$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft File: sRoiVto9XbOPPn6bWct0YsnnsqY.mft (raw, json) Hash identifier: CCGPjSAdBuqisir0NMgdw9d66Wlbjcy+2/FSa56KIE4= Subject key identifier: 43:63:E6:CF:04:B4:33:F0:7B:E8:81:6D:D5:21:50:95:FD:92:4A:1D Authority key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6 Certificate issuer: /CN=A91CCCF4/serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft Manifest number: 36 Signing time: Fri 17 Apr 2026 08:19:14 +0000 Manifest this update: Fri 17 Apr 2026 08:19:14 +0000 Manifest next update: Fri 24 Apr 2026 08:19:14 +0000 Files and hashes: 1: sRoiVto9XbOPPn6bWct0YsnnsqY.crl (hash: YjBj6Nrhf8RAwuvj4yqeYsmGedosZDnbT0bu2XVyEdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6 Validity Not Before: Apr 17 08:19:14 2026 GMT Not After : Apr 24 08:19:14 2026 GMT Subject: CN=69e1ed02-b041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:8e:2d:1d:2c:f1:2e:ae:4e:64:fd:81:5f: f7:72:e9:46:9a:33:60:fb:c7:b4:47:fb:46:46:9d: b9:07:db:04:6c:3e:95:16:d0:39:60:21:6a:a3:08: 89:e6:0e:99:e0:de:cf:c9:7a:9e:67:4c:2f:6f:98: 88:7f:58:d8:e0:31:52:dd:c7:58:ec:17:77:56:63: 03:f3:2e:02:a4:a8:2c:f9:30:19:4f:83:23:2f:0b: 94:7a:28:f1:22:ef:7a:05:7e:b3:0c:3a:39:7b:e6: a4:66:22:e8:1a:f9:3a:1e:f7:3e:b3:e8:e3:4c:78: 70:59:ac:20:f7:8e:b8:99:89:b5:13:03:d2:1f:ad: 97:5c:21:1d:4f:a4:09:38:e8:dd:48:09:0d:88:75: 05:a6:fa:03:72:e1:ad:b2:05:39:e5:59:84:0a:1d: 72:b9:e4:90:26:ae:eb:b1:6b:ae:13:13:2b:c1:fe: 16:32:97:bc:fa:29:b4:af:99:21:3b:ff:bb:41:a5: 34:e1:fc:4f:f0:6f:a0:1a:d5:0e:aa:53:50:3e:d5: 24:ba:9a:57:96:01:aa:c3:4d:9b:97:95:a3:20:c9: 14:35:ba:a4:db:d3:70:01:22:93:63:14:f4:57:61: 63:80:17:9c:20:72:41:4b:79:aa:c7:34:f2:a7:e0: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:E6:CF:04:B4:33:F0:7B:E8:81:6D:D5:21:50:95:FD:92:4A:1D X509v3 Authority Key Identifier: keyid:B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f6:b5:29:10:43:59:92:4c:59:56:39:ea:85:4a:19:d3:7c: a4:00:57:91:4e:d2:37:9f:50:a6:b4:70:4c:fd:79:2b:e3:46: af:93:eb:63:9c:f2:0f:c9:a1:bc:1d:cb:f8:33:42:74:b3:75: 0d:7f:84:f8:c4:ca:86:24:c0:e1:68:05:c2:f0:f9:c1:fc:01: bc:5a:43:ca:9f:42:52:95:2f:5b:91:08:92:19:41:39:c3:8d: 38:15:ae:fd:9b:9b:cf:02:cf:05:b2:a1:c7:74:0d:83:04:80: 21:ee:54:53:f0:f4:92:1a:0c:7e:5e:18:f4:52:6f:76:54:2b: 45:29:89:96:c8:2f:e4:14:bc:0f:4e:8e:59:74:42:ac:92:62: 55:89:65:96:70:d4:e2:17:bd:5b:8d:cd:8d:fb:9a:c0:11:4d: c4:25:85:fa:4c:c4:8c:8e:6b:9e:41:2c:ad:16:cb:cd:48:bb: c9:f8:b6:5d:af:dd:ed:dc:6a:54:58:b7:0e:a6:fb:13:7f:ea: fb:77:f1:96:c9:dd:d5:b4:f5:76:f8:56:ce:f0:69:b9:a3:13: d7:7c:27:42:c2:84:c4:c2:ef:25:3f:4c:8b:29:f8:3f:d0:61: 8f:7e:28:0b:1f:a8:4c:8b:9e:d2:54:53:c6:cb:eb:29:5f:c3: d0:bd:49:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0NGNDExMC8GA1UEBRMoQjExQTIyNTZEQTNENURCMzhGM0U3RTlCNTlDQjc0NjJD OUU3QjJBNjAeFw0yNjA0MTcwODE5MTRaFw0yNjA0MjQwODE5MTRaMBgxFjAUBgNV BAMTDTY5ZTFlZDAyLWIwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5m44tHSzxLq5OZP2BX/dy6UaaM2D7x7RH+0ZGnbkH2wRsPpUW0DlgIWqjCInm Dpng3s/Jep5nTC9vmIh/WNjgMVLdx1jsF3dWYwPzLgKkqCz5MBlPgyMvC5R6KPEi 73oFfrMMOjl75qRmIuga+Toe9z6z6ONMeHBZrCD3jriZibUTA9IfrZdcIR1PpAk4 6N1ICQ2IdQWm+gNy4a2yBTnlWYQKHXK55JAmruuxa64TEyvB/hYyl7z6KbSvmSE7 /7tBpTTh/E/wb6Aa1Q6qU1A+1SS6mleWAarDTZuXlaMgyRQ1uqTb03ABIpNjFPRX YWOAF5wgckFLearHNPKn4CRbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQ2PmzwS0 M/B76IFt1SFQlf2SSh0wHwYDVR0jBBgwFoAUsRoiVto9XbOPPn6bWct0YsnnsqYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQ0Y0L0EyNDQxQkQ4RjBG MTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85WGJPUFBuNmJXY3QwWXNubnNx WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1JvaVZ0bzlYYk9QUG42YldjdDBZc25uc3FZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND Q0Y0L0EyNDQxQkQ4RjBGMTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85WGJP UFBuNmJXY3QwWXNubnNxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAu9rUpEENZkkxZVjnqhUoZ03ykAFeRTtI3n1CmtHBM/Xkr40avk+tjnPIPyaG8 Hcv4M0J0s3UNf4T4xMqGJMDhaAXC8PnB/AG8WkPKn0JSlS9bkQiSGUE5w404Fa79 m5vPAs8FsqHHdA2DBIAh7lRT8PSSGgx+Xhj0Um92VCtFKYmWyC/kFLwPTo5ZdEKs kmJViWWWcNTiF71bjc2N+5rAEU3EJYX6TMSMjmueQSytFsvNSLvJ+LZdr93t3GpU WLcOpvsTf+r7d/GWyd3VtPV2+FbO8Gm5oxPXfCdCwoTEwu8lP0yLKfg/0GGPfigL H6hMi57SVFPGy+spX8PQvUm7 -----END CERTIFICATE-----Generated at Fri Apr 17 15:20:05 2026 by rpki-client