$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: 8M5umZqP5oU9JRuCWuJ/HAiHXToGCpW3lT18ArgHdAU= Subject key identifier: 67:2E:FD:7A:E2:6C:83:0A:30:E2:BE:30:82:1E:D5:46:A4:7C:C8:AB Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0F76 Signing time: Thu 16 Apr 2026 17:28:20 +0000 Manifest this update: Thu 16 Apr 2026 17:28:20 +0000 Manifest next update: Thu 23 Apr 2026 17:28:20 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: 0sbU/OH35Lg/+stB9H5+AxR9TAdKPX983PADvUaGbIc=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: mUPMtWwzY3i1DNxfpfsJiEN2KmimOV1tl1pdhwHNds8=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: agpfPSJGjVQ5csFAXUqTBwmD9lbAU8gkO4ush2slIeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3984 (0xf90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Apr 16 17:28:20 2026 GMT Not After : Apr 23 17:28:20 2026 GMT Subject: CN=69e11c34-00f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:bf:70:c7:a8:9e:42:1d:61:60:85:02:c0: 46:77:58:63:4d:8d:81:90:bd:81:cd:8d:27:23:bb: 1b:be:53:6c:e0:36:ef:46:92:6e:f4:61:0f:13:ff: d1:0d:e8:90:48:ca:10:4b:fa:23:03:a1:b7:ab:3c: 19:c2:9b:e2:61:ed:03:76:40:e2:5b:3e:43:48:ba: dc:dc:d0:8d:09:25:07:a2:3b:44:c4:24:a4:87:34: 57:be:8b:d9:14:f0:51:2c:67:e9:17:f0:1d:15:2f: 92:67:58:fe:20:4a:05:bf:e9:7c:5d:18:c9:96:bc: f4:e1:3c:8a:86:b9:f0:90:f3:5a:f1:59:6d:47:b4: 11:b3:46:70:bc:5b:70:e3:b2:df:21:df:7a:8d:f3: bb:b8:0e:16:36:42:1c:3b:1f:ba:6c:43:61:9a:c5: 96:3e:5f:70:03:46:28:00:30:f0:f2:ac:a1:6b:c2: f5:55:12:a7:ae:11:ab:0e:e3:e0:86:5a:f0:f8:26: f9:01:c6:ed:46:af:de:d6:1b:5b:67:ad:ad:9b:e7: 97:dc:da:a3:da:65:2e:ff:c4:a2:3f:d1:7e:7d:3b: 21:6a:f9:db:c3:ab:9f:c9:95:cb:af:73:27:23:3a: d4:e5:2b:e8:07:d4:be:ab:c8:69:87:0c:85:b4:6d: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:FD:7A:E2:6C:83:0A:30:E2:BE:30:82:1E:D5:46:A4:7C:C8:AB X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b0:9f:5c:29:95:2b:6b:a2:15:75:a2:27:cf:e6:a3:d8:c9: e5:f1:79:55:04:cb:d2:07:b4:2f:35:44:45:4d:71:83:56:a9: e2:eb:0b:b5:4c:34:dc:c9:3f:4e:96:09:5a:e3:bc:5b:84:dc: 16:f8:f9:89:19:b9:15:87:5e:88:13:cc:b8:03:dc:bf:bb:4e: e3:92:17:a1:3e:8b:4f:23:c1:ea:e9:4b:af:fb:7c:68:30:49: 58:a3:7b:61:3f:74:6c:b0:14:56:a5:82:b2:53:cf:6d:6b:b2: 44:00:e1:51:a7:e2:ad:78:21:3b:8f:91:e4:87:1d:2b:91:35: 00:af:83:e3:29:d1:c2:a8:12:b9:ae:95:cc:ef:ce:ad:eb:14: 21:03:5f:ab:59:93:15:e5:62:bd:4b:df:f5:c7:f9:43:9e:63: a6:64:e5:10:aa:e0:9a:6b:8b:9b:1f:9b:4f:f3:f6:35:1c:dd: 03:d8:1c:0c:81:09:bc:d6:68:1a:a4:a0:8b:1a:4a:95:d7:39: 16:61:16:22:b0:6e:6c:43:f9:1a:78:7e:da:d1:8f:f7:0f:5a: f3:89:88:b0:41:64:60:98:5c:55:69:8d:4c:01:28:c0:06:09: 50:59:61:ca:07:3b:e6:bb:78:26:58:ee:15:b0:71:88:48:97: ce:51:6b:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjYwNDE2MTcyODIwWhcNMjYwNDIzMTcyODIwWjAYMRYwFAYD VQQDEw02OWUxMWMzNC0wMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0K/cMeonkIdYWCFAsBGd1hjTY2BkL2BzY0nI7sbvlNs4DbvRpJu9GEPE//R DeiQSMoQS/ojA6G3qzwZwpviYe0DdkDiWz5DSLrc3NCNCSUHojtExCSkhzRXvovZ FPBRLGfpF/AdFS+SZ1j+IEoFv+l8XRjJlrz04TyKhrnwkPNa8VltR7QRs0ZwvFtw 47LfId96jfO7uA4WNkIcOx+6bENhmsWWPl9wA0YoADDw8qyha8L1VRKnrhGrDuPg hlrw+Cb5AcbtRq/e1htbZ62tm+eX3Nqj2mUu/8SiP9F+fTshavnbw6ufyZXLr3Mn IzrU5SvoB9S+q8hphwyFtG1dXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcu/Xri bIMKMOK+MIIe1UakfMirMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABLCfXCmVK2uiFXWiJ8/mo9jJ5fF5VQTL0ge0LzVERU1xg1ap4usLtUw03Mk/ TpYJWuO8W4TcFvj5iRm5FYdeiBPMuAPcv7tO45IXoT6LTyPB6ulLr/t8aDBJWKN7 YT90bLAUVqWCslPPbWuyRADhUafirXghO4+R5IcdK5E1AK+D4ynRwqgSua6VzO/O resUIQNfq1mTFeVivUvf9cf5Q55jpmTlEKrgmmuLmx+bT/P2NRzdA9gcDIEJvNZo GqSgixpKldc5FmEWIrBubEP5Gnh+2tGP9w9a84mIsEFkYJhcVWmNTAEowAYJUFlh ygc75rt4JljuFbBxiEiXzlFr5w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:22 2026 by rpki-client