$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft File: MTDg-yrjCHHxtEx3xUL__P4dl0A.mft (raw, json) Hash identifier: qPiJPEsYt54nf/pZTAc/KImbKFrQiNxbGr/ZTleLsKA= Subject key identifier: AB:A5:B5:19:30:F7:7C:C8:8F:70:C5:18:B8:25:6F:64:A9:C2:26:12 Authority key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 Certificate issuer: /CN=A91B8833/serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft Manifest number: 11 Signing time: Sun 05 Apr 2026 08:22:58 +0000 Manifest this update: Sun 05 Apr 2026 08:22:58 +0000 Manifest next update: Sun 12 Apr 2026 08:22:58 +0000 Files and hashes: 1: MTDg-yrjCHHxtEx3xUL__P4dl0A.crl (hash: aqIzsmzKv/gz0mi3WdLjY/WHhPhzlU0+HZw3ZyPrs/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Validity Not Before: Apr 5 08:22:58 2026 GMT Not After : Apr 12 08:22:58 2026 GMT Subject: CN=69d21be2-0491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:e4:a1:52:a9:d3:9e:42:6d:64:ce:3b:07: c9:d8:f2:fb:2e:95:cd:82:fd:d1:8c:1e:7f:55:5e: 43:13:19:7c:0b:13:09:97:e1:e4:17:c0:15:0b:c3: 93:d9:20:94:7e:ca:4b:cc:01:d5:16:c2:ba:da:56: e5:83:e6:52:fd:c2:a5:ed:78:de:ca:9a:2f:26:62: 09:8a:0f:e3:23:50:c3:42:10:e5:d2:dc:b0:bf:dd: f8:64:65:60:f0:65:91:2e:eb:a2:b9:2d:3b:32:6b: 46:e4:fe:58:cd:8e:39:19:f9:76:53:3d:2f:1d:cf: 55:d2:1d:d9:8c:c1:43:15:41:24:bd:ed:06:6f:06: 75:1e:6a:d2:21:3d:be:48:42:2a:61:3c:88:a9:6c: 19:61:ff:07:c3:1e:ba:f9:cc:ce:cd:2f:9e:0f:52: 63:b2:cf:8d:9a:dc:9d:ac:af:ea:3c:77:c6:01:a6: dc:b4:0a:12:4f:92:27:3d:fe:84:94:e8:0e:ea:87: 8e:8c:14:95:bd:1c:3f:02:14:6d:81:89:88:0a:de: cc:ee:aa:8e:ee:a0:78:00:9d:29:57:3e:23:36:e2: 43:97:04:7c:d4:06:b7:d8:43:01:99:b5:7f:d7:89: 67:4f:ec:de:57:5b:3b:0a:e8:74:06:ff:cf:9f:75: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A5:B5:19:30:F7:7C:C8:8F:70:C5:18:B8:25:6F:64:A9:C2:26:12 X509v3 Authority Key Identifier: keyid:31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c5:26:e4:29:e4:70:7a:50:ac:5a:81:78:f6:a6:d6:7a:44: 45:c5:d7:60:7a:ba:84:32:33:a1:f8:db:d3:c6:87:aa:13:6e: f5:77:c1:e8:34:12:0d:74:f1:55:04:c2:c0:aa:6d:16:f3:91: fe:6e:cc:5c:a8:d2:ca:80:03:33:69:46:ca:5e:32:80:54:6b: f5:a5:88:7d:03:d6:07:2c:89:34:e8:68:63:5b:43:25:a3:3c: f5:66:0c:b2:a5:94:b7:1a:49:ef:20:a6:eb:67:fb:34:80:bf: 77:49:50:cb:ff:d7:84:7b:05:ff:ce:3b:4a:e8:b7:7b:42:78: 92:07:39:a9:b8:e1:4d:c5:4d:97:23:a2:22:24:73:6d:1d:df: 87:7f:aa:fc:e7:a4:18:af:ff:d0:7a:b9:c4:20:79:fa:7f:6a: 85:4b:a1:90:15:89:be:47:8c:4b:7f:60:a6:42:b5:5f:38:ad: 08:88:3f:64:c4:2c:0b:74:04:51:1e:88:9e:c0:49:52:2a:e0: 3c:93:6d:01:d3:c4:bd:dd:1e:6f:ca:4f:1c:ba:fc:24:01:85: 86:f7:e6:53:2e:52:0b:a2:98:bc:4c:07:26:cf:15:df:8c:35: 0d:2f:9f:9e:19:9c:d2:cc:b9:12:4b:42:5a:79:53:99:82:5c: 82:7d:3a:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODgzMzExMC8GA1UEBRMoMzEzMEUwRkIyQUUzMDg3MUYxQjQ0Qzc3QzU0MkZGRkNG RTFEOTc0MDAeFw0yNjA0MDUwODIyNThaFw0yNjA0MTIwODIyNThaMBgxFjAUBgNV BAMTDTY5ZDIxYmUyLTA0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG/+ShUqnTnkJtZM47B8nY8vsulc2C/dGMHn9VXkMTGXwLEwmX4eQXwBULw5PZ IJR+ykvMAdUWwrraVuWD5lL9wqXteN7Kmi8mYgmKD+MjUMNCEOXS3LC/3fhkZWDw ZZEu66K5LTsya0bk/ljNjjkZ+XZTPS8dz1XSHdmMwUMVQSS97QZvBnUeatIhPb5I QiphPIipbBlh/wfDHrr5zM7NL54PUmOyz42a3J2sr+o8d8YBpty0ChJPkic9/oSU 6A7qh46MFJW9HD8CFG2BiYgK3szuqo7uoHgAnSlXPiM24kOXBHzUBrfYQwGZtX/X iWdP7N5XWzsK6HQG/8+fdWxdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq6W1GTD3 fMiPcMUYuCVvZKnCJhIwHwYDVR0jBBgwFoAUMTDg+yrjCHHxtEx3xUL//P4dl0Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0UyMjEwQ0M0MUFC RTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hIeHRFeDN4VUxfX1A0ZGww QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVREZy15cmpDSEh4dEV4M3hVTF9fUDRkbDBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODMzL0UyMjEwQ0M0MUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hI eHRFeDN4VUxfX1A0ZGwwQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxxSbkKeRwelCsWoF49qbWekRFxddgerqEMjOh+NvTxoeqE271d8HoNBINdPFV BMLAqm0W85H+bsxcqNLKgAMzaUbKXjKAVGv1pYh9A9YHLIk06GhjW0Mlozz1Zgyy pZS3GknvIKbrZ/s0gL93SVDL/9eEewX/zjtK6Ld7QniSBzmpuOFNxU2XI6IiJHNt Hd+Hf6r856QYr//QernEIHn6f2qFS6GQFYm+R4xLf2CmQrVfOK0IiD9kxCwLdARR HoiewElSKuA8k20B08S93R5vyk8cuvwkAYWG9+ZTLlILopi8TAcmzxXfjDUNL5+e GZzSzLkSS0JaeVOZglyCfTqk -----END CERTIFICATE-----Generated at Sun Apr 5 19:37:36 2026 by rpki-client