$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: lvo1/0YJH7miE5sHrPWC3tIaKKnQjZ6Zmygcs1xg/to= Subject key identifier: 29:9C:55:C2:DB:BF:38:5A:5C:2E:32:47:3D:C2:4A:2B:5A:0D:44:9C Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 08FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 08F1 Signing time: Thu 16 Apr 2026 20:14:42 +0000 Manifest this update: Thu 16 Apr 2026 20:14:41 +0000 Manifest next update: Thu 23 Apr 2026 20:14:41 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: IQEG72bjIok/DL1BtuhYgI8NpSQj1tAjhPweOSzZ/DE=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: 4jcjYW/0FMetLdx19LfkYx1V1hLHWxOLQGODOyvAQC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Apr 16 20:14:41 2026 GMT Not After : Apr 23 20:14:41 2026 GMT Subject: CN=69e14332-230f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:66:07:f2:f3:9e:c6:54:7b:d0:f2:06:00: c3:1f:eb:6c:09:44:c8:cd:e3:07:31:3f:3a:ab:a5: a3:24:86:9e:c1:98:71:f6:06:5e:93:5f:d7:e5:b9: be:b9:c0:94:25:9d:d3:0f:0e:4b:1f:3d:ca:eb:34: 02:00:3e:a9:8b:be:80:f3:e4:7e:dd:94:7f:c6:a6: 96:e2:5c:ba:b4:c5:5b:e2:2c:fc:f4:05:dd:35:7f: 61:c2:0c:f0:f7:55:64:44:6d:1b:26:c8:fa:e3:3b: 9e:ff:7a:25:cb:3b:05:36:8f:92:02:77:6e:76:a4: 58:6b:ae:42:65:d1:9d:7b:32:d5:19:81:34:88:6e: 1e:75:5d:ac:2c:f1:2e:e0:81:ed:be:34:e3:67:c9: ec:f0:33:19:08:72:af:1b:c2:a9:e9:17:a5:6d:4a: df:4c:b7:0a:25:c0:83:a5:0c:03:c2:f0:99:c0:72: b6:84:58:8f:ed:bc:79:63:40:5b:8b:7f:3a:69:60: da:87:df:ac:97:82:13:b2:9e:1c:4d:d6:79:60:35: 6f:3a:e8:38:de:57:b4:58:e3:de:b8:ba:97:3c:90: 80:22:f5:2c:6a:23:fa:62:45:7a:77:58:48:4d:9e: 4e:7e:41:5e:e7:0a:86:a1:05:0a:d9:a7:14:f3:66: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:55:C2:DB:BF:38:5A:5C:2E:32:47:3D:C2:4A:2B:5A:0D:44:9C X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d8:18:08:65:11:b1:6b:e1:b4:5b:a6:96:72:15:66:6f:3f: 0e:fb:4e:70:89:79:7b:71:70:e6:0e:23:f6:e1:24:d3:25:fd: 8b:61:04:b0:bb:2e:54:1d:9f:ec:56:29:d0:74:d8:c9:a6:4a: 02:ba:db:42:04:cd:52:80:e8:36:2f:9f:13:3f:f8:8f:ba:f1: 97:61:20:a9:7a:1e:51:88:e5:5e:d6:3f:5a:b7:3b:fb:4d:9c: 1e:2b:0d:6b:e7:fe:ad:fe:92:c3:1b:50:94:95:eb:50:4b:8c: 3d:6a:7f:e4:0e:a1:35:1a:35:e1:a9:f4:ca:14:01:3f:d2:82: 89:ab:43:69:b2:d2:50:f8:22:6f:71:a7:e6:67:ce:8d:0c:00: 0c:b5:1b:29:43:56:a0:7b:d2:ef:b0:56:21:fb:b9:d7:ad:8f: 08:80:31:4f:11:3f:50:b4:f9:79:26:c4:97:08:bf:77:32:ee: 8f:a8:93:6e:dc:38:38:fa:87:6b:2d:7e:bb:de:df:21:6c:e9: 72:86:9d:6c:f7:7e:23:94:97:85:49:f6:52:ba:24:b4:02:b2: 70:79:11:b6:97:37:7c:c6:fe:49:6c:a4:84:13:b4:1e:b3:29: dd:41:83:93:c5:3c:52:94:ea:a1:77:8b:e3:89:7a:8c:43:2a: 49:69:17:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjYwNDE2MjAxNDQxWhcNMjYwNDIzMjAxNDQxWjAYMRYwFAYD VQQDEw02OWUxNDMzMi0yMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6hmB/LznsZUe9DyBgDDH+tsCUTIzeMHMT86q6WjJIaewZhx9gZek1/X5bm+ ucCUJZ3TDw5LHz3K6zQCAD6pi76A8+R+3ZR/xqaW4ly6tMVb4iz89AXdNX9hwgzw 91VkRG0bJsj64zue/3olyzsFNo+SAndudqRYa65CZdGdezLVGYE0iG4edV2sLPEu 4IHtvjTjZ8ns8DMZCHKvG8Kp6RelbUrfTLcKJcCDpQwDwvCZwHK2hFiP7bx5Y0Bb i386aWDah9+sl4ITsp4cTdZ5YDVvOug43le0WOPeuLqXPJCAIvUsaiP6YkV6d1hI TZ5OfkFe5wqGoQUK2acU82ZsiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmcVcLb vzhaXC4yRz3CSitaDUScMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEActgYCGURsWvhtFumlnIVZm8/DvtOcIl5e3Fw5g4j9uEk0yX9i2EEsLsuVB2f 7FYp0HTYyaZKArrbQgTNUoDoNi+fEz/4j7rxl2EgqXoeUYjlXtY/Wrc7+02cHisN a+f+rf6SwxtQlJXrUEuMPWp/5A6hNRo14an0yhQBP9KCiatDabLSUPgib3Gn5mfO jQwADLUbKUNWoHvS77BWIfu5162PCIAxTxE/ULT5eSbElwi/dzLuj6iTbtw4OPqH ay1+u97fIWzpcoadbPd+I5SXhUn2UroktAKycHkRtpc3fMb+SWykhBO0HrMp3UGD k8U8UpTqoXeL44l6jEMqSWkXQQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:34:40 2026 by rpki-client