$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: 01xvNX+l3vgJrLlJe0xqmIG714+2DKM1aUTMuSu0SQM= Subject key identifier: 01:46:E0:F3:EE:1A:E3:95:9D:4C:5D:EC:6C:7E:E1:0C:7A:62:CA:45 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 0118 Signing time: Fri 17 Apr 2026 05:34:42 +0000 Manifest this update: Fri 17 Apr 2026 05:34:41 +0000 Manifest next update: Fri 24 Apr 2026 05:34:41 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: qpn5JRGRioSnIbgAq0ZfPOmcfS3VrFfmGyIYuFKOlx0=) 2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=) 3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Apr 17 05:34:41 2026 GMT Not After : Apr 24 05:34:41 2026 GMT Subject: CN=69e1c672-35b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ff:26:03:91:2e:de:71:5f:fa:87:32:48:b7: 48:d5:76:ef:6d:a6:b0:4a:e8:2c:fb:74:ab:97:80: 94:85:47:ed:5d:89:ee:4c:ef:50:47:2c:01:94:c0: b7:7a:f4:f3:61:ee:6f:25:af:b9:2a:f0:ca:c0:24: ae:d9:6e:21:2e:0e:aa:7a:ea:71:61:e7:f8:85:cf: 4a:5d:13:bd:3c:0a:85:6d:7d:d9:d2:c2:9f:ad:d0: dd:43:b3:40:80:75:29:a4:19:d7:07:83:7c:9b:01: 82:3c:78:cc:4e:fc:73:5d:a8:fe:d6:09:27:25:93: ea:35:97:56:3d:66:49:9e:5c:41:68:58:04:8a:76: 6e:b7:f0:ec:7d:53:ae:bf:f1:6a:d7:35:68:db:2c: bf:cd:d7:84:5e:20:3b:63:d8:67:c4:23:cd:d5:45: c4:f0:c3:1b:13:06:3e:71:0b:7f:c9:44:6d:04:f5: 63:4b:1d:21:66:50:cd:b5:d3:46:85:3e:c9:5b:ff: 5a:1b:30:88:be:bd:b7:40:de:42:f3:ec:d2:c6:dc: 6e:ed:26:a5:0a:2b:be:4d:4f:03:af:33:47:d6:84: bd:2a:cd:29:f1:90:1f:9b:0d:24:da:b5:f1:84:ee: 0e:57:71:f2:a2:cd:a4:36:a4:60:64:94:03:71:a0: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:46:E0:F3:EE:1A:E3:95:9D:4C:5D:EC:6C:7E:E1:0C:7A:62:CA:45 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:35:66:6a:86:f4:16:3e:f5:41:57:63:d0:e6:53:1c:e6:7f: cb:ef:34:0e:d3:83:06:bd:f6:12:c3:de:24:85:b1:dc:f6:41: 94:e6:2b:d6:65:00:d2:84:14:e2:15:06:9d:78:97:8e:c5:f0: 98:d7:7f:df:64:52:ad:61:af:c7:96:52:92:4f:ae:f9:ed:f4: 47:99:0c:99:e5:80:be:e5:c3:e5:45:2d:83:c6:1b:a8:8d:b2: 5e:2a:08:b8:cc:a4:3a:94:38:fe:1d:60:44:f0:1c:3a:72:b4: 59:a8:78:7e:0e:7b:1d:70:70:03:83:46:eb:81:11:4a:c5:15: be:76:dc:af:1d:ed:0a:b4:9e:b7:4c:40:5e:5a:a0:1f:a9:a5: 86:33:09:a3:37:39:1d:22:78:54:58:ba:18:69:d3:27:72:30: 4a:c4:30:fe:8d:48:a0:32:bf:6e:25:58:8c:95:c3:cd:d6:26: a4:f6:61:df:fd:99:85:70:37:e8:74:0a:01:6c:13:44:12:e0: d9:e4:cd:dd:b6:e4:9c:95:30:ae:be:9b:aa:e2:de:7b:95:73: 3f:ef:96:ab:20:48:2b:07:07:91:0e:e9:82:ed:bf:09:bf:10: 9b:34:c5:1a:7d:a4:a9:0b:0d:d5:4b:78:bd:f6:cb:5e:81:4d: 84:53:9a:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYwNDE3MDUzNDQxWhcNMjYwNDI0MDUzNDQxWjAYMRYwFAYD VQQDEw02OWUxYzY3Mi0zNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9P8mA5Eu3nFf+ocySLdI1XbvbaawSugs+3Srl4CUhUftXYnuTO9QRywBlMC3 evTzYe5vJa+5KvDKwCSu2W4hLg6qeupxYef4hc9KXRO9PAqFbX3Z0sKfrdDdQ7NA gHUppBnXB4N8mwGCPHjMTvxzXaj+1gknJZPqNZdWPWZJnlxBaFgEinZut/DsfVOu v/Fq1zVo2yy/zdeEXiA7Y9hnxCPN1UXE8MMbEwY+cQt/yURtBPVjSx0hZlDNtdNG hT7JW/9aGzCIvr23QN5C8+zSxtxu7SalCiu+TU8DrzNH1oS9Ks0p8ZAfmw0k2rXx hO4OV3Hyos2kNqRgZJQDcaBazQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFG4PPu GuOVnUxd7Gx+4Qx6YspFMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhjVmaob0Fj71QVdj0OZTHOZ/y+80DtODBr32EsPeJIWx3PZBlOYr1mUA0oQU 4hUGnXiXjsXwmNd/32RSrWGvx5ZSkk+u+e30R5kMmeWAvuXD5UUtg8YbqI2yXioI uMykOpQ4/h1gRPAcOnK0Wah4fg57HXBwA4NG64ERSsUVvnbcrx3tCrSet0xAXlqg H6mlhjMJozc5HSJ4VFi6GGnTJ3IwSsQw/o1IoDK/biVYjJXDzdYmpPZh3/2ZhXA3 6HQKAWwTRBLg2eTN3bbknJUwrr6bquLee5VzP++WqyBIKwcHkQ7pgu2/Cb8QmzTF Gn2kqQsN1Ut4vfbLXoFNhFOaqw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:00:29 2026 by rpki-client