$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: 9uP5qcdwhWoYM/67fq/oFOvmtZZZ9MIL3BCYPpkUoFY= Subject key identifier: 6A:6D:A5:1C:34:99:41:4B:10:CE:58:B7:C0:C3:9D:75:CA:58:FA:82 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0BD5 Signing time: Thu 16 Apr 2026 18:51:27 +0000 Manifest this update: Thu 16 Apr 2026 18:51:26 +0000 Manifest next update: Thu 23 Apr 2026 18:51:26 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: ADBbOYjAeqKyIjQV3zhBjsWa3UTUnNoWhlvId+OEXMU=) 2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=) 3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Apr 16 18:51:26 2026 GMT Not After : Apr 23 18:51:26 2026 GMT Subject: CN=69e12faf-e353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:05:89:84:43:1c:7e:66:ca:c8:5c:26:79: d9:d2:c5:c4:ef:92:25:4f:19:9f:9e:85:b7:54:73: 9b:10:0d:06:0c:df:a8:5e:82:d4:67:70:97:71:fe: e1:ba:21:12:2b:97:31:d7:f5:7b:67:68:e3:4a:90: 4b:e0:4a:e0:a8:4b:fa:c2:5f:5c:c9:5d:dc:2f:1d: 91:0f:d1:29:9f:cc:83:76:c2:16:06:ea:74:c5:7c: 79:30:23:14:ad:dc:c2:c9:d5:e7:dd:67:40:c7:61: fc:ca:d5:e0:24:c3:4b:f8:f2:a8:10:8e:a8:7a:7a: b1:7f:4c:2c:53:b6:57:41:52:d5:44:ae:4b:bb:ac: 0a:84:98:78:de:72:83:77:0e:c7:87:3a:6f:54:1e: 94:71:ea:a9:d8:11:58:64:a2:15:49:c1:07:c5:c4: bb:99:76:df:64:6f:1e:a1:71:00:3e:ef:20:bf:dc: 86:25:09:54:cd:1c:cb:33:6c:84:6b:57:99:f2:f6: 8e:d1:8a:38:42:f3:b1:13:36:91:9f:1a:d7:3e:a9: 38:e9:57:e7:7c:84:18:47:b3:0f:4a:df:86:97:6b: 28:d9:d5:f6:92:85:f0:ec:18:80:51:46:ba:a0:f9: 81:c2:85:eb:f9:6c:d2:e2:bc:5b:f2:cd:23:7b:fb: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6D:A5:1C:34:99:41:4B:10:CE:58:B7:C0:C3:9D:75:CA:58:FA:82 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3d:53:9a:ac:4d:f0:55:3f:c3:89:20:58:63:f2:bb:74:f3: f2:d4:a2:90:e2:8b:7a:a2:15:f6:62:00:f6:b9:ae:f5:e2:81: f5:98:88:ac:5d:62:b0:7a:02:ab:75:f7:c0:1a:e8:d3:08:72: 55:06:18:75:56:fd:0d:22:de:28:f3:fb:5d:70:f0:2d:2b:23: 26:cb:3a:7f:36:52:92:7c:dd:0b:88:80:8c:e4:9b:80:95:a7: 45:d8:b8:4e:8d:26:be:ef:68:ec:73:9e:25:5a:ad:6f:3c:cc: f5:d8:4b:82:7e:01:f6:7e:f0:f8:51:30:2b:53:5f:ca:a6:78: cc:ba:2e:c2:66:cf:e4:84:8d:7a:9d:fa:eb:21:39:ae:90:cf: ab:37:fd:4e:90:26:34:2f:96:28:4b:13:3a:02:27:c2:80:85: 42:1c:ac:84:4d:6b:f3:36:44:4c:47:24:a8:5f:bb:9f:55:5f: 5e:66:78:e3:04:1b:34:e5:46:41:38:af:e0:d0:05:fd:3d:63: c3:77:c3:82:2a:e0:88:bd:08:b2:65:a5:7d:66:b4:8b:a1:56: f9:18:3c:d7:68:be:18:3c:6f:49:5f:76:02:5b:d6:6f:97:fe: 01:1f:6f:f8:69:05:52:b2:d3:19:09:e6:e4:3e:9a:3f:75:ff: 1b:38:ac:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjYwNDE2MTg1MTI2WhcNMjYwNDIzMTg1MTI2WjAYMRYwFAYD VQQDEw02OWUxMmZhZi1lMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EIFiYRDHH5myshcJnnZ0sXE75IlTxmfnoW3VHObEA0GDN+oXoLUZ3CXcf7h uiESK5cx1/V7Z2jjSpBL4ErgqEv6wl9cyV3cLx2RD9Epn8yDdsIWBup0xXx5MCMU rdzCydXn3WdAx2H8ytXgJMNL+PKoEI6oenqxf0wsU7ZXQVLVRK5Lu6wKhJh43nKD dw7HhzpvVB6Uceqp2BFYZKIVScEHxcS7mXbfZG8eoXEAPu8gv9yGJQlUzRzLM2yE a1eZ8vaO0Yo4QvOxEzaRnxrXPqk46VfnfIQYR7MPSt+Gl2so2dX2koXw7BiAUUa6 oPmBwoXr+WzS4rxb8s0je/vxZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGptpRw0 mUFLEM5Yt8DDnXXKWPqCMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArD1TmqxN8FU/w4kgWGPyu3Tz8tSikOKLeqIV9mIA9rmu9eKB9ZiIrF1isHoC q3X3wBro0whyVQYYdVb9DSLeKPP7XXDwLSsjJss6fzZSknzdC4iAjOSbgJWnRdi4 To0mvu9o7HOeJVqtbzzM9dhLgn4B9n7w+FEwK1NfyqZ4zLouwmbP5ISNep366yE5 rpDPqzf9TpAmNC+WKEsTOgInwoCFQhyshE1r8zZETEckqF+7n1VfXmZ44wQbNOVG QTiv4NAF/T1jw3fDgirgiL0IsmWlfWa0i6FW+Rg812i+GDxvSV92AlvWb5f+AR9v +GkFUrLTGQnm5D6aP3X/Gzisvw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:08:53 2026 by rpki-client