$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: LH/zMevdpG9KT8R8FkKa5MsXXoIgG8vqo4CcBGfTif8= Subject key identifier: 7D:86:A6:90:C2:99:ED:4D:DD:BE:48:B2:43:3C:BA:C6:E1:5C:18:1B Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0401 Signing time: Fri 17 Apr 2026 00:25:13 +0000 Manifest this update: Fri 17 Apr 2026 00:25:12 +0000 Manifest next update: Fri 24 Apr 2026 00:25:12 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: bg4cym1N6+YClY4JfGUxgATLCnoRQf1f1mAEKSxVVJ0=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 68w9XoY27nHlUrF1DZKt5CH4xTH8y7IDX4gf6ZSbWdc=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: RbczHDkY+8sVzpWSrDkIgwTXiD6ekKL+fyMLf3ByibE=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: C7ArPIYFNK5A4mOStnsyTHFMTUZf+fChC6QWQfJwx3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Apr 17 00:25:12 2026 GMT Not After : Apr 24 00:25:12 2026 GMT Subject: CN=69e17de9-2ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:28:82:21:9f:87:e0:d0:ae:08:e3:37:e2: a4:93:0f:7d:a4:76:d9:30:f8:b0:c6:49:89:33:a6: c1:9b:a8:8d:9e:4c:c0:83:ab:a5:42:25:cd:11:94: 5a:25:bc:37:d4:78:05:eb:b3:c3:84:e5:bb:39:19: c0:4d:e3:38:f9:b1:13:dd:ac:07:ec:e8:07:49:09: 5d:a8:60:10:88:f0:a0:2a:55:95:37:65:56:7f:80: 0e:d4:0d:41:60:50:7b:6c:f2:dd:f6:95:b5:c7:8c: a4:bc:20:40:27:69:a3:e7:1a:89:d7:e8:48:2e:46: 9d:51:19:c5:ed:2c:8d:c5:e5:20:35:da:64:cc:c9: f3:75:c3:7e:93:10:e3:ad:48:e0:59:b9:b2:51:d8: 6f:c5:42:e4:fa:ba:1d:12:36:71:33:14:c5:50:a1: ae:23:a0:bf:03:1f:76:2f:ac:00:8e:0d:ce:c4:d8: 33:b6:d8:e8:6b:bf:49:a8:1b:89:d2:41:eb:86:83: 88:9c:74:47:c4:f4:17:5a:df:e4:94:78:26:88:41: fc:21:94:d6:a3:8c:4b:ff:a0:3a:93:d7:7b:0f:3d: a4:1f:2a:1d:a0:ad:cf:65:2f:ff:65:72:eb:32:e3: 44:fc:77:96:7f:d6:b1:a2:69:fe:2c:e4:9e:b9:9b: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:86:A6:90:C2:99:ED:4D:DD:BE:48:B2:43:3C:BA:C6:E1:5C:18:1B X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:40:a1:fa:b9:0f:20:36:85:6c:4e:7d:6e:d0:1d:54:3d:aa: 08:05:08:22:9e:0c:5e:09:de:09:34:0b:79:b5:4d:91:48:42: 98:c5:8d:ce:a7:3b:c2:f3:52:d7:a6:4f:04:ef:53:02:6c:03: 92:2a:b6:77:0e:27:30:58:00:69:22:12:2b:26:4d:59:ac:30: 42:22:1f:37:1d:d8:c4:fe:ce:b6:89:dd:39:72:51:06:b3:3a: 6b:39:3e:88:ac:35:fb:8e:e3:b9:88:b8:e7:d4:c3:0d:eb:bd: 29:50:c0:f6:f5:87:e6:19:71:51:84:1a:29:2c:e4:be:aa:ff: 81:3e:14:74:0f:78:4d:51:d9:cc:b0:ab:b5:e1:c3:f0:a1:7e: 5b:01:e5:be:47:fb:d4:1b:7a:f2:12:d2:43:b4:ae:c1:87:dd: 96:90:a0:79:b6:03:3f:79:4a:c5:ce:26:b1:82:31:f8:6e:7a: e9:6f:14:9f:41:f8:46:6d:b5:d1:4d:c8:f7:f2:7b:c7:f0:07: f6:d9:f4:07:f3:c9:33:0e:00:e7:a8:cc:2d:74:65:5b:5b:6a: 5d:d0:54:d9:09:82:7a:60:b9:1c:01:a9:6b:f2:84:48:aa:48: 8d:e2:80:b7:e8:38:2d:c7:7d:dd:7f:e9:e4:71:92:9a:b4:a7: 53:04:09:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwNDE3MDAyNTEyWhcNMjYwNDI0MDAyNTEyWjAYMRYwFAYD VQQDEw02OWUxN2RlOS0yYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZEogiGfh+DQrgjjN+Kkkw99pHbZMPiwxkmJM6bBm6iNnkzAg6ulQiXNEZRa Jbw31HgF67PDhOW7ORnATeM4+bET3awH7OgHSQldqGAQiPCgKlWVN2VWf4AO1A1B YFB7bPLd9pW1x4ykvCBAJ2mj5xqJ1+hILkadURnF7SyNxeUgNdpkzMnzdcN+kxDj rUjgWbmyUdhvxULk+rodEjZxMxTFUKGuI6C/Ax92L6wAjg3OxNgzttjoa79JqBuJ 0kHrhoOInHRHxPQXWt/klHgmiEH8IZTWo4xL/6A6k9d7Dz2kHyodoK3PZS//ZXLr MuNE/HeWf9axomn+LOSeuZv8CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2GppDC me1N3b5IskM8usbhXBgbMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQECh+rkPIDaFbE59btAdVD2qCAUIIp4MXgneCTQLebVNkUhCmMWNzqc7wvNS 16ZPBO9TAmwDkiq2dw4nMFgAaSISKyZNWawwQiIfNx3YxP7OtondOXJRBrM6azk+ iKw1+47juYi459TDDeu9KVDA9vWH5hlxUYQaKSzkvqr/gT4UdA94TVHZzLCrteHD 8KF+WwHlvkf71Bt68hLSQ7SuwYfdlpCgebYDP3lKxc4msYIx+G566W8Un0H4Rm21 0U3I9/J7x/AH9tn0B/PJMw4A56jMLXRlW1tqXdBU2QmCemC5HAGpa/KESKpIjeKA t+g4Lcd93X/p5HGSmrSnUwQJzw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:08 2026 by rpki-client