$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: /Y/s/DGMTjbKozhMfZ1G3BLwY5veGrOeOJKj43TO5Ro= Subject key identifier: 93:D9:38:5C:3C:77:69:B7:30:ED:9C:CA:13:BF:83:70:67:5D:65:72 Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 01AD Signing time: Sun 19 Apr 2026 03:49:40 +0000 Manifest this update: Sun 19 Apr 2026 03:49:39 +0000 Manifest next update: Sun 26 Apr 2026 03:49:39 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: sKRz5v5NMkwtecSQvfHuUunIFcSSS31aeYTNlOItxfg=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Apr 19 03:49:39 2026 GMT Not After : Apr 26 03:49:39 2026 GMT Subject: CN=69e450d4-b4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:42:02:0d:c1:e6:59:e8:ee:10:e1:73:a4: 2f:96:65:df:cc:a5:c4:14:70:a1:7f:f1:e9:f7:c1: 68:b5:65:c2:e6:ce:aa:da:93:8e:c8:f7:9b:60:1f: 0a:ad:2c:0a:d9:ed:8a:56:d5:27:65:14:f4:67:d7: 48:00:e8:bd:a6:4f:6a:a3:93:e9:f6:f9:de:b8:0a: 52:84:22:c1:26:35:08:6b:4d:34:bf:94:d5:8a:98: da:10:f5:e2:60:38:f5:f8:e0:9f:66:8c:d6:df:d7: 14:93:98:cc:f7:dc:36:19:48:96:b2:29:be:c0:56: f2:c9:56:a2:5c:24:37:e6:79:17:36:bf:bc:9d:e4: e8:1c:40:bf:c2:a2:47:02:62:09:68:ea:ee:0a:71: 78:ae:56:5b:5f:a1:4e:ab:20:1b:39:5c:e6:39:5e: e4:6f:fe:1a:aa:5b:8c:5a:6f:b2:b4:32:5f:1e:ca: a1:4a:43:73:d3:34:20:9d:b1:de:01:3d:b0:18:54: c1:00:1d:a1:8d:d4:af:b9:b5:a2:61:ea:91:b7:a2: 64:eb:7e:7f:3e:19:3b:2d:ad:18:1c:44:40:70:76: 47:c6:c3:a5:9f:e2:eb:cf:ae:fa:8c:f3:fa:97:fa: f8:3f:3a:77:25:57:83:37:87:37:ba:8c:f9:7f:3a: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:38:5C:3C:77:69:B7:30:ED:9C:CA:13:BF:83:70:67:5D:65:72 X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:19:e3:da:92:c2:33:90:78:b8:b9:31:10:00:72:9c:81:1a: c7:25:0d:04:46:31:d4:e7:b2:62:2e:d4:e1:41:d6:30:d5:c9: 81:b2:61:56:6f:aa:cb:fd:cc:06:fa:35:4f:1e:12:4e:13:4d: e2:05:ee:9d:7e:25:fa:53:ae:94:59:63:e2:11:85:21:49:1a: 32:19:ba:e5:ae:78:99:b6:8b:a8:60:a9:2c:e7:2a:ee:3b:80: 85:9e:4a:84:16:f4:5f:91:2a:2c:16:21:54:d2:67:c2:7d:28: 9d:cd:8c:6e:2c:33:db:19:4c:25:24:84:bf:2a:00:71:1a:0f: c8:35:01:bc:ff:b2:cb:c6:4b:c8:ed:fd:59:3b:4b:78:1d:eb: f1:27:5e:20:8b:07:07:0f:21:96:49:64:0d:ae:1e:39:a8:5d: 76:b5:7a:22:68:60:f2:33:c4:9f:39:3a:55:55:86:3c:ef:f8: 67:13:7d:05:db:c0:dd:cb:70:a7:53:5a:ad:a4:7e:fb:88:c9: a7:ac:1a:ad:30:b1:a8:f7:cc:94:aa:44:89:d0:30:19:cf:ff: 35:23:0c:14:09:cd:ad:d9:a8:08:7d:6c:9f:82:0d:c8:b0:6a: 43:90:83:a9:5a:67:67:e2:17:5e:94:04:76:8c:54:ec:ff:fd: 66:fd:0a:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjYwNDE5MDM0OTM5WhcNMjYwNDI2MDM0OTM5WjAYMRYwFAYD VQQDEw02OWU0NTBkNC1iNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRJCAg3B5lno7hDhc6QvlmXfzKXEFHChf/Hp98FotWXC5s6q2pOOyPebYB8K rSwK2e2KVtUnZRT0Z9dIAOi9pk9qo5Pp9vneuApShCLBJjUIa000v5TVipjaEPXi YDj1+OCfZozW39cUk5jM99w2GUiWsim+wFbyyVaiXCQ35nkXNr+8neToHEC/wqJH AmIJaOruCnF4rlZbX6FOqyAbOVzmOV7kb/4aqluMWm+ytDJfHsqhSkNz0zQgnbHe AT2wGFTBAB2hjdSvubWiYeqRt6Jk635/Phk7La0YHERAcHZHxsOln+Lrz676jPP6 l/r4Pzp3JVeDN4c3uoz5fzpCvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPZOFw8 d2m3MO2cyhO/g3BnXWVyMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuBnj2pLCM5B4uLkxEABynIEaxyUNBEYx1OeyYi7U4UHWMNXJgbJhVm+qy/3M Bvo1Tx4SThNN4gXunX4l+lOulFlj4hGFIUkaMhm65a54mbaLqGCpLOcq7juAhZ5K hBb0X5EqLBYhVNJnwn0onc2Mbiwz2xlMJSSEvyoAcRoPyDUBvP+yy8ZLyO39WTtL eB3r8SdeIIsHBw8hlklkDa4eOahddrV6Imhg8jPEnzk6VVWGPO/4ZxN9BdvA3ctw p1NaraR++4jJp6warTCxqPfMlKpEidAwGc//NSMMFAnNrdmoCH1sn4INyLBqQ5CD qVpnZ+IXXpQEdoxU7P/9Zv0KMw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:43:38 2026 by rpki-client