$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: Jp4LzR6CZIkIU3ycWxLvWCc+iYS7aOKh0bUs72donr8= Subject key identifier: 17:A7:67:84:2E:8C:69:3E:6D:4B:AA:D5:59:80:98:01:03:8C:D9:F0 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 354A Signing time: Sat 18 Apr 2026 14:53:18 +0000 Manifest this update: Sat 18 Apr 2026 14:53:17 +0000 Manifest next update: Sat 25 Apr 2026 14:53:17 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: +xJSAbAIokCP3oxLHl9kSCNWMmn+8gA6Pl62tScbZig=) 2: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: 0N8+UfH8NuaA9qjC81UIdofpt+ivc/1OzKhyAWBOmEo=) 3: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 6rBcARPDFtZ25ZUjJ6KXnh4+h4VHUuegYqgFp9CrpCA=) 4: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: 4UFHtr4XeXNnq7KTZknkybZI+zmVWrMYnwFvfLsG+uw=) 5: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: u2Ar2PlNEkyQ2SuYxInhQURzKf5tXQUSrdtG0Brtz4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13696 (0x3580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Apr 18 14:53:17 2026 GMT Not After : Apr 25 14:53:17 2026 GMT Subject: CN=69e39ade-2510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:6e:7f:70:9b:fe:ce:35:b2:8f:95:a3:13: 00:d6:8c:a7:68:4d:17:f8:96:c0:56:72:1c:53:da: cc:ca:49:90:9f:f3:16:fa:c7:27:b7:cb:61:d2:26: 9d:e5:35:07:09:a5:d6:ae:ef:03:3c:86:0c:00:f6: f5:99:3a:96:e0:3c:6e:c2:d6:e2:4e:55:57:37:99: 5b:0d:68:e2:12:3e:55:c4:f7:12:ef:8f:c9:97:16: b1:50:58:cf:eb:bb:b4:e9:51:2a:d5:74:99:0d:a2: a0:9c:d7:25:e0:29:90:43:4b:21:99:87:81:73:43: 47:b9:c6:e4:9d:05:9f:d9:b5:bb:ea:78:cf:ea:9a: 40:72:96:44:83:bc:40:e1:0c:a0:14:b8:12:80:88: 71:03:fe:48:52:0d:f7:ae:d4:26:0b:7c:1e:95:88: d2:aa:98:e4:78:ca:16:bb:c3:5c:2b:88:93:19:75: 00:11:61:e3:6e:7e:9a:3c:56:73:42:98:ea:30:d5: c3:07:87:a8:6b:97:3b:ae:9f:6b:03:05:4e:52:63: 7d:1f:90:d2:0e:4c:4b:eb:7c:9d:94:62:4a:4b:83: 9b:cb:9b:78:9b:81:f9:c3:ea:43:76:12:56:e5:59: 4b:23:da:9b:81:5d:ea:25:6f:58:b7:cd:71:f0:c6: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:67:84:2E:8C:69:3E:6D:4B:AA:D5:59:80:98:01:03:8C:D9:F0 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6e:57:f7:a6:c4:e6:66:4e:b5:ec:ea:b0:03:19:98:73:72: 8e:62:2d:05:cc:12:ba:78:55:d2:e9:d8:90:7b:bd:62:66:4c: 93:d7:69:df:3c:6e:fc:13:a0:85:d5:15:3d:ec:d1:b4:90:71: 37:b2:70:f1:9e:ce:2f:8e:70:7b:09:c0:5a:cb:34:ea:79:0f: ab:3c:8b:24:b1:26:96:9a:b4:90:34:78:9a:70:31:9b:ea:a7: cb:ed:1a:29:36:92:56:ab:04:74:ff:0c:f8:5f:9c:24:10:28: 23:da:a5:72:e5:52:ae:5f:51:6c:78:39:7d:0e:46:07:05:93: bc:07:04:d6:da:75:ec:5a:6c:7b:f0:4b:c6:1b:ba:7e:f8:cc: 70:e7:c7:52:59:37:cf:70:91:fd:f7:85:da:f6:ae:95:c4:4d: db:ab:a6:d1:0d:f8:36:4c:a9:a3:86:b5:47:ef:bd:d4:35:8b: 88:5b:da:8c:32:43:9e:b8:34:b6:da:44:b6:08:57:e8:31:05: 63:61:57:2c:ec:e6:ce:ee:2a:54:8f:99:3b:7f:e0:ac:16:6c: ed:7c:d4:5a:e0:e9:f4:bd:ea:cc:3d:a7:0d:6f:89:6b:b5:15: 95:05:36:ce:a9:8f:53:5f:7b:39:98:04:c4:77:dd:b3:0a:37: c0:c6:e1:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwNDE4MTQ1MzE3WhcNMjYwNDI1MTQ1MzE3WjAYMRYwFAYD VQQDEw02OWUzOWFkZS0yNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/5uf3Cb/s41so+VoxMA1oynaE0X+JbAVnIcU9rMykmQn/MW+scnt8th0iad 5TUHCaXWru8DPIYMAPb1mTqW4DxuwtbiTlVXN5lbDWjiEj5VxPcS74/JlxaxUFjP 67u06VEq1XSZDaKgnNcl4CmQQ0shmYeBc0NHucbknQWf2bW76njP6ppAcpZEg7xA 4QygFLgSgIhxA/5IUg33rtQmC3welYjSqpjkeMoWu8NcK4iTGXUAEWHjbn6aPFZz QpjqMNXDB4eoa5c7rp9rAwVOUmN9H5DSDkxL63ydlGJKS4Oby5t4m4H5w+pDdhJW 5VlLI9qbgV3qJW9Yt81x8MYRzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBenZ4Qu jGk+bUuq1VmAmAEDjNnwMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfG5X96bE5mZOtezqsAMZmHNyjmItBcwSunhV0unYkHu9YmZMk9dp3zxu/BOg hdUVPezRtJBxN7Jw8Z7OL45wewnAWss06nkPqzyLJLEmlpq0kDR4mnAxm+qny+0a KTaSVqsEdP8M+F+cJBAoI9qlcuVSrl9RbHg5fQ5GBwWTvAcE1tp17Fpse/BLxhu6 fvjMcOfHUlk3z3CR/feF2vaulcRN26um0Q34Nkypo4a1R++91DWLiFvajDJDnrg0 ttpEtghX6DEFY2FXLOzmzu4qVI+ZO3/grBZs7XzUWuDp9L3qzD2nDW+Ja7UVlQU2 zqmPU197OZgExHfdswo3wMbhxw== -----END CERTIFICATE-----Generated at Sun Apr 19 09:26:14 2026 by rpki-client