$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: jyzwZlVVWYwpS3lGPMMcFrWSZfgAPY0+6d9HW4lgJaI= Subject key identifier: 7A:16:86:87:A6:40:F6:81:E9:C9:F4:7D:50:DC:94:3A:83:2B:EC:EE Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 0415 Signing time: Sun 05 Apr 2026 00:10:13 +0000 Manifest this update: Sun 05 Apr 2026 00:10:13 +0000 Manifest next update: Sun 12 Apr 2026 00:10:13 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: oHF++4QomU2LA7oSJUkrkESwLTWiWOgADC8EOIS1jUo=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: xV0Ej2ei7P3BzqT9DGunMw06az/Ps86Fi6yisNe6riM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Apr 5 00:10:13 2026 GMT Not After : Apr 12 00:10:13 2026 GMT Subject: CN=69d1a865-9850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:5a:9c:2e:18:88:49:6f:d1:8a:1e:a2:51: a9:5f:38:c0:3f:23:40:80:1d:e9:b4:5f:c1:e3:95: 8e:1f:43:9f:53:64:4a:dd:56:4d:6c:8c:73:80:65: d2:c5:34:18:4a:fb:42:33:47:76:8c:89:ce:a5:78: 6b:b6:4e:f4:d3:9a:6f:98:28:84:35:b2:f6:1e:c2: 8a:03:b6:dc:5b:e1:9d:18:aa:35:9f:dd:ae:38:fa: 5c:13:2c:41:71:b1:45:7e:0d:4f:31:01:ce:04:9c: 34:54:06:46:47:f8:c5:08:ab:8b:74:68:cc:b0:fa: cb:80:bd:54:d0:71:4b:9b:46:88:59:e0:7e:62:4e: 54:4b:58:81:e5:7b:c7:e3:3e:cd:34:ca:9b:54:9d: c4:cf:c5:71:01:8b:1e:a3:9e:62:03:27:67:53:95: 28:db:cc:0b:4c:69:1d:6d:0d:f1:da:db:e8:c9:c8: 05:f7:28:c1:77:54:a3:b0:df:43:d8:2c:2d:96:fe: 7a:b9:cc:81:a4:1d:e9:5f:74:21:d5:ca:c2:60:f6: c5:16:fb:a0:bf:a0:fb:a8:59:36:79:80:98:1f:92: 28:91:93:c4:10:60:44:81:86:7b:5a:cb:71:05:5d: 90:66:d3:dc:67:95:42:87:d2:aa:8f:5e:a1:f5:2b: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:16:86:87:A6:40:F6:81:E9:C9:F4:7D:50:DC:94:3A:83:2B:EC:EE X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bc:c7:a3:57:a8:cc:3f:6e:10:df:ac:19:ca:ed:02:1d:f9: 3b:51:af:51:31:ad:82:eb:a1:1f:c3:f3:b3:48:8b:a8:30:90: 0c:13:fe:b3:2a:73:cb:0f:84:d6:c0:37:bc:a6:d2:7b:7a:72: 84:79:c8:7a:37:97:2c:3c:86:07:9b:b4:75:56:ae:ef:b9:3c: 50:85:18:87:ea:b0:9f:89:3d:b8:f8:3b:59:8e:3e:67:ae:18: 0f:81:a7:b8:99:13:f8:68:76:3d:0e:8c:9f:db:82:23:14:d6: 86:78:7b:6f:28:80:c0:bc:49:ba:14:7f:b2:d9:e6:60:ab:f5: eb:c4:e0:ed:0c:b7:56:de:fa:73:c2:e9:69:2d:08:d5:34:60: cb:64:26:f2:25:f8:dc:a2:b2:94:09:12:c6:27:dc:f7:36:cf: c0:25:aa:a7:45:b1:c3:fc:a8:40:5e:9a:7c:72:fa:de:0a:f5: da:f6:97:bd:c2:90:c0:96:76:48:cb:a6:6d:78:22:a3:8b:97: 15:ff:78:2d:fb:ac:86:36:3c:1e:b6:74:2c:f4:af:86:27:05: 8f:42:10:9c:d3:2a:ba:7d:71:8a:c0:27:ea:fb:00:1e:8d:d9: 3b:4d:15:2d:b8:cb:0f:24:fb:8e:5f:70:37:b7:bd:2d:bf:71: 01:ba:85:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjYwNDA1MDAxMDEzWhcNMjYwNDEyMDAxMDEzWjAYMRYwFAYD VQQDEw02OWQxYTg2NS05ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiWNanC4YiElv0YoeolGpXzjAPyNAgB3ptF/B45WOH0OfU2RK3VZNbIxzgGXS xTQYSvtCM0d2jInOpXhrtk7005pvmCiENbL2HsKKA7bcW+GdGKo1n92uOPpcEyxB cbFFfg1PMQHOBJw0VAZGR/jFCKuLdGjMsPrLgL1U0HFLm0aIWeB+Yk5US1iB5XvH 4z7NNMqbVJ3Ez8VxAYseo55iAydnU5Uo28wLTGkdbQ3x2tvoycgF9yjBd1SjsN9D 2Cwtlv56ucyBpB3pX3Qh1crCYPbFFvugv6D7qFk2eYCYH5IokZPEEGBEgYZ7Wstx BV2QZtPcZ5VCh9Kqj16h9SsZowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoWhoem QPaB6cn0fVDclDqDK+zuMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL7zHo1eozD9uEN+sGcrtAh35O1GvUTGtguuhH8Pzs0iLqDCQDBP+sypzyw+E 1sA3vKbSe3pyhHnIejeXLDyGB5u0dVau77k8UIUYh+qwn4k9uPg7WY4+Z64YD4Gn uJkT+Gh2PQ6Mn9uCIxTWhnh7byiAwLxJuhR/stnmYKv168Tg7Qy3Vt76c8LpaS0I 1TRgy2Qm8iX43KKylAkSxifc9zbPwCWqp0Wxw/yoQF6afHL63gr12vaXvcKQwJZ2 SMumbXgio4uXFf94LfushjY8HrZ0LPSvhicFj0IQnNMqun1xisAn6vsAHo3ZO00V LbjLDyT7jl9wN7e9Lb9xAbqFYg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:04 2026 by rpki-client