$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: Z0W6UOUmG1e8wklNXctxBByaIv+f3Shj/cpJHa6T+ZU= Subject key identifier: 56:37:4A:F3:6C:12:41:73:F5:B1:11:E1:E6:A8:36:FB:7A:B4:8B:82 Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 2C Signing time: Sun 19 Apr 2026 08:21:03 +0000 Manifest this update: Sun 19 Apr 2026 08:21:02 +0000 Manifest next update: Sun 26 Apr 2026 08:21:02 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: SPiIo6qagRSiUjLffSmqkIgXdgaJjVVGHegOxUjshaY=) 2: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) 3: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: Apr 19 08:21:02 2026 GMT Not After : Apr 26 08:21:02 2026 GMT Subject: CN=69e4906f-b9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:98:ad:b3:71:32:de:71:3b:78:fc:05:c5: 5b:b9:f9:4d:dc:4e:0d:af:f2:50:ab:57:81:31:ac: 5a:f1:ee:2e:c9:3a:d4:27:3a:50:b8:90:a6:71:a3: 02:3e:d0:e0:94:e1:0f:15:d2:bf:d0:6b:62:61:87: a5:cb:92:96:62:6d:90:fc:29:6a:86:21:d3:54:42: e3:d7:03:79:d6:63:ac:f0:d3:37:3a:8e:93:65:d1: a1:4c:18:7a:49:94:ae:cf:3d:2d:57:18:06:f6:6c: a1:5a:f7:23:0b:27:7c:d0:24:82:07:4e:ca:1d:6d: 62:fe:3a:08:7a:ed:6c:15:b7:f8:17:8e:d2:39:dc: 8b:c3:c2:58:58:a2:fe:65:65:27:0e:c1:15:b1:6f: 9a:b1:c4:7c:e6:9d:60:c4:b4:bd:d0:0b:7f:b8:43: 96:08:9d:cb:df:38:7a:1f:04:4e:cd:8d:5a:a3:98: eb:a9:7e:c6:10:b4:e0:8d:ca:59:f2:26:2f:d9:52: b1:bd:6e:e7:bc:06:1b:7d:1b:62:33:02:fe:ab:04: d9:82:df:35:08:b7:68:6d:2e:43:a5:51:ad:e9:69: 51:75:cb:82:ca:57:a2:d7:b9:3f:f4:f8:41:42:2f: 58:7a:30:8b:43:6e:ce:fc:8a:3b:cd:de:29:76:1a: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:37:4A:F3:6C:12:41:73:F5:B1:11:E1:E6:A8:36:FB:7A:B4:8B:82 X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7b:6b:39:ad:6d:97:75:9a:83:cc:db:88:6a:de:5e:c7:14: 93:b3:9a:c6:37:36:fe:50:6d:69:83:07:56:96:4a:14:46:a3: 38:87:11:32:17:f8:84:1c:a3:42:02:86:12:29:5a:56:54:78: cb:b7:d4:9d:6b:ca:95:39:21:50:68:a2:e7:7d:49:80:5f:a9: de:f7:4b:c7:8d:e6:65:1d:06:05:ab:e1:d5:22:9b:ac:cb:cb: 5b:3a:3d:a8:16:e1:01:ce:23:7b:53:f7:aa:c2:08:5f:80:18: 50:dc:2f:94:eb:9d:9e:88:9c:d5:66:6e:ae:3c:c8:7e:0d:19: d7:25:af:69:e0:62:a2:d5:cd:92:63:c0:ed:32:bb:9e:7d:29: ce:30:8b:43:e4:fe:fe:06:b4:26:c2:46:28:57:c9:70:5c:ed: 28:22:91:ad:f1:b0:64:2e:60:3d:f4:fe:fd:55:56:8c:e7:c1: ab:b9:51:32:52:4d:ec:63:05:52:46:85:94:4a:17:c1:25:e8: 68:63:6b:8a:75:ca:a6:82:c3:33:60:e6:60:64:5c:94:7d:48: 30:78:8f:42:a5:fb:35:87:89:c8:5b:5b:70:32:65:75:45:71: 14:08:fc:e1:e2:53:18:44:99:1f:dc:63:85:7b:3e:21:97:ff: 15:b7:27:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3 Q0U4QzczOTAeFw0yNjA0MTkwODIxMDJaFw0yNjA0MjYwODIxMDJaMBgxFjAUBgNV BAMTDTY5ZTQ5MDZmLWI5ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr/pits3Ey3nE7ePwFxVu5+U3cTg2v8lCrV4ExrFrx7i7JOtQnOlC4kKZxowI+ 0OCU4Q8V0r/Qa2Jhh6XLkpZibZD8KWqGIdNUQuPXA3nWY6zw0zc6jpNl0aFMGHpJ lK7PPS1XGAb2bKFa9yMLJ3zQJIIHTsodbWL+Ogh67WwVt/gXjtI53IvDwlhYov5l ZScOwRWxb5qxxHzmnWDEtL3QC3+4Q5YIncvfOHofBE7NjVqjmOupfsYQtOCNylny Ji/ZUrG9bue8Bht9G2IzAv6rBNmC3zUIt2htLkOlUa3paVF1y4LKV6LXuT/0+EFC L1h6MItDbs78ijvN3il2GmIxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVjdK82wS QXP1sRHh5qg2+3q0i4IwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAze2s5rW2XdZqDzNuIat5exxSTs5rGNzb+UG1pgwdWlkoURqM4hxEyF/iEHKNC AoYSKVpWVHjLt9Sda8qVOSFQaKLnfUmAX6ne90vHjeZlHQYFq+HVIpusy8tbOj2o FuEBziN7U/eqwghfgBhQ3C+U652eiJzVZm6uPMh+DRnXJa9p4GKi1c2SY8DtMrue fSnOMItD5P7+BrQmwkYoV8lwXO0oIpGt8bBkLmA99P79VVaM58GruVEyUk3sYwVS RoWUShfBJehoY2uKdcqmgsMzYOZgZFyUfUgweI9Cpfs1h4nIW1twMmV1RXEUCPzh 4lMYRJkf3GOFez4hl/8Vtycf -----END CERTIFICATE-----Generated at Sun Apr 19 11:29:00 2026 by rpki-client