$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: xlYfURps2elXGU7wt80cP4nq/nKBiqIJVDZvvl1WhLM= Subject key identifier: 5F:96:A6:51:6A:D2:CA:05:13:AD:9E:72:F2:2B:E9:E7:3A:EA:02:8C Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: F2 Signing time: Wed 15 Apr 2026 06:07:59 +0000 Manifest this update: Wed 15 Apr 2026 06:07:59 +0000 Manifest next update: Wed 22 Apr 2026 06:07:59 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: n0hKNTsFuJ6CYEHcpFPmpwrcb6v5T3WOUMq/NlIkHWk=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: pZ8heGX8vu4h/FA/NC03PV3GwdLiz3to6+22+csdrJE=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: xVG7r2x7LJlYNff/OSjUdtTyddvWAkjEB2pAXqeQxpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Apr 15 06:07:59 2026 GMT Not After : Apr 22 06:07:59 2026 GMT Subject: CN=69df2b3f-9238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:2d:3c:fa:3d:74:e7:a0:89:b1:e6:7e:4a: d8:83:ca:95:ea:e4:a4:77:bc:03:8d:72:27:8e:b5: 24:9f:2e:e6:3a:26:50:5d:56:82:0c:db:5a:74:fc: 41:7a:81:6f:44:01:99:28:c3:66:93:8b:b4:ca:5a: 84:c6:7a:36:38:d2:2d:2d:b9:45:10:87:4b:98:13: eb:10:c2:9b:e3:eb:14:4e:24:06:4c:77:ef:e9:b9: f7:8d:f7:66:58:62:81:64:a9:28:35:3b:84:ca:f3: 56:de:76:25:f1:af:22:78:46:32:9b:1f:97:c0:3d: b8:51:89:f3:78:c7:43:23:a9:0b:9d:9f:52:34:9b: ed:e6:21:1e:07:2f:eb:b7:48:2b:0e:33:8f:91:44: 7b:a6:80:7c:30:44:55:28:d4:04:10:6d:01:2e:db: 9f:be:f9:95:b0:4e:5a:16:2f:8f:17:d7:78:c6:bf: 3e:ee:ac:11:1b:c3:a7:6a:70:a4:75:fc:05:96:25: 13:dd:f6:af:7c:df:18:f3:e4:94:4f:bf:bc:48:d0: 6f:5d:04:87:ad:17:2b:76:a2:d8:a6:df:6f:91:82: dc:cc:39:a1:0b:62:04:37:bc:8b:c2:64:49:b8:5f: ca:91:25:f6:39:d2:14:ed:bc:2f:8a:16:e0:26:9c: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:96:A6:51:6A:D2:CA:05:13:AD:9E:72:F2:2B:E9:E7:3A:EA:02:8C X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7a:86:16:15:16:cc:b1:8b:2b:28:73:30:7a:71:7f:f0:ed: 92:48:0a:a7:b1:de:87:95:66:20:cb:d6:bc:0b:3e:23:d2:87: 3f:0f:cb:3f:97:ba:a4:9a:98:02:9d:6e:5a:79:f1:c5:23:99: 8f:ed:c8:e8:d6:b6:ee:c1:00:40:4c:fe:cf:aa:ae:de:fb:48: 4c:33:7f:35:f1:de:30:ad:c4:c7:d6:e8:93:de:01:c6:d3:38: 3f:28:83:39:16:ee:e7:c4:8c:01:74:7f:df:26:61:67:c4:40: c7:29:f9:da:4a:d7:09:d6:33:5a:d3:e4:a1:98:37:55:35:ac: fd:2b:1a:7d:92:f8:30:0b:33:81:45:75:1d:44:6f:bf:89:71: b9:15:9f:8b:28:ab:1a:48:8e:1a:16:cf:98:aa:da:11:d3:82: e3:53:fb:01:6f:11:0f:e3:16:ea:43:18:56:63:96:ef:ae:0f: b9:51:af:57:00:31:ad:9d:7d:b8:6b:c8:e1:fe:75:90:f8:47: 4e:28:80:f9:76:ad:be:fb:2a:b2:f0:65:58:c5:af:ef:74:f2: d7:17:bd:de:75:19:9b:dd:f6:22:ef:71:ae:05:b0:8a:4a:18: 7d:62:57:d4:9e:28:91:9f:83:3a:72:7c:e6:83:5b:4e:80:d5: e3:f3:35:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwNDE1MDYwNzU5WhcNMjYwNDIyMDYwNzU5WjAYMRYwFAYD VQQDEw02OWRmMmIzZi05MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+EtPPo9dOegibHmfkrYg8qV6uSkd7wDjXInjrUkny7mOiZQXVaCDNtadPxB eoFvRAGZKMNmk4u0ylqExno2ONItLblFEIdLmBPrEMKb4+sUTiQGTHfv6bn3jfdm WGKBZKkoNTuEyvNW3nYl8a8ieEYymx+XwD24UYnzeMdDI6kLnZ9SNJvt5iEeBy/r t0grDjOPkUR7poB8MERVKNQEEG0BLtufvvmVsE5aFi+PF9d4xr8+7qwRG8OnanCk dfwFliUT3favfN8Y8+SUT7+8SNBvXQSHrRcrdqLYpt9vkYLczDmhC2IEN7yLwmRJ uF/KkSX2OdIU7bwvihbgJpwsswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+WplFq 0soFE62ecvIr6ec66gKMMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHqGFhUWzLGLKyhzMHpxf/DtkkgKp7Heh5VmIMvWvAs+I9KHPw/LP5e6pJqY Ap1uWnnxxSOZj+3I6Na27sEAQEz+z6qu3vtITDN/NfHeMK3Ex9bok94BxtM4PyiD ORbu58SMAXR/3yZhZ8RAxyn52krXCdYzWtPkoZg3VTWs/SsafZL4MAszgUV1HURv v4lxuRWfiyirGkiOGhbPmKraEdOC41P7AW8RD+MW6kMYVmOW764PuVGvVwAxrZ19 uGvI4f51kPhHTiiA+XatvvsqsvBlWMWv73Ty1xe93nUZm932Iu9xrgWwikoYfWJX 1J4okZ+DOnJ85oNbToDV4/M1jw== -----END CERTIFICATE-----Generated at Fri Apr 17 08:04:25 2026 by rpki-client