$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: CjAYaXvZHuxOUjl/bVjNnWQAVNpXZG6sYRnieOucxpA= Subject key identifier: 07:2B:51:27:B7:F6:1F:8F:B2:69:1F:A1:66:80:4D:BD:C2:C8:90:B5 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: 011F Signing time: Fri 17 Apr 2026 05:31:14 +0000 Manifest this update: Fri 17 Apr 2026 05:31:14 +0000 Manifest next update: Fri 24 Apr 2026 05:31:14 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: nDHqmyyV0xx2OJZZr1eJ6IaenSU2Yn7dWjstGgM3ZyU=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: WXld54/qQpJ20SP2MF49RJrfgvRKOagSnwKZf6AK3Ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Apr 17 05:31:14 2026 GMT Not After : Apr 24 05:31:14 2026 GMT Subject: CN=69e1c5a2-cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:b4:4a:b9:e9:8e:e2:39:37:e4:eb:7c:cf: 5a:3c:b4:88:88:71:af:06:05:6f:64:52:a2:0e:ad: 36:2e:46:a1:f0:f9:fa:ed:59:27:6c:ab:de:af:e4: 41:02:5c:53:41:e0:e9:2d:e2:7b:5c:7d:85:23:ac: e6:d8:b6:3a:50:18:14:cc:76:b1:5e:fb:0a:7b:79: 14:88:54:7a:ee:40:16:b2:b6:4f:4c:62:ac:f3:2e: 5e:cc:67:7c:18:7a:21:7a:a4:c3:2e:65:15:b3:4e: 6f:e1:7d:3e:08:0c:30:3b:8e:77:55:ef:02:75:01: 70:9b:29:f5:dd:e1:52:c2:68:14:0a:b2:d3:5c:60: 91:8b:01:8f:5d:16:69:6d:16:73:ee:a1:cb:f5:4f: f6:d6:c8:cd:4b:f0:51:08:91:6f:32:79:65:f3:b3: c5:65:f4:df:fc:bc:6c:f3:ec:84:f4:e3:05:c3:7c: 38:6d:f2:06:7f:b5:5c:41:51:05:34:83:8c:e8:fc: 04:9e:14:a8:20:ec:b0:b8:ea:59:07:d7:6d:c9:43: 9a:61:6d:a5:cb:1d:ee:7e:13:03:14:77:a3:75:80: 49:a0:bf:48:8f:8c:29:d1:4e:40:0f:46:2a:58:af: 47:1d:70:40:f9:a1:37:ed:c2:9e:d2:63:a4:c4:bb: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2B:51:27:B7:F6:1F:8F:B2:69:1F:A1:66:80:4D:BD:C2:C8:90:B5 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:20:c5:fb:2f:60:77:09:3f:a7:11:fb:97:76:17:78:08:27: 38:5d:61:71:af:34:76:3d:6b:62:34:60:54:12:8b:3f:f6:ed: c4:0d:9a:95:80:0d:ab:41:6d:82:f1:6c:5f:a3:c5:16:7e:70: 15:7e:90:5c:fe:b8:b9:ea:45:00:e8:8b:98:4b:ec:94:38:ae: f5:bd:6b:45:34:86:31:f1:b6:38:3c:7c:f3:02:81:c5:23:5a: ff:60:e9:30:73:ff:b9:f2:b1:cb:3b:75:8b:a9:6b:b7:8b:ee: 8f:f4:a3:39:b0:d7:19:ba:c4:e6:b1:00:c2:ea:71:af:7f:df: 7e:39:26:1b:a2:3d:56:f6:40:69:a7:4b:4e:50:7f:32:95:48: 1e:bb:39:b2:70:70:60:cd:62:90:90:90:6a:0a:37:14:40:d7: 90:57:b7:dd:6d:43:5b:1c:b8:e6:ed:47:dd:26:b6:c8:2b:51: a1:9b:57:e4:78:d8:03:18:01:82:ab:87:92:e6:27:7c:5c:9d: 8e:b3:ba:98:c5:14:21:f3:86:b7:62:a1:43:97:b3:cc:e3:04: 00:d7:ac:fb:fd:e6:47:fb:31:53:0a:0e:aa:7c:ad:30:c7:f7: 25:ad:30:63:fe:ec:6f:c8:b3:60:77:8f:7c:d3:c6:f3:f7:0c: 22:e5:f7:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjYwNDE3MDUzMTE0WhcNMjYwNDI0MDUzMTE0WjAYMRYwFAYD VQQDEw02OWUxYzVhMi1jZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaO0SrnpjuI5N+TrfM9aPLSIiHGvBgVvZFKiDq02Lkah8Pn67VknbKver+RB AlxTQeDpLeJ7XH2FI6zm2LY6UBgUzHaxXvsKe3kUiFR67kAWsrZPTGKs8y5ezGd8 GHoheqTDLmUVs05v4X0+CAwwO453Ve8CdQFwmyn13eFSwmgUCrLTXGCRiwGPXRZp bRZz7qHL9U/21sjNS/BRCJFvMnll87PFZfTf/Lxs8+yE9OMFw3w4bfIGf7VcQVEF NIOM6PwEnhSoIOywuOpZB9dtyUOaYW2lyx3ufhMDFHejdYBJoL9Ij4wp0U5AD0Yq WK9HHXBA+aE37cKe0mOkxLvfdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcrUSe3 9h+PsmkfoWaATb3CyJC1MB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVCDF+y9gdwk/pxH7l3YXeAgnOF1hca80dj1rYjRgVBKLP/btxA2alYANq0Ft gvFsX6PFFn5wFX6QXP64uepFAOiLmEvslDiu9b1rRTSGMfG2ODx88wKBxSNa/2Dp MHP/ufKxyzt1i6lrt4vuj/SjObDXGbrE5rEAwupxr3/ffjkmG6I9VvZAaadLTlB/ MpVIHrs5snBwYM1ikJCQago3FEDXkFe33W1DWxy45u1H3Sa2yCtRoZtX5HjYAxgB gquHkuYnfFydjrO6mMUUIfOGt2KhQ5ezzOMEANes+/3mR/sxUwoOqnytMMf3Ja0w Y/7sb8izYHePfNPG8/cMIuX32Q== -----END CERTIFICATE-----Generated at Fri Apr 17 20:57:23 2026 by rpki-client