$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: CT7DzhEvn4BydEUfdpTkKDJIq0P8xyS6yZ64mbcwf9Q= Subject key identifier: F4:63:89:B4:FD:A8:1F:ED:4B:17:6E:DB:48:74:74:34:36:DB:05:EF Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 3530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 352F Signing time: Sat 04 Apr 2026 14:19:44 +0000 Manifest this update: Sat 04 Apr 2026 14:19:44 +0000 Manifest next update: Sat 11 Apr 2026 14:19:44 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: 0v9TZmYMcgz/I5XK3C7R5xXtr+aKNCBGuzPSdRU5Y3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Apr 4 14:19:44 2026 GMT Not After : Apr 11 14:19:44 2026 GMT Subject: CN=69d11e00-58e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:57:17:c0:13:7d:28:e1:83:e2:2c:82:a0: e6:93:e6:45:9f:be:ba:5f:bb:ba:8b:99:27:5d:46: e5:74:b5:ca:54:a1:9b:3a:ed:12:a3:57:f0:32:6f: b7:c8:66:7d:da:e3:50:9e:71:ec:97:ab:83:c3:26: f4:91:e7:4e:eb:25:d1:81:62:50:88:c3:d7:a6:0c: 95:32:2e:40:d7:c7:80:7d:d3:05:1d:66:08:41:08: be:a9:de:b2:84:ef:2c:6e:91:a9:1e:36:6e:f2:51: c2:d9:dd:f8:55:23:42:7d:36:a0:2a:ec:94:92:0d: dc:b1:7c:ea:9b:af:26:15:67:51:db:8b:49:b6:bf: 65:ec:0f:2c:bc:f3:7c:27:78:6d:46:55:a6:34:c3: 2b:85:9a:3a:82:28:14:d0:fb:9e:9b:d9:31:be:99: b8:bf:f1:ba:3d:ac:24:38:cd:f0:65:d4:cc:b5:d9: ab:be:f4:00:64:a7:e8:cf:42:34:3d:d8:4a:1f:82: 4e:e9:2b:8b:0f:36:9c:1e:9b:91:c3:af:39:26:98: f3:f1:66:24:78:d6:ec:1b:96:c1:61:f7:58:38:74: 54:8a:7d:30:c1:6b:64:dc:e9:7c:0c:ea:71:b1:85: 85:d0:9d:e0:00:97:04:cd:a9:26:e6:23:8b:6d:cb: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:89:B4:FD:A8:1F:ED:4B:17:6E:DB:48:74:74:34:36:DB:05:EF X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:aa:7d:94:81:9b:b2:f0:b1:89:ba:c8:09:58:a4:34:97:97: 3a:24:6b:24:4f:25:fd:fe:33:3f:90:fe:57:82:30:17:89:dd: ab:c0:50:94:d0:35:03:8e:6b:aa:82:d7:db:4f:0d:ea:03:f9: 1a:ca:bd:35:1b:67:5f:a1:6c:19:35:32:5f:8b:ed:d9:44:3f: 89:12:4b:3d:5a:ea:fd:f4:2d:6d:e3:b2:fc:14:11:20:e5:dc: 79:73:a6:d5:72:87:bc:4c:9b:6b:10:22:44:6b:08:b3:c8:30: f5:57:6d:ab:75:91:33:15:7f:ed:b9:5f:42:8e:2d:0b:ea:25: 35:5d:e3:c1:37:03:b9:98:5a:8f:9b:7d:dc:03:f3:fe:89:b1: 88:2f:f8:0f:e3:1b:ef:da:3c:52:dc:eb:bd:ae:f5:05:51:60: 60:95:9b:87:64:89:64:ce:4d:ff:55:ef:c0:c0:78:08:91:b3: be:df:3e:95:2a:50:fc:fc:08:03:c5:3c:ac:8d:19:d5:6e:8e: f7:73:92:27:30:49:1a:03:ab:df:c7:c9:fd:85:00:5d:f9:ab: 88:56:3a:75:fb:eb:12:26:cb:02:9f:e0:f5:b1:4e:65:91:97: 99:3a:33:49:ef:23:a5:07:a1:a3:2c:52:60:69:eb:9e:f6:2d: 16:c7:7d:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjYwNDA0MTQxOTQ0WhcNMjYwNDExMTQxOTQ0WjAYMRYwFAYD VQQDEw02OWQxMWUwMC01OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncNXF8ATfSjhg+IsgqDmk+ZFn766X7u6i5knXUbldLXKVKGbOu0So1fwMm+3 yGZ92uNQnnHsl6uDwyb0kedO6yXRgWJQiMPXpgyVMi5A18eAfdMFHWYIQQi+qd6y hO8sbpGpHjZu8lHC2d34VSNCfTagKuyUkg3csXzqm68mFWdR24tJtr9l7A8svPN8 J3htRlWmNMMrhZo6gigU0Puem9kxvpm4v/G6PawkOM3wZdTMtdmrvvQAZKfoz0I0 PdhKH4JO6SuLDzacHpuRw685Jpjz8WYkeNbsG5bBYfdYOHRUin0wwWtk3Ol8DOpx sYWF0J3gAJcEzakm5iOLbctG7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRjibT9 qB/tSxdu20h0dDQ22wXvMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFap9lIGbsvCxibrICVikNJeXOiRrJE8l/f4zP5D+V4IwF4ndq8BQlNA1A45r qoLX208N6gP5Gsq9NRtnX6FsGTUyX4vt2UQ/iRJLPVrq/fQtbeOy/BQRIOXceXOm 1XKHvEybaxAiRGsIs8gw9Vdtq3WRMxV/7blfQo4tC+olNV3jwTcDuZhaj5t93APz /omxiC/4D+Mb79o8Utzrva71BVFgYJWbh2SJZM5N/1XvwMB4CJGzvt8+lSpQ/PwI A8U8rI0Z1W6O93OSJzBJGgOr38fJ/YUAXfmriFY6dfvrEibLAp/g9bFOZZGXmToz Se8jpQehoyxSYGnrnvYtFsd9Fg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:47:12 2026 by rpki-client