$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json) Hash identifier: lOSYqlDC3gmYrASA8LSvb+seLLmHtbmsa6Ia/kZPil8= Subject key identifier: AF:51:73:CD:A8:DE:47:98:70:0A:67:DF:F1:EF:ED:6F:79:1D:96:C2 Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft Manifest number: 1D Signing time: Sun 05 Apr 2026 08:17:31 +0000 Manifest this update: Sun 05 Apr 2026 08:17:30 +0000 Manifest next update: Sun 12 Apr 2026 08:17:30 +0000 Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: 3/oSc6SEErmwDSA8HjUkeoKuEXJq3PW+akM5BdDI2bA=) 2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Validity Not Before: Apr 5 08:17:30 2026 GMT Not After : Apr 12 08:17:30 2026 GMT Subject: CN=69d21a9b-a17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:c0:68:f6:90:36:fd:ce:52:a3:86:29:cf: fd:75:15:b2:3e:bf:81:ba:78:bf:39:b7:d2:10:89: 9b:0d:d5:22:a8:94:7e:dd:dc:c7:1c:2c:29:38:f4: ae:07:6b:c6:46:3a:03:c8:f3:d8:93:3a:94:9f:22: 16:04:56:2d:84:74:bd:85:9e:45:1a:d7:0b:1e:fe: 9e:2e:14:43:a1:c3:16:b0:65:a3:95:ce:27:dc:91: 11:1e:45:ea:39:03:06:59:ac:a1:de:46:71:39:d7: e0:6d:0d:a5:a7:84:9d:20:3c:16:3c:9e:8d:24:b2: 24:a2:c3:ba:2d:e0:2e:be:ca:a2:6e:eb:97:73:a2: 3e:32:0e:01:b4:c7:93:c1:f4:a8:5d:ff:67:9d:b0: 67:2d:65:76:49:3e:ad:15:dd:49:76:f2:43:42:50: 7f:28:3a:03:fd:88:b8:5d:c7:18:59:ca:75:d0:c6: 49:63:3a:a9:5d:a8:fd:4c:c1:6a:4d:56:b8:96:2c: 7d:32:a5:7a:07:c2:14:0f:55:75:08:04:00:5a:34: cd:27:02:b0:aa:c5:01:ba:79:23:57:c2:12:11:ed: 02:ab:6c:82:df:ff:b3:7f:fb:68:18:63:04:ef:25: 29:08:57:7e:39:4b:18:f0:ce:f2:7c:a7:ab:61:12: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:73:CD:A8:DE:47:98:70:0A:67:DF:F1:EF:ED:6F:79:1D:96:C2 X509v3 Authority Key Identifier: keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:13:ca:d7:de:7d:e6:41:0e:46:e4:e4:31:b9:9b:88:18: 08:8b:b0:94:e7:7b:6c:13:1a:46:2c:8a:7c:f4:4e:e1:3c:ad: dd:5e:c7:a2:70:f7:9a:98:35:58:b1:d5:b2:dd:79:9e:88:88: d7:95:ae:ce:f6:ae:e6:c8:81:2d:90:0a:cf:c6:a2:82:c1:03: 3a:60:50:9b:30:3a:d1:c8:d5:27:8a:3a:f5:2f:19:66:8a:7c: 24:85:a9:ed:6c:fd:7d:f6:5e:95:d8:2b:00:dc:b8:2d:70:7a: bc:02:cc:9a:b1:a7:b5:8d:62:5e:1e:36:3b:2d:49:d8:b8:78: 4c:47:57:94:f9:9c:64:40:92:94:19:cf:68:4a:ab:ec:c3:dc: 2b:c4:0e:bd:31:bc:e8:95:06:0b:d2:e9:e3:19:66:c4:a6:b3: 0d:1f:f3:11:5e:c7:15:f7:83:03:da:81:1e:b7:a8:c7:e5:59: 3a:ec:06:81:3d:d1:61:b6:00:c6:da:b9:46:c6:ce:88:bb:a2: ed:4f:e5:53:fd:68:83:db:b3:8c:7b:65:1a:9c:76:72:24:75: d9:22:7e:43:25:8c:ef:b6:13:30:1a:56:ad:51:74:2f:9e:f4: 44:12:19:35:70:bf:28:e1:66:85:87:21:99:a0:49:35:63:86: 56:04:7a:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE ODE5Q0FFNDAeFw0yNjA0MDUwODE3MzBaFw0yNjA0MTIwODE3MzBaMBgxFjAUBgNV BAMTDTY5ZDIxYTliLWExN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6J8Bo9pA2/c5So4Ypz/11FbI+v4G6eL85t9IQiZsN1SKolH7d3MccLCk49K4H a8ZGOgPI89iTOpSfIhYEVi2EdL2FnkUa1wse/p4uFEOhwxawZaOVzifckREeReo5 AwZZrKHeRnE51+BtDaWnhJ0gPBY8no0ksiSiw7ot4C6+yqJu65dzoj4yDgG0x5PB 9Khd/2edsGctZXZJPq0V3Ul28kNCUH8oOgP9iLhdxxhZynXQxkljOqldqP1MwWpN VriWLH0ypXoHwhQPVXUIBABaNM0nArCqxQG6eSNXwhIR7QKrbILf/7N/+2gYYwTv JSkIV345SxjwzvJ8p6thErDHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr1Fzzaje R5hwCmff8e/tb3kdlsIwHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4 NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoyRPK19595kEORuTkMbmbiBgIi7CU53tsExpGLIp89E7hPK3dXseicPeamDVY sdWy3XmeiIjXla7O9q7myIEtkArPxqKCwQM6YFCbMDrRyNUnijr1Lxlminwkhant bP199l6V2CsA3LgtcHq8Asyasae1jWJeHjY7LUnYuHhMR1eU+ZxkQJKUGc9oSqvs w9wrxA69MbzolQYL0unjGWbEprMNH/MRXscV94MD2oEet6jH5Vk67AaBPdFhtgDG 2rlGxs6Iu6LtT+VT/WiD27OMe2UanHZyJHXZIn5DJYzvthMwGlatUXQvnvREEhk1 cL8o4WaFhyGZoEk1Y4ZWBHrv -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:20 2026 by rpki-client