$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json) Hash identifier: d5xLdtEOthYwc/GAkbpr8imrJVlSGrfl3gfimJhKi6g= Subject key identifier: 27:FA:D0:A0:AD:F6:12:28:6C:AA:D9:85:55:78:83:C2:5E:78:9F:9A Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft Manifest number: 0401 Signing time: Fri 17 Apr 2026 00:22:25 +0000 Manifest this update: Fri 17 Apr 2026 00:22:24 +0000 Manifest next update: Fri 24 Apr 2026 00:22:24 +0000 Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: a2r1N/jfXtxV+TC+qA+1OG6z3JMEHadqG4RaiA6JiQI=) 2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: TmJRJHlikih7mVaiGT9Ey8UviADYMdHN3E98cghtS8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Validity Not Before: Apr 17 00:22:24 2026 GMT Not After : Apr 24 00:22:24 2026 GMT Subject: CN=69e17d41-1d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:3c:01:c4:c4:27:f2:55:ab:66:e5:91:c4: 87:b2:9a:2f:de:ae:06:24:20:a0:e3:dc:e5:b5:70: c8:33:90:75:9c:df:35:43:79:bd:c0:f3:20:75:52: 76:23:76:a9:e2:32:1a:c4:7c:90:e0:51:06:74:35: a7:76:53:16:01:de:ec:94:ea:5d:c8:ea:1a:1e:10: 33:30:55:d9:60:b7:14:35:d5:98:f9:0d:8f:5b:f7: 7c:a7:2f:68:51:bf:c9:ae:b2:cb:15:f6:50:7c:38: 44:f7:bf:5b:a9:be:7e:61:14:27:f1:65:31:e0:af: 71:20:6b:ab:39:12:5b:90:4f:ab:53:12:95:32:d5: 2f:66:86:5f:67:b0:60:39:2c:2b:47:3b:c7:12:ff: 1f:6e:e4:bc:10:4d:4c:99:89:e5:d0:ba:cb:60:ac: ab:ec:9e:f4:93:51:c3:ae:e9:fb:b7:61:0c:39:98: 4e:bc:8c:96:cf:98:35:64:5a:37:a8:52:3d:ee:be: 72:40:0b:9b:82:a0:39:ef:05:52:82:43:f3:e9:60: be:fe:60:7d:f6:d7:36:34:2e:2d:0d:93:dd:fa:0c: 22:13:82:99:45:17:d5:85:b0:31:b1:a2:20:4d:6b: b7:24:1d:6d:04:58:f7:cc:81:c4:f1:be:37:39:ec: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FA:D0:A0:AD:F6:12:28:6C:AA:D9:85:55:78:83:C2:5E:78:9F:9A X509v3 Authority Key Identifier: keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2c:b5:4e:eb:46:29:41:99:34:19:d1:44:31:03:2f:a4:67: 15:e7:d2:bf:98:81:7e:cc:d0:c2:b8:a3:7c:f9:88:39:a5:b5: 3f:4d:dc:25:d0:85:d3:f7:5a:f7:49:a5:4c:cd:42:59:eb:d0: da:bb:7c:dc:d1:ea:34:89:7f:8a:b6:f9:0d:a1:ef:56:69:b3: 01:38:58:d4:49:09:1c:67:58:e5:d0:1d:65:55:96:6c:fa:86: cf:d7:35:2b:37:1a:b5:61:32:f5:70:e0:eb:c0:d4:3a:21:1d: 54:a3:28:9f:4b:8e:1d:81:97:16:db:84:5e:9c:cb:63:a1:81: 1f:da:fa:dc:0c:f7:44:82:28:31:ac:e2:5c:02:2f:2e:1d:c1: 29:a1:a6:28:6a:e1:9d:f9:44:da:c6:65:bf:8a:69:9b:c4:9e: d2:6f:42:ea:81:05:a4:ea:44:3d:78:61:60:b8:65:a2:74:b3: 9d:24:b1:e6:5c:10:ea:4c:55:e0:d0:12:7d:05:db:29:99:fa: 3f:cd:9e:1f:0d:5b:0d:5a:05:7d:d0:47:69:fa:5d:f0:e2:69: 8a:9c:f4:bc:7e:a3:0f:67:ef:74:f0:cc:50:33:6b:02:9b:39: 64:db:4e:b3:28:38:ee:ff:b9:c3:04:3e:32:1f:30:d3:b8:d2: ee:b1:9b:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2 MkY2RDgxQkMwHhcNMjYwNDE3MDAyMjI0WhcNMjYwNDI0MDAyMjI0WjAYMRYwFAYD VQQDEw02OWUxN2Q0MS0xZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/88AcTEJ/JVq2blkcSHspov3q4GJCCg49zltXDIM5B1nN81Q3m9wPMgdVJ2 I3ap4jIaxHyQ4FEGdDWndlMWAd7slOpdyOoaHhAzMFXZYLcUNdWY+Q2PW/d8py9o Ub/JrrLLFfZQfDhE979bqb5+YRQn8WUx4K9xIGurORJbkE+rUxKVMtUvZoZfZ7Bg OSwrRzvHEv8fbuS8EE1MmYnl0LrLYKyr7J70k1HDrun7t2EMOZhOvIyWz5g1ZFo3 qFI97r5yQAubgqA57wVSgkPz6WC+/mB99tc2NC4tDZPd+gwiE4KZRRfVhbAxsaIg TWu3JB1tBFj3zIHE8b43OewItQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCf60KCt 9hIobKrZhVV4g8JeeJ+aMB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4 OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy Z1pJUnpwR3FmYzlpOXRnYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiiy1TutGKUGZNBnRRDEDL6RnFefSv5iBfszQwrijfPmIOaW1P03cJdCF0/da 90mlTM1CWevQ2rt83NHqNIl/irb5DaHvVmmzAThY1EkJHGdY5dAdZVWWbPqGz9c1 KzcatWEy9XDg68DUOiEdVKMon0uOHYGXFtuEXpzLY6GBH9r63Az3RIIoMaziXAIv Lh3BKaGmKGrhnflE2sZlv4ppm8Se0m9C6oEFpOpEPXhhYLhlonSznSSx5lwQ6kxV 4NASfQXbKZn6P82eHw1bDVoFfdBHafpd8OJpipz0vH6jD2fvdPDMUDNrAps5ZNtO syg47v+5wwQ+Mh8w07jS7rGbWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:11 2026 by rpki-client