$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: yYijO+q4wDhAFd0nOxyw591ykGEZlx3jbdftyGKMwto= Subject key identifier: 2D:DD:B3:DC:6F:9A:04:1D:81:F3:0B:67:A2:15:8E:58:66:AF:C5:B7 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 357F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 3549 Signing time: Thu 16 Apr 2026 14:54:09 +0000 Manifest this update: Thu 16 Apr 2026 14:54:09 +0000 Manifest next update: Thu 23 Apr 2026 14:54:09 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: hHQbxUDqPL7ArT7O17pSEuCCrI8jFABpq2yo/HyEu24=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: 4UFHtr4XeXNnq7KTZknkybZI+zmVWrMYnwFvfLsG+uw=) 3: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 6rBcARPDFtZ25ZUjJ6KXnh4+h4VHUuegYqgFp9CrpCA=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: u2Ar2PlNEkyQ2SuYxInhQURzKf5tXQUSrdtG0Brtz4Q=) 5: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: 0N8+UfH8NuaA9qjC81UIdofpt+ivc/1OzKhyAWBOmEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13695 (0x357f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Apr 16 14:54:09 2026 GMT Not After : Apr 23 14:54:09 2026 GMT Subject: CN=69e0f811-1ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:4b:3b:2d:b5:94:b5:8d:a0:f9:be:a0:91: 8a:ad:b5:2a:dd:3f:c4:cb:c0:41:c3:42:46:7c:80: 14:74:01:05:e3:8b:43:fd:80:f5:95:63:9d:55:07: bb:60:3c:41:38:3e:a4:f9:ef:30:47:05:1f:2b:2a: 44:87:85:f4:d6:22:32:19:fb:9e:c6:62:14:73:2a: d2:7f:dc:4b:24:68:f3:b8:b4:24:4c:45:6f:78:21: 98:85:75:fc:d0:ef:79:5b:a0:3e:40:1a:23:5e:3e: 57:3d:3a:d8:f3:3a:bf:b7:39:62:6f:17:80:fa:43: 6f:05:04:78:90:22:f3:aa:33:df:32:9d:76:6e:ff: 6c:fd:10:59:82:28:13:2a:76:ad:5e:ed:fa:71:30: 5e:3f:ea:7e:f5:12:4a:cf:76:7d:e1:9d:ee:78:27: 3b:97:d1:63:42:e9:81:e9:d2:66:0d:d7:62:d6:dd: 6e:b6:3c:29:7a:d3:7f:c1:8a:d1:a5:da:d6:ac:ee: 26:7b:21:5b:e9:8a:d3:f4:fa:ea:44:1a:7e:44:2e: cd:6f:61:5f:71:6c:70:be:fc:e4:ac:2d:fd:cd:2a: d9:47:03:5b:d3:6f:cc:59:62:6e:39:bc:af:43:f8: 78:9f:0c:d4:08:87:2a:03:e1:1c:08:e3:2e:f7:7d: 37:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:B3:DC:6F:9A:04:1D:81:F3:0B:67:A2:15:8E:58:66:AF:C5:B7 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:96:e6:64:dc:4b:d1:6e:90:a4:f8:4f:58:67:a4:40:8f:d9: dc:c0:e4:d4:e4:b2:55:61:27:7e:54:42:e2:a5:65:9d:20:0c: 03:64:ec:ca:88:bc:48:9a:a6:38:99:a5:d4:69:fe:e8:ff:56: c3:c6:05:c8:3f:3f:77:c6:8f:a4:8a:a8:db:c5:6b:30:ce:6e: af:a6:ea:eb:68:54:d3:5c:4d:79:fe:da:bb:b7:ed:64:f2:e0: c7:c7:41:a4:6e:18:33:cf:61:b9:62:35:53:4a:9c:70:59:86: 49:71:c3:d4:7f:f7:74:13:e0:2e:05:8c:5b:03:2f:6c:9e:4c: 08:46:82:b9:d6:f8:9d:05:36:6d:89:ca:30:d9:c3:83:91:6a: b9:0e:1a:b3:49:c4:38:4d:55:f2:76:72:dc:43:50:d4:57:3d: 5c:d9:ae:e0:8c:e3:5d:06:e3:da:74:8d:5f:ff:a4:94:ae:23: 84:88:a5:7c:31:55:b4:6a:8f:ae:6f:8f:62:86:d1:80:5d:bb: 27:c0:09:f2:95:3c:09:cc:7c:1e:44:9a:22:38:dd:9e:63:e3: 2b:bb:83:f7:5b:0c:53:bb:25:5a:66:31:ad:b2:08:87:7b:21: 61:21:79:57:99:ab:26:ad:da:06:9e:b8:92:8c:2b:67:7f:5e: 74:a4:51:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwNDE2MTQ1NDA5WhcNMjYwNDIzMTQ1NDA5WjAYMRYwFAYD VQQDEw02OWUwZjgxMS0xY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxBLOy21lLWNoPm+oJGKrbUq3T/Ey8BBw0JGfIAUdAEF44tD/YD1lWOdVQe7 YDxBOD6k+e8wRwUfKypEh4X01iIyGfuexmIUcyrSf9xLJGjzuLQkTEVveCGYhXX8 0O95W6A+QBojXj5XPTrY8zq/tzlibxeA+kNvBQR4kCLzqjPfMp12bv9s/RBZgigT KnatXu36cTBeP+p+9RJKz3Z94Z3ueCc7l9FjQumB6dJmDddi1t1utjwpetN/wYrR pdrWrO4meyFb6YrT9PrqRBp+RC7Nb2FfcWxwvvzkrC39zSrZRwNb02/MWWJuObyv Q/h4nwzUCIcqA+EcCOMu9303vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3ds9xv mgQdgfMLZ6IVjlhmr8W3MB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIJbmZNxL0W6QpPhPWGekQI/Z3MDk1OSyVWEnflRC4qVlnSAMA2Tsyoi8SJqm OJml1Gn+6P9Ww8YFyD8/d8aPpIqo28VrMM5ur6bq62hU01xNef7au7ftZPLgx8dB pG4YM89huWI1U0qccFmGSXHD1H/3dBPgLgWMWwMvbJ5MCEaCudb4nQU2bYnKMNnD g5FquQ4as0nEOE1V8nZy3ENQ1Fc9XNmu4IzjXQbj2nSNX/+klK4jhIilfDFVtGqP rm+PYobRgF27J8AJ8pU8Ccx8HkSaIjjdnmPjK7uD91sMU7slWmYxrbIIh3shYSF5 V5mrJq3aBp64kowrZ39edKRRyA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:28:34 2026 by rpki-client