$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: EAN9OuE3oHi1BOqZrxVQykwpxk+LKHYCaxNvn+9eQyQ= Subject key identifier: B7:45:F5:90:AE:19:C8:FD:05:4C:47:51:E3:E7:5B:A3:88:84:6A:6D Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 356E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 354F Signing time: Thu 16 Apr 2026 14:30:32 +0000 Manifest this update: Thu 16 Apr 2026 14:30:32 +0000 Manifest next update: Thu 23 Apr 2026 14:30:32 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: UHqmsaBO3GDgoRFwtM1k0zg+R4aHIbkTXFJzafIOm1U=) 2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: 99YygClo0kB3JyoGQXR3g3LXUoBxw1KUF7KrE+OpztE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13678 (0x356e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Apr 16 14:30:32 2026 GMT Not After : Apr 23 14:30:32 2026 GMT Subject: CN=69e0f288-01ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:c6:79:3b:86:ab:87:37:54:ec:35:fb:af: 00:f7:d4:32:8c:90:9b:7c:ef:f0:4b:2f:1b:d0:16: 36:c2:6e:5d:c3:0e:67:3b:a1:51:b4:32:72:ef:db: 44:52:72:f6:94:b4:09:57:cb:2f:88:bc:96:42:27: f8:28:38:50:f2:10:65:48:ec:58:73:13:5c:2c:f1: e9:66:4d:6e:e8:88:ad:10:63:14:76:f1:27:ab:64: 97:9b:7a:12:fb:f1:43:33:cf:37:28:1c:89:2c:a3: ef:ea:c6:de:8b:2d:8c:15:c7:95:26:82:0c:3d:91: 81:04:ce:5a:d5:38:1b:41:60:b0:62:01:59:f4:9d: be:11:2c:8b:18:87:46:02:e1:88:1d:4b:73:3b:94: f3:01:d6:ff:8e:65:4b:c3:1c:77:e0:e1:9c:c9:79: f2:0b:87:cf:f9:50:2d:f9:1a:89:f3:3a:43:0b:25: 41:93:95:d1:07:c1:f7:74:d5:2d:49:4c:7a:4a:96: 9d:2c:7f:03:fd:1a:a5:a6:b3:ce:6b:bd:58:6f:86: 5d:cf:c5:18:74:a0:d7:36:72:e3:ab:f2:ef:b5:59: 66:b9:9b:7e:98:54:03:3b:c1:73:89:38:0d:97:b7: 21:27:63:5c:4e:07:32:f7:8c:8c:d3:f8:91:9f:56: a2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:F5:90:AE:19:C8:FD:05:4C:47:51:E3:E7:5B:A3:88:84:6A:6D X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:bd:d4:15:4f:2a:c6:04:a4:5d:f8:ad:14:31:d0:f5:13:93: d0:3e:34:2b:38:94:fe:d1:27:92:ee:22:72:37:44:8b:36:fa: 42:40:3c:49:79:af:18:6f:12:78:58:f5:92:9e:13:cc:f1:b6: 6f:7d:1a:1a:6a:cd:01:77:92:df:e7:90:b8:26:4f:8f:8f:af: 68:81:e2:b3:5c:5b:08:ed:36:1e:d4:ed:50:4c:d6:38:07:ff: 74:16:4f:8a:b2:65:f4:bb:91:74:21:23:e3:23:67:2f:d1:e1: 46:83:ba:e5:cb:7a:b1:66:5c:8e:a9:11:14:ee:05:88:f5:7c: 8c:f7:64:05:2c:70:60:9a:83:09:c4:58:73:14:53:2a:c2:20: ba:ea:cb:92:91:04:be:7a:e0:60:59:d2:1c:9c:e3:d2:e9:40: a4:57:00:69:20:9d:23:15:d9:9c:c2:c5:ed:32:ff:73:64:ea: 9b:89:ec:b4:67:54:48:ac:e4:70:2a:5b:14:8f:fe:60:20:f1: e4:d2:de:03:03:43:4d:17:52:d4:fa:31:63:d4:2b:e7:6b:f1: d9:95:a7:bb:d4:83:2c:3c:2e:5c:b2:d0:b0:b7:36:60:e7:86: 6a:0d:ac:99:c7:c1:ba:53:3f:80:90:4d:45:5b:a2:b7:94:29: 54:bf:c4:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwNDE2MTQzMDMyWhcNMjYwNDIzMTQzMDMyWjAYMRYwFAYD VQQDEw02OWUwZjI4OC0wMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjbGeTuGq4c3VOw1+68A99QyjJCbfO/wSy8b0BY2wm5dww5nO6FRtDJy79tE UnL2lLQJV8sviLyWQif4KDhQ8hBlSOxYcxNcLPHpZk1u6IitEGMUdvEnq2SXm3oS +/FDM883KByJLKPv6sbeiy2MFceVJoIMPZGBBM5a1TgbQWCwYgFZ9J2+ESyLGIdG AuGIHUtzO5TzAdb/jmVLwxx34OGcyXnyC4fP+VAt+RqJ8zpDCyVBk5XRB8H3dNUt SUx6SpadLH8D/RqlprPOa71Yb4Zdz8UYdKDXNnLjq/LvtVlmuZt+mFQDO8FziTgN l7chJ2NcTgcy94yM0/iRn1aiMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdF9ZCu Gcj9BUxHUePnW6OIhGptMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABr3UFU8qxgSkXfitFDHQ9ROT0D40KziU/tEnku4icjdEizb6QkA8SXmvGG8S eFj1kp4TzPG2b30aGmrNAXeS3+eQuCZPj4+vaIHis1xbCO02HtTtUEzWOAf/dBZP irJl9LuRdCEj4yNnL9HhRoO65ct6sWZcjqkRFO4FiPV8jPdkBSxwYJqDCcRYcxRT KsIguurLkpEEvnrgYFnSHJzj0ulApFcAaSCdIxXZnMLF7TL/c2Tqm4nstGdUSKzk cCpbFI/+YCDx5NLeAwNDTRdS1PoxY9Qr52vx2ZWnu9SDLDwuXLLQsLc2YOeGag2s mcfBulM/gJBNRVuit5QpVL/E+A== -----END CERTIFICATE-----Generated at Fri Apr 17 18:03:39 2026 by rpki-client