$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: SsH9/XSg0WZi99sABWerLuCcYep5uZUXoPQa+xNzjYM= Subject key identifier: 86:AE:7C:0A:A5:1B:F6:A6:A7:67:45:35:47:A2:3E:E7:B7:59:CE:77 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 01E8 Signing time: Fri 17 Apr 2026 03:12:16 +0000 Manifest this update: Fri 17 Apr 2026 03:12:16 +0000 Manifest next update: Fri 24 Apr 2026 03:12:16 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: 65OzJnVkZjK4fBGiu4pKxhFJ9BiTbqJgJw0Uc8S+B4U=) 2: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: qiDIUEuwMcanplAnkX0trRydukOFcGtNb2ScPdRJPzg=) 3: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: COaMid1PJ7sNLHUQ6+TBJQt8v3jAUBZ7JzL1Rm6+wuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Apr 17 03:12:16 2026 GMT Not After : Apr 24 03:12:16 2026 GMT Subject: CN=69e1a510-6910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:1b:56:75:94:17:29:92:bd:ca:99:c9:37: 51:41:e9:7e:4b:22:bc:52:b5:ee:02:83:84:c5:d3: 85:07:63:98:61:81:14:72:53:36:d8:dc:c2:61:26: 45:13:e9:4c:ef:95:96:7e:61:49:99:9c:52:56:bf: e7:7f:e0:3b:36:99:00:90:7a:d0:88:15:78:be:66: 65:a5:44:a7:05:c7:3f:b4:11:e1:2c:ff:b1:a4:4a: 6b:1f:1f:7b:a5:e4:8a:ef:1c:90:5a:14:81:1c:56: 1e:4a:81:37:b1:2a:17:d1:85:83:f9:97:33:3a:6e: 3d:6a:6e:0a:11:54:46:47:b6:05:b7:4c:fd:9d:bc: ef:15:a7:60:65:d8:af:8e:94:e2:53:98:ec:65:65: 2a:e9:52:54:61:bb:7a:aa:a6:b4:9c:eb:17:df:c8: bc:73:0e:34:2a:95:9b:03:41:34:64:bc:d4:93:44: 63:63:9a:37:20:8e:8c:f3:13:c0:bb:4d:9d:4c:af: 2a:c1:36:b9:02:be:1d:e5:b2:9b:c5:07:b1:ff:a5: 2a:0f:13:8b:50:a7:60:0d:e9:e0:1e:31:a9:41:4d: 24:a3:5b:8f:d7:85:61:48:c1:76:d3:6e:08:bf:bb: 93:26:ba:50:2d:af:98:20:9f:2c:e8:c9:56:95:53: ac:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AE:7C:0A:A5:1B:F6:A6:A7:67:45:35:47:A2:3E:E7:B7:59:CE:77 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:7f:d8:f8:a2:82:00:44:85:1a:5a:e1:e8:5d:e4:0b:19: 14:64:1f:83:d9:fe:20:59:60:ed:b2:08:d0:ce:89:e3:e0:e5: 0d:aa:d3:77:cb:54:72:97:4d:1b:3e:20:d7:52:ed:eb:e3:a9: fb:59:77:4b:67:db:e4:4d:e9:1d:9e:fe:51:31:fd:13:39:ec: 95:45:84:15:e5:20:31:6a:d5:c8:60:58:3e:2a:f2:30:e9:05: b7:0a:21:32:b1:8a:16:2b:70:47:9e:2e:0e:5c:2d:4d:8e:c9: ed:24:d2:58:bd:92:15:45:6a:ec:11:df:84:27:a9:3c:87:6d: 5b:7c:00:38:c2:47:59:29:1f:9a:fd:9b:52:32:2f:48:b7:fb: df:8f:fc:57:bb:4a:8b:9d:e2:a1:9f:cd:d2:79:63:3c:d4:5d: 89:48:dc:6b:5b:db:c0:aa:22:bc:47:a9:2e:65:23:c7:1f:de: 8b:d0:39:dd:bc:10:45:02:f2:83:3d:3f:ea:87:90:e4:e8:6b: 59:e3:c3:b2:3e:60:f3:26:4c:69:5e:4e:df:ab:18:25:04:40: a0:fb:f3:3b:4e:09:f3:2c:68:7b:e3:4d:f3:5f:2e:41:5d:22: f1:af:c9:6b:6e:f5:c0:79:cc:61:7b:65:9b:91:50:50:c7:95: 1c:a9:29:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwNDE3MDMxMjE2WhcNMjYwNDI0MDMxMjE2WjAYMRYwFAYD VQQDEw02OWUxYTUxMC02OTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvAbVnWUFymSvcqZyTdRQel+SyK8UrXuAoOExdOFB2OYYYEUclM22NzCYSZF E+lM75WWfmFJmZxSVr/nf+A7NpkAkHrQiBV4vmZlpUSnBcc/tBHhLP+xpEprHx97 peSK7xyQWhSBHFYeSoE3sSoX0YWD+ZczOm49am4KEVRGR7YFt0z9nbzvFadgZdiv jpTiU5jsZWUq6VJUYbt6qqa0nOsX38i8cw40KpWbA0E0ZLzUk0RjY5o3II6M8xPA u02dTK8qwTa5Ar4d5bKbxQex/6UqDxOLUKdgDengHjGpQU0ko1uP14VhSMF2024I v7uTJrpQLa+YIJ8s6MlWlVOsgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaufAql G/amp2dFNUeiPue3Wc53MB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARDt/2PiiggBEhRpa4ehd5AsZFGQfg9n+IFlg7bII0M6J4+DlDarTd8tUcpdN Gz4g11Lt6+Op+1l3S2fb5E3pHZ7+UTH9EznslUWEFeUgMWrVyGBYPiryMOkFtwoh MrGKFitwR54uDlwtTY7J7STSWL2SFUVq7BHfhCepPIdtW3wAOMJHWSkfmv2bUjIv SLf734/8V7tKi53ioZ/N0nljPNRdiUjca1vbwKoivEepLmUjxx/ei9A53bwQRQLy gz0/6oeQ5OhrWePDsj5g8yZMaV5O36sYJQRAoPvzO04J8yxoe+NN818uQV0i8a/J a271wHnMYXtlm5FQUMeVHKkp4A== -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:47 2026 by rpki-client