$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json) Hash identifier: uujLExwbv0qTh+KWi15S9w90UGtU883fW4fsrBkzYZA= Subject key identifier: 6D:52:DB:61:BB:30:B3:A6:90:FA:9E:C9:86:9A:B3:29:85:A2:E0:6E Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft Manifest number: 88 Signing time: Fri 17 Apr 2026 07:22:24 +0000 Manifest this update: Fri 17 Apr 2026 07:22:24 +0000 Manifest next update: Fri 24 Apr 2026 07:22:24 +0000 Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: DspGYgvOhVze6utDWEYT9cX6Te7q5uyOjwOHRrGgUEM=) 2: F8E93410A85C11F0A2A48E76C4F9AE02.roa (hash: zwjQpeKdJOSFl0zaBPDuSlSa1uw+y3+L/xCcosdfy9o=) 3: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: AQcKmsJt9IJs5jIdeC1sHVoe6SkebbETdV2pwOULpzc=) 4: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: UAqsRf7T5xk/tW0W7gNLXY7xtnRSTJeiphCUdFbB9X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Apr 17 07:22:24 2026 GMT Not After : Apr 24 07:22:24 2026 GMT Subject: CN=69e1dfb0-156c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:c4:00:33:7d:a4:17:1d:a4:fe:1b:f3:14: 13:66:53:6b:e1:f8:3b:7a:6d:00:38:34:4a:63:6c: 39:8a:91:79:3e:2d:95:7f:4b:c4:bf:14:84:cc:95: 3e:76:47:91:a0:3c:62:16:89:44:af:10:5b:3a:66: d4:5b:5a:5f:0b:20:2a:77:70:41:49:3b:04:35:5a: a3:8c:b4:b7:1e:f5:cd:93:60:ed:7b:d5:02:b2:ee: 5b:0f:af:5d:fb:99:a3:80:bf:42:a7:ed:0a:5e:1c: a3:a4:80:ca:ce:ee:f5:91:84:16:6d:1d:98:ad:15: 45:85:bc:95:9c:6e:05:8c:4e:2b:1c:70:5c:f5:78: 2c:03:2a:09:0c:a0:3a:26:85:6c:d1:ea:03:9c:61: 22:47:15:88:50:a3:4a:94:23:56:6b:9c:1a:00:9c: 1d:91:1f:0c:be:d8:32:44:af:ba:79:c1:f1:fb:6d: 64:e8:d9:b4:3c:45:36:9d:30:13:03:fa:a7:c1:98: ef:b3:48:ec:09:06:11:c6:84:66:c0:1a:bc:2e:10: ee:98:c6:ed:84:b7:81:7a:d8:30:6d:e3:59:8e:22: a3:71:65:b9:86:a0:5a:fb:2a:8e:cf:d4:37:43:30: 26:87:e0:dc:88:e7:65:6e:59:d3:07:be:d0:69:d3: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:DB:61:BB:30:B3:A6:90:FA:9E:C9:86:9A:B3:29:85:A2:E0:6E X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:46:98:d3:b6:52:13:f4:7e:82:b4:93:36:09:d2:9d:00:30: a1:5f:11:49:db:87:9a:d6:ca:c3:84:f3:1d:a5:65:02:35:ff: 6b:01:d8:a4:54:0b:b4:df:65:6f:e8:3f:63:d1:d4:e1:36:a1: 49:6f:5f:f0:fa:34:04:06:ed:8f:fc:d7:17:0e:06:24:42:02: 38:9b:b3:7b:2d:7b:20:7c:78:31:70:9b:b4:18:b5:ce:47:e1: 39:7d:eb:ec:a8:6f:a5:e3:0c:c8:47:f0:59:74:42:59:52:91: cf:4d:8d:79:c5:9f:7d:44:c1:1f:8b:5d:2f:4e:41:9c:3e:77: 9c:72:cc:af:78:c7:a9:59:c4:4d:5a:e5:3f:99:a7:95:70:19: eb:6f:96:94:86:a1:5c:81:6d:ab:14:0e:d6:6d:60:e2:bd:0c: 40:3b:37:8c:c0:c2:60:e7:08:bc:36:f7:14:62:51:df:79:02: ce:b5:1a:dc:22:db:59:f3:fd:91:03:3a:48:d6:b6:92:29:3a: 34:d7:b7:bf:09:7d:16:ff:f9:88:4a:b3:4b:8b:f1:ee:06:d6: ba:93:a8:05:45:91:a8:23:c2:c6:45:1c:37:da:f1:51:66:bc: d4:16:b3:20:a2:cc:b7:18:68:27:c4:30:69:15:9f:40:a9:b1: 8f:3b:82:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM1REUxMTAvBgNVBAUTKEE2MTM2RTUwRTk0OThFMDQ5RDBCNEQyRjE4NjdGQTFC MTg5MUM0RUYwHhcNMjYwNDE3MDcyMjI0WhcNMjYwNDI0MDcyMjI0WjAYMRYwFAYD VQQDEw02OWUxZGZiMC0xNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOjEADN9pBcdpP4b8xQTZlNr4fg7em0AODRKY2w5ipF5Pi2Vf0vEvxSEzJU+ dkeRoDxiFolErxBbOmbUW1pfCyAqd3BBSTsENVqjjLS3HvXNk2Dte9UCsu5bD69d +5mjgL9Cp+0KXhyjpIDKzu71kYQWbR2YrRVFhbyVnG4FjE4rHHBc9XgsAyoJDKA6 JoVs0eoDnGEiRxWIUKNKlCNWa5waAJwdkR8MvtgyRK+6ecHx+21k6Nm0PEU2nTAT A/qnwZjvs0jsCQYRxoRmwBq8LhDumMbthLeBetgwbeNZjiKjcWW5hqBa+yqOz9Q3 QzAmh+DciOdlblnTB77QadPoMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1S22G7 MLOmkPqeyYaasymFouBuMB8GA1UdIwQYMBaAFKYTblDpSY4EnQtNLxhn+hsYkcTv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzVERS84NzYyQ0QxQTc0 MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpnU2RDMDB2R0dmNkd4aVJ4 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzVERS84NzYyQ0QxQTc0MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpn U2RDMDB2R0dmNkd4aVJ4TzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFEaY07ZSE/R+grSTNgnSnQAwoV8RSduHmtbKw4TzHaVlAjX/awHYpFQLtN9l b+g/Y9HU4TahSW9f8Po0BAbtj/zXFw4GJEICOJuzey17IHx4MXCbtBi1zkfhOX3r 7KhvpeMMyEfwWXRCWVKRz02NecWffUTBH4tdL05BnD53nHLMr3jHqVnETVrlP5mn lXAZ62+WlIahXIFtqxQO1m1g4r0MQDs3jMDCYOcIvDb3FGJR33kCzrUa3CLbWfP9 kQM6SNa2kik6NNe3vwl9Fv/5iEqzS4vx7gbWupOoBUWRqCPCxkUcN9rxUWa81Baz IKLMtxhoJ8QwaRWfQKmxjzuC7w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:04 2026 by rpki-client