65: f3:31:02:f4:74:ed:f0:27:2a:ff:0d:5b:80:36:ab: 8d:b5:eb:4a:c6:44:2b:ae:ba:b0:d8:b9:b4:76:6f: ae:7d:05:62:be:11:be:f2:28:df:ab:fe:0d:f8:90: 7e:72:e9:18:28:9b:37:ef:d9:c4:50:03:b2:a0:db: 5e:14:c0:0b:a6:84:d9:a2:42:ee:d3:a2:96:38:95: b4:21:6f:41:47:a8:c7:8a:fb:3e:1a:cc:09:dc:7a: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:49:F3:40:BC:31:C9:76:B5:AE:5A:50:57:E6:39:7A:53:3C:AA:30 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:19:c7:dc:8d:f9:2d:f0:4a:4d:b8:20:da:66:c6:e4:89:68: aa:c8:49:39:e1:08:5c:e3:e6:6b:77:cf:52:c3:05:d3:9d:8a: 42:51:97:50:c2:ce:a0:d9:b1:b3:7b:c3:c5:93:e1:7e:19:4a: 6d:05:e6:48:1e:d7:14:0e:14:33:a4:5e:c6:fe:39:18:06:0c: 57:6d:92:97:4b:67:39:29:2b:e1:f7:3a:a1:b3:ee:ee:16:52: d0:5c:84:ab:dd:e5:0a:ad:45:ee:bc:e2:80:ea:48:1c:12:f2: 29:e5:82:b9:b0:9d:d0:0b:6a:03:f0:f5:28:da:05:1a:d6:42: 66:7d:80:95:9d:de:5e:a7:29:41:bb:4c:26:3b:b2:e6:0e:3d: 95:09:5b:10:b7:93:df:b9:9b:0e:51:b4:67:38:5c:fa:98:f1: 53:b8:8e:96:74:19:17:cd:74:08:9c:b2:25:bc:fa:ec:ce:d4: 60:cd:a4:40:5b:df:69:6d:cb:48:62:6d:bf:f4:aa:59:51:a9: 32:5f:06:6a:25:ad:43:da:e1:65:59:49:58:36:a8:1b:ff:77: 7a:8e:d7:cb:b4:e8:0a:b3:f8:99:17:23:61:2b:e4:8a:d0:4c: 53:e8:6d:11:69:93:bd:76:40:d7:f0:58:7c:f7:bf:04:74:f2: 70:88:61:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjYwNDE3MDMyMTIzWhcNMjYwNDI0MDMyMTIzWjAYMRYwFAYD VQQDEw02OWUxYTczNC0xMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+ClyuMym7RFkQUC8b3P8D68jdhnKs5NqvhT/TSM+L0T0zu+5ohh2SeNrUrV Z2IuqsSn+cseVmXk2PkRsTrC5ZwH++ZJaTPyudSSdQ89i5PxngfMcQO103o37hVd 0DACv1wxAE7mWylZ/qjkRNGa27ibMUKJia+i45m8CGxVbNzsHfnwczABL85fzQ58 8JGTAsB9t/UbtBxi0s+MM6sHjlCvzmXzMQL0dO3wJyr/DVuANquNtetKxkQrrrqw 2Lm0dm+ufQVivhG+8ijfq/4N+JB+cukYKJs379nEUAOyoNteFMALpoTZokLu06KW OJW0IW9BR6jHivs+GswJ3HqeGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5J80C8 Mcl2ta5aUFfmOXpTPKowMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxBnH3I35LfBKTbgg2mbG5IloqshJOeEIXOPma3fPUsMF052KQlGXUMLOoNmx s3vDxZPhfhlKbQXmSB7XFA4UM6Rexv45GAYMV22Sl0tnOSkr4fc6obPu7hZS0FyE q93lCq1F7rzigOpIHBLyKeWCubCd0AtqA/D1KNoFGtZCZn2AlZ3eXqcpQbtMJjuy 5g49lQlbELeT37mbDlG0Zzhc+pjxU7iOlnQZF810CJyyJbz67M7UYM2kQFvfaW3L SGJtv/SqWVGpMl8GaiWtQ9rhZVlJWDaoG/93eo7Xy7ToCrP4mRcjYSvkitBMU+ht EWmTvXZA1/BYfPe/BHTycIhhnA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:57 2026 by rpki-client