$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: qcXjjvthDhPHzvRH7bBDGgs1CQoDecl/cuA8Vwwbh7k= Subject key identifier: DB:FF:24:44:FB:35:57:41:E5:C5:12:C9:21:D2:9A:31:87:1E:E6:5E Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 0339 Signing time: Sun 19 Apr 2026 00:56:28 +0000 Manifest this update: Sun 19 Apr 2026 00:56:27 +0000 Manifest next update: Sun 26 Apr 2026 00:56:27 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: afF16PmIBiBqSASElzxdh60jO+O2l8NT1pa33744dYM=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: R9jdVpy+qpEyzogbluazuQ5kKtc3aY56mxNQcSBuCZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Apr 19 00:56:27 2026 GMT Not After : Apr 26 00:56:27 2026 GMT Subject: CN=69e4283c-2e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:36:01:99:1b:31:5f:99:86:4a:05:0b:a2: 46:b9:01:42:88:87:52:9e:dd:88:b6:7c:5b:b4:42: 15:e3:ab:41:73:2d:fa:87:4f:af:92:6e:d2:06:76: 22:1b:e8:fa:71:89:b7:1b:d5:99:58:33:09:84:c6: b9:f9:94:55:f7:14:14:19:71:78:e5:04:59:33:7e: 04:6b:3d:9d:1f:6d:e7:d2:8c:8c:a9:7c:95:eb:20: f7:6b:34:65:df:16:67:d0:0b:3d:bd:4d:ad:ca:ce: 2f:6f:e2:2f:a5:d7:13:45:47:25:44:9d:4f:dc:b2: 65:44:a4:85:61:b4:6e:20:93:2b:21:0f:91:39:de: 3b:7e:4a:49:e1:13:3a:96:d6:0c:f2:4b:5e:9b:84: 31:cb:db:9e:8f:22:d6:6e:52:6f:86:38:75:42:cd: 4f:06:65:f2:56:8c:0f:0a:48:a4:83:ca:67:07:d5: 7b:d1:a9:32:4b:25:be:9c:3f:76:cc:e2:65:7f:d2: 8f:1f:91:b6:71:8b:bb:5d:df:54:25:d8:9c:27:39: 83:cf:ee:38:67:82:ce:be:44:5a:b1:a6:ee:8e:7a: 04:da:56:31:33:e9:e7:0e:89:f6:1a:f5:64:d2:e9: 86:7a:3f:81:32:2f:ce:ca:8f:4f:c3:e5:47:c3:e4: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FF:24:44:FB:35:57:41:E5:C5:12:C9:21:D2:9A:31:87:1E:E6:5E X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:16:ad:52:a2:2a:36:5f:0d:9e:eb:52:ca:18:48:d1:83:9a: 0c:b6:d4:60:ac:91:cd:2b:08:90:6b:3b:28:ef:25:e1:aa:a6: d8:a9:02:9b:ae:6c:67:54:23:f0:c4:c4:4f:04:20:0a:d4:0f: da:aa:94:b6:5f:4f:00:cc:9f:82:b1:03:cd:96:87:0a:11:00: 1f:18:4c:9e:04:e5:7e:50:e2:81:7d:59:43:75:02:df:d9:1c: b9:93:ec:98:a3:2a:0c:a2:26:77:45:ac:9c:9d:74:aa:ab:00: 9e:05:a1:d9:fd:62:c0:83:3a:22:6d:ad:a9:ac:13:a8:cc:f3: de:09:1b:7e:3e:cb:5a:b8:06:79:3e:d4:d3:3c:c5:31:9e:4e: 3d:13:d7:6e:a6:f8:e5:57:a3:bc:50:7b:88:f5:96:04:e8:41: 98:f4:db:c0:c7:51:be:9f:cd:6f:ec:3f:0f:5e:30:58:63:38: 92:29:ad:2e:06:a2:a5:49:48:78:e5:cf:69:12:a0:e4:2b:d9: 76:1b:60:4c:bb:f0:bd:47:de:84:62:b4:22:56:48:bb:97:86: 07:ab:9d:ab:0e:08:e6:50:5f:61:c4:08:65:5e:c1:94:75:12: 3a:1f:7d:6c:f0:b3:1a:23:cc:db:b6:74:c3:37:46:5b:13:b5: f5:45:24:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjYwNDE5MDA1NjI3WhcNMjYwNDI2MDA1NjI3WjAYMRYwFAYD VQQDEw02OWU0MjgzYy0yZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30c2AZkbMV+ZhkoFC6JGuQFCiIdSnt2ItnxbtEIV46tBcy36h0+vkm7SBnYi G+j6cYm3G9WZWDMJhMa5+ZRV9xQUGXF45QRZM34Eaz2dH23n0oyMqXyV6yD3azRl 3xZn0As9vU2tys4vb+IvpdcTRUclRJ1P3LJlRKSFYbRuIJMrIQ+ROd47fkpJ4RM6 ltYM8ktem4Qxy9uejyLWblJvhjh1Qs1PBmXyVowPCkikg8pnB9V70akySyW+nD92 zOJlf9KPH5G2cYu7Xd9UJdicJzmDz+44Z4LOvkRasabujnoE2lYxM+nnDon2GvVk 0umGej+BMi/Oyo9Pw+VHw+SJvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNv/JET7 NVdB5cUSySHSmjGHHuZeMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAghatUqIqNl8NnutSyhhI0YOaDLbUYKyRzSsIkGs7KO8l4aqm2KkCm65sZ1Qj 8MTETwQgCtQP2qqUtl9PAMyfgrEDzZaHChEAHxhMngTlflDigX1ZQ3UC39kcuZPs mKMqDKImd0WsnJ10qqsAngWh2f1iwIM6Im2tqawTqMzz3gkbfj7LWrgGeT7U0zzF MZ5OPRPXbqb45VejvFB7iPWWBOhBmPTbwMdRvp/Nb+w/D14wWGM4kimtLgaipUlI eOXPaRKg5CvZdhtgTLvwvUfehGK0IlZIu5eGB6udqw4I5lBfYcQIZV7BlHUSOh99 bPCzGiPM27Z0wzdGWxO19UUkdA== -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:00 2026 by rpki-client