$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json) Hash identifier: VbpxZJvQe5DKLwE8Q1AMlnS6MNgMWpRH3lOlGumLm2c= Subject key identifier: BC:51:10:41:90:10:99:E3:6A:EF:68:29:31:54:57:F2:23:21:83:4F Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Certificate serial: 352B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft Manifest number: 41DB Signing time: Sat 04 Apr 2026 15:00:41 +0000 Manifest this update: Sat 04 Apr 2026 15:00:41 +0000 Manifest next update: Sat 11 Apr 2026 15:00:41 +0000 Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: Y81dK/ReKJBf5417X5dbdhAMTEt/jU7h+I+jvDSK5hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Validity Not Before: Apr 4 15:00:41 2026 GMT Not After : Apr 11 15:00:41 2026 GMT Subject: CN=69d12799-fafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:f1:60:09:f5:a1:83:ca:8a:d0:b5:fd:58: 9c:38:10:f6:5d:11:1b:8f:2d:3e:38:f6:60:cc:5d: fb:69:ea:2d:b8:8c:10:75:b1:d5:47:78:46:c6:ed: f8:7e:7c:c2:a9:4e:93:8f:7e:5b:1b:4b:19:c2:6b: a7:d7:4f:54:4d:7a:17:52:e8:f5:ce:cb:7c:7c:bc: 4e:95:a1:49:83:fa:21:70:c4:d6:4c:30:f5:de:d6: e3:4d:6e:cd:d2:37:a0:b6:c3:8c:96:d4:5a:a7:0f: 34:b4:ee:6f:c8:77:81:24:39:7f:c4:01:ac:06:d9: 9f:bd:78:08:c9:18:2d:48:47:9f:d1:fb:38:59:b9: f8:83:d9:cf:5f:d8:f7:92:25:93:c3:1e:21:0d:a6: 64:b9:90:af:57:97:74:d3:3f:4f:71:e3:c0:67:2e: 79:3f:40:d6:47:a3:d3:67:dc:58:7d:ff:de:37:4e: 10:87:94:e0:78:73:93:3f:ae:60:3b:40:fa:b5:f9: c1:0a:f4:63:28:0c:38:09:16:d7:57:b5:aa:92:1c: 64:00:0f:ec:75:24:60:aa:fb:91:f7:b7:02:98:1b: 71:f5:21:d0:72:ed:af:c0:e4:cc:9b:48:1e:d7:2a: d9:76:8c:e0:15:bf:3a:4c:88:38:9e:f8:a2:75:6d: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:51:10:41:90:10:99:E3:6A:EF:68:29:31:54:57:F2:23:21:83:4F X509v3 Authority Key Identifier: keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a7:3f:6a:9a:ac:c2:51:bd:f0:2c:bd:07:f4:32:8b:97:72: c8:26:58:70:88:27:fc:1c:3f:2c:59:96:b1:8b:f7:73:fb:0e: ac:13:bf:d5:35:90:ce:89:44:13:c9:79:c7:8d:de:2e:4b:79: 38:81:96:86:f7:92:a7:c0:fa:21:f0:47:d3:56:b0:76:4b:7a: 4c:65:29:70:a6:59:a7:51:74:c4:3a:f0:16:c6:6e:c2:70:04: ab:84:6f:8d:20:fe:53:0c:94:53:cb:52:18:9e:f0:a8:a5:40: 05:47:c0:3a:08:67:53:05:73:4f:7d:64:5b:bf:84:4a:a7:03: 4e:c3:8a:d7:49:bd:6f:64:45:92:33:39:29:88:a7:57:87:ce: c5:d6:1d:d3:2a:9e:a1:91:82:fe:53:b1:fb:cd:4b:b8:17:3f: 9e:e0:1d:fc:18:af:dd:72:9c:8b:4f:2b:f1:56:40:ea:41:79: f8:aa:50:4c:20:97:7c:39:33:bc:d1:0b:58:e1:0c:b1:2a:e2: 85:d8:64:16:d7:bd:64:17:0f:83:bb:23:bd:d1:03:82:80:eb: 21:9f:e4:ef:ad:74:52:e3:14:8b:c4:df:09:5c:74:5e:8f:43: 35:de:06:8c:df:d7:48:97:aa:20:98:b2:c2:39:08:ed:64:4e: 48:c2:d8:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5 NEJFNTg1REQwHhcNMjYwNDA0MTUwMDQxWhcNMjYwNDExMTUwMDQxWjAYMRYwFAYD VQQDEw02OWQxMjc5OS1mYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw3xYAn1oYPKitC1/VicOBD2XREbjy0+OPZgzF37aeotuIwQdbHVR3hGxu34 fnzCqU6Tj35bG0sZwmun109UTXoXUuj1zst8fLxOlaFJg/ohcMTWTDD13tbjTW7N 0jegtsOMltRapw80tO5vyHeBJDl/xAGsBtmfvXgIyRgtSEef0fs4Wbn4g9nPX9j3 kiWTwx4hDaZkuZCvV5d00z9PcePAZy55P0DWR6PTZ9xYff/eN04Qh5TgeHOTP65g O0D6tfnBCvRjKAw4CRbXV7WqkhxkAA/sdSRgqvuR97cCmBtx9SHQcu2vwOTMm0ge 1yrZdozgFb86TIg4nviidW1hawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxREEGQ EJnjau9oKTFUV/IjIYNPMB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12 MVpPbjVvbnRxZnlVdmxoZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF6c/apqswlG98Cy9B/Qyi5dyyCZYcIgn/Bw/LFmWsYv3c/sOrBO/1TWQzolE E8l5x43eLkt5OIGWhveSp8D6IfBH01awdkt6TGUpcKZZp1F0xDrwFsZuwnAEq4Rv jSD+UwyUU8tSGJ7wqKVABUfAOghnUwVzT31kW7+ESqcDTsOK10m9b2RFkjM5KYin V4fOxdYd0yqeoZGC/lOx+81LuBc/nuAd/Biv3XKci08r8VZA6kF5+KpQTCCXfDkz vNELWOEMsSrihdhkFte9ZBcPg7sjvdEDgoDrIZ/k7610UuMUi8TfCVx0Xo9DNd4G jN/XSJeqIJiywjkI7WROSMLYSg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:13 2026 by rpki-client