$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: HAMu8UfzuN6cr8GzwvbSprK0YMoi+4tgTqyqX2EUa/0= Subject key identifier: E7:EF:B9:C2:E3:16:A6:53:4B:EA:E3:63:FC:BC:3A:3A:13:AE:C3:16 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 020E Signing time: Fri 17 Apr 2026 02:43:28 +0000 Manifest this update: Fri 17 Apr 2026 02:43:28 +0000 Manifest next update: Fri 24 Apr 2026 02:43:28 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: YmDF5HJAhWTBBVjJKrjtJkFc0syJSrn31wA2pZWplSY=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) 4: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Apr 17 02:43:28 2026 GMT Not After : Apr 24 02:43:28 2026 GMT Subject: CN=69e19e50-0364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:fc:3c:3c:c8:19:bc:ef:c0:4b:b4:80:c6: 16:22:bd:3d:ad:a5:be:b4:b8:40:8b:ad:40:80:06: 9a:75:56:bb:b8:5c:d2:67:45:bc:57:f2:2f:80:f6: 41:cc:95:f0:1c:79:94:7f:7f:4d:cc:2e:5a:78:ce: 3a:f2:70:85:86:d7:76:0f:0b:62:9e:66:39:4f:33: 61:76:ef:ed:2d:89:8a:b4:b2:21:45:d9:5a:d9:d1: 54:7d:be:de:c1:ac:20:50:83:f7:e3:50:a1:31:9e: 44:1e:ab:65:82:79:75:af:98:20:69:df:01:b3:a4: 95:e3:68:a1:6a:7a:d6:32:d8:8a:7d:d1:14:0d:25: 1a:f8:62:0c:d7:7d:07:fc:a7:1c:6b:20:cd:83:f2: 4e:a7:15:2e:99:e4:31:a6:18:66:bd:5e:eb:6d:11: a4:8c:58:57:ac:4b:6a:af:bc:15:5e:4b:ca:0e:70: 3d:aa:59:50:25:e9:82:a1:61:5b:f1:f6:d3:b9:21: 83:f2:66:ea:a7:a7:b1:2d:98:46:25:b6:83:41:e8: 3c:c9:3c:63:d1:dd:e9:f6:85:93:a5:1a:f3:eb:53: 70:9a:e5:0b:3b:8c:e7:05:0d:01:8f:8b:4b:e9:06: fa:87:a0:4b:4a:7a:8c:ed:77:30:6c:33:40:13:fe: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EF:B9:C2:E3:16:A6:53:4B:EA:E3:63:FC:BC:3A:3A:13:AE:C3:16 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d3:97:87:39:0e:b0:34:0d:6d:f7:63:45:29:8c:ef:76:d9: f0:61:bb:e3:a0:30:4a:cc:bc:91:97:27:dd:c7:a6:6b:e2:33: af:78:2c:2b:12:3f:3a:8c:92:bc:40:a6:fd:84:e8:30:c4:ac: 0f:76:5b:f7:8f:b0:2c:86:50:b3:60:e1:91:27:9a:67:97:d0: f4:bb:8c:58:80:dc:af:d7:24:fe:fb:ed:c7:2e:fe:c4:3b:5e: e0:cb:c8:d9:d5:e7:7c:da:57:6c:3d:5d:18:ee:d6:db:d5:21: 52:60:48:b5:f1:87:f4:c0:73:aa:9a:0f:25:02:69:bb:ab:75: 1d:90:86:a0:c0:12:4c:29:94:6f:ab:b6:21:73:42:0a:4a:b5: e4:0e:c0:86:dd:bf:d4:7c:dc:e1:3b:e7:30:1b:24:e6:91:e8: d5:2d:a5:9e:7e:47:db:09:7d:42:83:d9:08:01:38:be:92:db: ab:ff:f7:3f:01:01:be:af:6f:b8:df:40:09:81:99:20:c5:e4: f2:08:95:2c:29:d1:55:da:2d:38:61:81:d1:3a:19:4d:e4:fe: 69:7d:f4:14:d6:27:ee:3f:4e:83:e7:87:7e:8f:d3:64:cc:c8: 75:79:20:88:66:b7:85:04:99:96:49:c4:ed:84:b4:58:09:cc: ea:ec:4d:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwNDE3MDI0MzI4WhcNMjYwNDI0MDI0MzI4WjAYMRYwFAYD VQQDEw02OWUxOWU1MC0wMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXn8PDzIGbzvwEu0gMYWIr09raW+tLhAi61AgAaadVa7uFzSZ0W8V/IvgPZB zJXwHHmUf39NzC5aeM468nCFhtd2DwtinmY5TzNhdu/tLYmKtLIhRdla2dFUfb7e wawgUIP341ChMZ5EHqtlgnl1r5ggad8Bs6SV42ihanrWMtiKfdEUDSUa+GIM130H /KccayDNg/JOpxUumeQxphhmvV7rbRGkjFhXrEtqr7wVXkvKDnA9qllQJemCoWFb 8fbTuSGD8mbqp6exLZhGJbaDQeg8yTxj0d3p9oWTpRrz61NwmuULO4znBQ0Bj4tL 6Qb6h6BLSnqM7XcwbDNAE/79KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfvucLj FqZTS+rjY/y8OjoTrsMWMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvNOXhzkOsDQNbfdjRSmM73bZ8GG746AwSsy8kZcn3cema+Izr3gsKxI/OoyS vECm/YToMMSsD3Zb94+wLIZQs2DhkSeaZ5fQ9LuMWIDcr9ck/vvtxy7+xDte4MvI 2dXnfNpXbD1dGO7W29UhUmBItfGH9MBzqpoPJQJpu6t1HZCGoMASTCmUb6u2IXNC Ckq15A7Aht2/1Hzc4TvnMBsk5pHo1S2lnn5H2wl9QoPZCAE4vpLbq//3PwEBvq9v uN9ACYGZIMXk8giVLCnRVdotOGGB0ToZTeT+aX30FNYn7j9Og+eHfo/TZMzIdXkg iGa3hQSZlknE7YS0WAnM6uxNUA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:43:44 2026 by rpki-client