$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json) Hash identifier: 7ON4SjndkE6CNMUkELD13HAlyA7NvqiRxFNMLkKrCm8= Subject key identifier: 2D:B3:F0:71:65:A0:22:A4:21:A6:4A:C8:04:77:DE:03:A1:AC:36:17 Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft Manifest number: 014B Signing time: Fri 17 Apr 2026 04:54:31 +0000 Manifest this update: Fri 17 Apr 2026 04:54:31 +0000 Manifest next update: Fri 24 Apr 2026 04:54:31 +0000 Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: qAfb42jPIG3MYpZUw1/G2P8AIBWDRNDpK0uJ3FJw454=) 2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Validity Not Before: Apr 17 04:54:31 2026 GMT Not After : Apr 24 04:54:31 2026 GMT Subject: CN=69e1bd07-a0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:58:23:16:25:65:91:52:c5:85:4c:57:b1: fe:7b:9b:c8:2c:22:bb:6f:90:f2:84:72:39:a7:fc: e0:dd:2c:1f:2c:75:14:a9:66:11:92:5f:f6:b2:cc: bb:7a:20:50:8a:7c:06:95:29:83:c9:2c:84:61:9b: f1:34:4b:7c:10:e8:5d:61:86:02:b0:96:9b:f2:70: f2:1b:6e:8a:cb:0e:5b:84:26:16:a2:61:28:83:02: 30:d0:5b:59:86:e5:5b:11:03:eb:94:bc:b6:52:15: f6:ca:ba:12:4e:0f:bf:8e:8b:4b:0b:f4:0a:ba:fa: 10:0d:77:14:dc:af:21:74:89:fb:bf:d4:25:3b:e3: c8:aa:1e:94:cd:92:a8:6c:c4:e1:ed:98:fe:8f:0a: f2:c5:be:2e:93:2b:15:2b:83:5a:8a:69:0e:c5:f8: fb:37:a3:00:38:25:e7:42:ca:6f:99:1b:ef:28:6c: 6a:f2:ba:d6:8e:a1:ea:20:bf:34:1b:ec:ba:23:44: d3:41:15:d9:79:7e:e9:08:1d:25:2c:0e:df:9f:fe: 08:5d:4b:7e:9f:64:e3:af:2e:ff:9d:52:c8:2b:7a: 3b:44:e2:92:3f:15:df:f7:0b:f8:fc:13:d7:d1:54: ff:40:78:14:da:4b:e7:62:48:84:c5:6c:a3:64:e4: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B3:F0:71:65:A0:22:A4:21:A6:4A:C8:04:77:DE:03:A1:AC:36:17 X509v3 Authority Key Identifier: keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:11:5a:5e:b6:5d:18:53:d5:75:0b:72:c2:50:70:5a:3c:c2: 94:3a:0a:bb:bb:3a:38:bf:67:3e:6e:56:03:6d:b9:fc:0b:43: 49:56:3e:df:ca:95:c4:f9:6c:99:2d:6e:b8:71:46:61:e9:4b: 14:7e:f6:82:54:73:50:1c:f6:1d:96:56:7f:14:1e:32:09:2b: c2:2b:8d:fe:4f:ef:e5:7e:0f:87:53:9f:ec:67:7c:aa:c0:87: c8:9d:b4:05:07:f9:66:34:17:dd:84:94:50:01:06:b8:47:8f: 9d:17:57:ed:67:bf:26:68:fc:4a:dd:8f:d7:4b:eb:ba:1f:03: 56:76:24:98:94:2e:42:3b:bc:87:00:f8:c9:78:9f:5b:d9:29: f6:26:18:42:12:f9:03:c6:25:24:e2:07:bd:ba:f0:06:60:b8: 7e:9e:2c:00:e8:04:1f:1a:ab:35:02:c4:2b:0c:05:d0:2d:69: 24:cd:92:86:78:79:20:10:33:a8:2c:87:c5:80:d4:06:64:11: c9:12:5e:1b:a3:21:6f:98:fb:8f:3b:5a:67:cc:c2:55:5b:e1: 9f:47:e3:37:5a:af:59:4d:e6:b6:03:3f:b7:33:4d:eb:d8:5d: a1:58:20:4f:3d:4b:a8:3a:e4:60:3d:d3:33:91:a3:8b:bd:85: 07:11:c7:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxRjMxMTAvBgNVBAUTKDc1MEZBNTdCNTkxNTY1MzlDQjE2RTU0QTYwQTZDRURC NUIxMEVCOUUwHhcNMjYwNDE3MDQ1NDMxWhcNMjYwNDI0MDQ1NDMxWjAYMRYwFAYD VQQDEw02OWUxYmQwNy1hMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaNYIxYlZZFSxYVMV7H+e5vILCK7b5DyhHI5p/zg3SwfLHUUqWYRkl/2ssy7 eiBQinwGlSmDySyEYZvxNEt8EOhdYYYCsJab8nDyG26Kyw5bhCYWomEogwIw0FtZ huVbEQPrlLy2UhX2yroSTg+/jotLC/QKuvoQDXcU3K8hdIn7v9QlO+PIqh6UzZKo bMTh7Zj+jwryxb4ukysVK4NaimkOxfj7N6MAOCXnQspvmRvvKGxq8rrWjqHqIL80 G+y6I0TTQRXZeX7pCB0lLA7fn/4IXUt+n2Tjry7/nVLIK3o7ROKSPxXf9wv4/BPX 0VT/QHgU2kvnYkiExWyjZORFKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2z8HFl oCKkIaZKyAR33gOhrDYXMB8GA1UdIwQYMBaAFHUPpXtZFWU5yxblSmCmzttbEOue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjFGMy80Mjk3RDA1MjQ1 QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpUbkxGdVZLWUtiTzIxc1E2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRLWxlMWtWWlRuTEZ1VktZS2JPMjFzUTY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjFGMy80Mjk3RDA1MjQ1QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpU bkxGdVZLWUtiTzIxc1E2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYxFaXrZdGFPVdQtywlBwWjzClDoKu7s6OL9nPm5WA225/AtDSVY+38qVxPls mS1uuHFGYelLFH72glRzUBz2HZZWfxQeMgkrwiuN/k/v5X4Ph1Of7Gd8qsCHyJ20 BQf5ZjQX3YSUUAEGuEePnRdX7We/Jmj8St2P10vruh8DVnYkmJQuQju8hwD4yXif W9kp9iYYQhL5A8YlJOIHvbrwBmC4fp4sAOgEHxqrNQLEKwwF0C1pJM2Shnh5IBAz qCyHxYDUBmQRyRJeG6Mhb5j7jztaZ8zCVVvhn0fjN1qvWU3mtgM/tzNN69hdoVgg Tz1LqDrkYD3TM5Gji72FBxHH9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 15:57:06 2026 by rpki-client