$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json) Hash identifier: ZXlUI1bFhsaDZFpfLxIvSqTshOB1tpc2ZTJCSjYsn3c= Subject key identifier: B1:30:AC:3B:8D:50:33:AB:63:D8:51:E9:85:05:45:A0:0A:47:82:0A Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft Manifest number: 4B Signing time: Tue 07 Apr 2026 07:48:29 +0000 Manifest this update: Tue 07 Apr 2026 07:48:29 +0000 Manifest next update: Tue 14 Apr 2026 07:48:29 +0000 Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: eehTrarn8JoSuS8XcrtkiqzOXeWnO8HgZnIXoF3rowo=) 2: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: ld7P2PELFqfVNXiU+jG2B0uLi23klkJ5bfoslPWrnms=) 3: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: 89NQPcLshXPkKgPq6c+ywAb5yirtq9AA9hqm/7FcBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Validity Not Before: Apr 7 07:48:29 2026 GMT Not After : Apr 14 07:48:29 2026 GMT Subject: CN=69d4b6cd-7420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:8a:db:0e:f4:98:4a:08:3f:3e:de:7c:52: e7:4a:89:6a:35:47:46:31:12:30:28:00:f6:b3:96: 13:7b:77:6e:05:29:9a:02:0a:1c:94:4d:2a:b9:d1: 13:55:51:b8:a2:89:eb:99:e0:19:1f:d0:43:b8:58: 18:e7:da:3c:a1:73:74:c7:92:b5:92:24:60:90:0c: 85:d0:a0:26:a9:f2:34:b9:7f:34:81:da:de:60:16: 66:a7:d4:fb:ad:d9:ec:dc:7f:68:fd:d2:72:64:d4: fb:a1:60:dd:16:e0:a0:ef:4f:c1:f6:2d:a3:1c:90: 92:11:59:a5:5b:25:8b:ed:4c:8e:74:44:a4:f5:e2: 28:68:58:2f:cb:cc:5f:0e:95:77:63:51:e1:fa:71: dd:20:8d:2c:f8:64:d7:51:84:fb:1c:b6:03:82:2e: e5:db:55:64:99:0b:89:25:b0:1e:bc:ad:ec:d6:38: cc:4c:05:d6:7d:66:26:df:46:2b:c9:04:87:cb:ee: 9a:fc:29:8d:c9:37:ff:4f:10:3a:3d:8b:5b:b5:a6: c0:19:28:c8:dc:32:04:b2:17:f3:50:f3:59:5f:2a: ee:a3:a4:a1:1e:42:da:65:d6:3e:a4:f7:15:c3:2d: 56:ca:96:08:38:ca:96:34:92:0a:9c:f4:18:e1:3a: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:AC:3B:8D:50:33:AB:63:D8:51:E9:85:05:45:A0:0A:47:82:0A X509v3 Authority Key Identifier: keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b9:34:0c:07:67:00:02:52:a3:45:92:b9:5d:7b:0c:d0:2c: 5c:82:8e:01:92:eb:65:ed:3e:c0:85:ab:9f:2a:d0:ef:b6:de: 65:e0:58:e7:f3:d4:e1:79:ff:f2:8e:9a:29:3b:3a:b8:35:64: 46:f4:96:6b:f1:d4:61:1c:29:8c:28:7f:f5:43:ff:db:d0:6a: c8:2c:c4:39:19:57:50:09:63:1d:2a:8f:7f:16:14:ce:dc:ad: a7:3b:fe:0a:e2:b6:b7:e2:85:52:d1:4e:36:c9:87:35:10:f8: 71:00:f1:36:2e:6a:13:3d:20:02:a9:9d:0e:55:f0:09:f6:26: 91:5b:31:19:4d:c9:95:0a:bc:8a:97:2a:55:c4:5c:62:1b:89: dd:d6:2f:19:7f:4f:fb:df:e2:08:bf:17:fd:de:62:39:ed:56: 62:b2:d1:22:dc:6e:ff:16:ce:48:72:31:7c:8c:75:66:e5:68: 8c:1b:5f:fe:3c:b5:7f:dd:2c:ac:c0:31:44:76:0a:94:28:93: bb:2f:bd:67:fa:a7:22:8b:b0:6d:23:9e:00:04:af:5d:27:1a: 12:fa:ba:a8:03:e9:35:d3:fd:f7:d8:b8:62:ed:65:ed:59:34: c0:3c:4f:b3:ed:de:00:9b:d2:a9:8b:ab:ac:c5:fa:f0:c8:c0: 56:c2:24:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDBERjExMC8GA1UEBRMoRkI0NzFGODQxMzA4OUVENzAxQkRBQjQwQUU2M0M3ODhG NTI2QUI2RjAeFw0yNjA0MDcwNzQ4MjlaFw0yNjA0MTQwNzQ4MjlaMBgxFjAUBgNV BAMTDTY5ZDRiNmNkLTc0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKUorbDvSYSgg/Pt58UudKiWo1R0YxEjAoAPazlhN7d24FKZoCChyUTSq50RNV UbiiieuZ4Bkf0EO4WBjn2jyhc3THkrWSJGCQDIXQoCap8jS5fzSB2t5gFman1Put 2ezcf2j90nJk1PuhYN0W4KDvT8H2LaMckJIRWaVbJYvtTI50RKT14ihoWC/LzF8O lXdjUeH6cd0gjSz4ZNdRhPsctgOCLuXbVWSZC4klsB68rezWOMxMBdZ9ZibfRivJ BIfL7pr8KY3JN/9PEDo9i1u1psAZKMjcMgSyF/NQ81lfKu6jpKEeQtpl1j6k9xXD LVbKlgg4ypY0kgqc9BjhOtxlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsTCsO41Q M6tj2FHphQVFoApHggowHwYDVR0jBBgwFoAU+0cfhBMIntcBvatArmPHiPUmq28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwMERGLzI3Nzc4RjM4Q0JE MTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRjQnZhdEFybVBIaVBVbXEy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBjZmhCTUludGNCdmF0QXJtUEhpUFVtcTI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw MERGLzI3Nzc4RjM4Q0JEMTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRj QnZhdEFybVBIaVBVbXEyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEuTQMB2cAAlKjRZK5XXsM0Cxcgo4Bkutl7T7AhaufKtDvtt5l4Fjn89Thef/y jpopOzq4NWRG9JZr8dRhHCmMKH/1Q//b0GrILMQ5GVdQCWMdKo9/FhTO3K2nO/4K 4ra34oVS0U42yYc1EPhxAPE2LmoTPSACqZ0OVfAJ9iaRWzEZTcmVCryKlypVxFxi G4nd1i8Zf0/73+IIvxf93mI57VZistEi3G7/Fs5IcjF8jHVm5WiMG1/+PLV/3Sys wDFEdgqUKJO7L71n+qcii7BtI54ABK9dJxoS+rqoA+k10/332Lhi7WXtWTTAPE+z 7d4Am9Kpi6usxfrwyMBWwiQf -----END CERTIFICATE-----Generated at Tue Apr 7 20:57:42 2026 by rpki-client