$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: TX+PI0ENnolMHLJqhNSt8EQ2Nf9gP3NAwvtbsJxiwBk= Subject key identifier: FE:84:78:D4:F3:A1:67:4D:58:22:D5:BA:D1:D1:17:52:78:FB:17:BC Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 34 Signing time: Wed 15 Apr 2026 08:13:29 +0000 Manifest this update: Wed 15 Apr 2026 08:13:29 +0000 Manifest next update: Wed 22 Apr 2026 08:13:29 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: pt3YKe2T/jlOWa07bPcpgxBeoxngf6imk2CSSmt8UAs=) 2: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) 3: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Apr 15 08:13:29 2026 GMT Not After : Apr 22 08:13:29 2026 GMT Subject: CN=69df48a9-b14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:b5:0d:dd:c4:2c:ba:ef:b8:4b:47:a5:af: 0c:54:17:66:a9:aa:b7:b1:2c:1b:b2:80:4c:b5:f9: 13:c0:48:f7:c9:e9:79:26:1a:4d:55:ab:c8:a1:54: da:b2:be:ef:54:8d:a4:72:db:0d:7c:d7:9f:b6:b3: 8a:4b:e7:94:7f:3e:cf:c1:ad:50:56:13:f6:83:5c: 21:bf:b1:e8:35:62:71:b2:ae:fc:37:a8:9d:37:80: c4:12:74:ab:ef:86:09:2b:98:d7:d6:86:0e:35:29: 81:a8:48:2f:a6:79:c3:e5:41:fc:dc:a2:5a:23:49: fd:ea:f7:92:4d:41:ea:db:29:ec:fa:c4:95:d6:85: fb:d6:34:2d:04:58:03:50:a1:81:e0:a8:9f:b4:13: b7:c4:bf:f3:c9:c6:f0:b9:88:9c:b5:3c:9b:ec:5a: c0:55:c6:6e:9a:13:7b:42:e0:04:83:bd:00:21:9a: 30:d3:35:e8:23:8d:c3:7b:be:7f:d9:e6:d4:f2:4b: 05:3b:03:58:11:03:06:f2:11:ed:a2:a2:fe:8f:af: eb:a2:84:85:fd:cc:58:72:88:17:12:b8:e1:fa:ba: 7b:df:bc:c4:db:07:89:82:9d:0e:b4:88:85:4e:19: 2d:25:23:5d:cc:3d:af:7e:c2:5a:de:77:2b:3a:73: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:78:D4:F3:A1:67:4D:58:22:D5:BA:D1:D1:17:52:78:FB:17:BC X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:79:9c:7e:75:2c:d3:83:de:52:0b:15:36:99:d0:0c:cb:ee: f6:f5:5b:fa:63:78:08:39:26:5b:f4:88:9b:23:b3:7b:17:d8: bd:84:b6:33:73:d3:58:63:d0:4a:2d:c4:db:49:a4:d7:5f:0e: fe:52:3a:d4:f3:5e:8e:fb:37:dc:de:b2:6a:a3:2e:4c:51:cf: a3:4b:ac:c8:38:8f:91:bf:7e:69:97:2e:13:95:9d:4d:1f:4f: 6f:f1:f5:a3:bf:ab:8c:79:ad:42:c7:eb:9c:c0:b3:69:99:c2: be:7a:06:dd:ec:de:e8:14:9f:44:f5:7b:f9:ff:01:eb:90:3c: 36:7a:36:28:da:1a:ed:b9:88:95:a1:1b:4d:f0:49:0e:af:13: 8b:26:69:d8:60:b1:28:ff:12:85:3f:47:59:f5:8c:e7:c2:c2: 66:f4:e6:3f:de:80:82:df:c3:a4:77:ea:ce:f2:f8:23:c5:72: 79:8a:30:8f:5e:c1:87:91:ad:44:92:72:83:08:5f:0b:94:94: fd:5b:c5:0e:57:05:cb:2e:9e:48:8b:a2:27:60:01:1a:c5:c0: 29:5f:f7:30:b4:8c:45:50:33:88:30:6d:a0:96:3a:8b:fc:8f: b9:c9:11:2d:36:3b:45:6f:0e:56:d3:2c:da:cb:08:aa:fa:e0: da:dd:2b:19 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoOThFOTk1QkMzQTRGRjJDRDA4QzZFMzU1NEI2NjM3NEI2 Njk3OTI3MDAeFw0yNjA0MTUwODEzMjlaFw0yNjA0MjIwODEzMjlaMBgxFjAUBgNV BAMTDTY5ZGY0OGE5LWIxNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChVrUN3cQsuu+4S0elrwxUF2apqrexLBuygEy1+RPASPfJ6XkmGk1Vq8ihVNqy vu9UjaRy2w1815+2s4pL55R/Ps/BrVBWE/aDXCG/seg1YnGyrvw3qJ03gMQSdKvv hgkrmNfWhg41KYGoSC+mecPlQfzcolojSf3q95JNQerbKez6xJXWhfvWNC0EWANQ oYHgqJ+0E7fEv/PJxvC5iJy1PJvsWsBVxm6aE3tC4ASDvQAhmjDTNegjjcN7vn/Z 5tTySwU7A1gRAwbyEe2iov6Pr+uihIX9zFhyiBcSuOH6unvfvMTbB4mCnQ60iIVO GS0lI13MPa9+wlredys6cxlnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/oR41POh Z01YItW60dEXUnj7F7wwHwYDVR0jBBgwFoAUmOmVvDpP8s0IxuNVS2Y3S2aXknAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0YwRENDREQ0RjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbU9tVnZEcFA4czBJeHVOVlMyWTNTMmFYa25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NUY3L0YwRENDREQ0RjFGMTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMw SXh1TlZTMlkzUzJhWGtuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyeZx+dSzTg95SCxU2mdAMy+729Vv6Y3gIOSZb9IibI7N7F9i9hLYzc9NYY9BK LcTbSaTXXw7+UjrU816O+zfc3rJqoy5MUc+jS6zIOI+Rv35ply4TlZ1NH09v8fWj v6uMea1Cx+ucwLNpmcK+egbd7N7oFJ9E9Xv5/wHrkDw2ejYo2hrtuYiVoRtN8EkO rxOLJmnYYLEo/xKFP0dZ9YznwsJm9OY/3oCC38Okd+rO8vgjxXJ5ijCPXsGHka1E knKDCF8LlJT9W8UOVwXLLp5Ii6InYAEaxcApX/cwtIxFUDOIMG2gljqL/I+5yREt NjtFbw5W0yzaywiq+uDa3SsZ -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:37 2026 by rpki-client