$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: iU1QrQKcTXMoVLJjcMw5ppIfKaejYfgf2jPL4wCDZmI= Subject key identifier: 73:A0:D1:EE:46:4A:8D:3E:6B:24:84:F6:D9:56:58:CB:F7:58:1F:94 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 3525 Signing time: Sat 04 Apr 2026 14:53:16 +0000 Manifest this update: Sat 04 Apr 2026 14:53:16 +0000 Manifest next update: Sat 11 Apr 2026 14:53:16 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: vdEQ+qjZI7RTzWDldJ8MulNufIhtJ45qEKTRVQGtC1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Apr 4 14:53:16 2026 GMT Not After : Apr 11 14:53:16 2026 GMT Subject: CN=69d125dc-ea3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:a0:ac:69:39:a4:d3:7b:07:8b:46:73:79: 33:a0:3c:9a:6f:92:e9:6d:dd:b8:b0:ba:fc:5a:a6: 52:08:ab:cf:2a:ed:53:ec:08:c3:fe:e3:20:7b:d1: e7:39:52:fd:f9:a6:1a:27:a8:90:0e:15:87:ea:56: 08:3d:56:dc:20:e7:96:91:90:88:ae:fb:aa:1a:03: d1:5e:81:16:12:f1:36:e9:e3:00:23:dd:a3:67:1a: 1a:52:48:d1:ad:e3:1b:e7:76:a1:0f:74:7c:fb:a0: d1:a4:fc:b7:2a:78:5b:4a:2a:7f:06:fb:e6:29:8b: 43:c5:37:ff:7e:e3:52:0a:25:49:f4:3f:9a:d0:11: 84:4c:e8:26:98:fa:93:05:e8:41:2a:03:ff:2c:ae: c1:25:2d:c8:ce:2e:a2:84:b6:bc:a0:fc:de:69:70: ea:c2:e4:dc:0b:9d:27:2e:35:4b:9f:dd:51:bd:26: 9e:31:c8:d3:d4:59:d2:9c:6d:5e:39:43:a7:06:e4: 6d:ec:61:a0:8c:37:0d:69:a6:5a:65:af:5e:93:c7: bb:cf:3c:91:4e:c9:56:c5:8b:40:70:f1:59:cc:d0: cc:a5:87:96:ad:f8:9c:fa:95:57:97:3a:38:e4:7f: 1d:0a:55:b2:e7:9c:a5:9f:a0:45:be:33:05:d2:cf: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A0:D1:EE:46:4A:8D:3E:6B:24:84:F6:D9:56:58:CB:F7:58:1F:94 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7b:31:fc:f1:57:ba:24:db:33:72:6d:a0:1e:ea:79:c3:00: a3:98:7d:15:4e:18:0a:0f:50:b1:04:04:cf:5a:08:18:27:ef: 97:5f:49:a3:89:03:ed:02:a6:4c:2a:70:d1:08:2d:d7:2b:55: 64:11:d8:27:5b:fb:25:6c:ce:5f:2a:eb:0c:ec:66:71:49:8d: eb:d8:da:a3:4c:b3:e1:b1:97:ab:2c:27:61:41:07:a8:cd:fd: 5b:6d:ad:25:b4:f2:c4:fd:1d:13:c0:64:7f:d6:9a:2b:bd:4c: f3:14:56:93:ae:d5:f9:8b:81:31:54:4e:a3:40:06:b4:e4:0c: aa:65:4b:be:21:44:5e:5a:79:44:01:03:42:46:f1:59:47:af: b0:e3:2e:6c:f0:c4:b0:79:a2:a9:ef:ef:9e:80:38:2f:cf:5f: 2e:09:cc:3c:25:c2:ff:86:5a:d7:9a:53:1b:ea:ed:53:67:7f: 9c:99:dd:f4:f1:c1:2a:9c:71:c0:86:d3:80:d1:88:bb:6d:e7: 0b:ad:e0:c0:29:43:69:b2:94:75:76:bd:d5:1c:7d:20:8c:23: 43:8c:8d:de:9e:bf:9a:c0:0b:e4:6d:93:2f:23:4d:45:cf:15: 04:ec:4b:2f:d6:b0:f9:89:40:b8:66:80:09:5d:b4:59:08:d2: 77:12:c2:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjYwNDA0MTQ1MzE2WhcNMjYwNDExMTQ1MzE2WjAYMRYwFAYD VQQDEw02OWQxMjVkYy1lYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQqgrGk5pNN7B4tGc3kzoDyab5Lpbd24sLr8WqZSCKvPKu1T7AjD/uMge9Hn OVL9+aYaJ6iQDhWH6lYIPVbcIOeWkZCIrvuqGgPRXoEWEvE26eMAI92jZxoaUkjR reMb53ahD3R8+6DRpPy3KnhbSip/BvvmKYtDxTf/fuNSCiVJ9D+a0BGETOgmmPqT BehBKgP/LK7BJS3Izi6ihLa8oPzeaXDqwuTcC50nLjVLn91RvSaeMcjT1FnSnG1e OUOnBuRt7GGgjDcNaaZaZa9ek8e7zzyRTslWxYtAcPFZzNDMpYeWrfic+pVXlzo4 5H8dClWy55yln6BFvjMF0s9q5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOg0e5G So0+aySE9tlWWMv3WB+UMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVnsx/PFXuiTbM3JtoB7qecMAo5h9FU4YCg9QsQQEz1oIGCfvl19Jo4kD7QKm TCpw0Qgt1ytVZBHYJ1v7JWzOXyrrDOxmcUmN69jao0yz4bGXqywnYUEHqM39W22t JbTyxP0dE8Bkf9aaK71M8xRWk67V+YuBMVROo0AGtOQMqmVLviFEXlp5RAEDQkbx WUevsOMubPDEsHmiqe/vnoA4L89fLgnMPCXC/4Za15pTG+rtU2d/nJnd9PHBKpxx wIbTgNGIu23nC63gwClDabKUdXa91Rx9IIwjQ4yN3p6/msAL5G2TLyNNRc8VBOxL L9aw+YlAuGaACV20WQjSdxLCnw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:08 2026 by rpki-client