$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json) Hash identifier: WkJqY87C5RCh4f2ctO/oN0OFhhFf1ZaWOyYV+tWFscs= Subject key identifier: A5:2C:CA:EA:5A:6A:84:68:43:06:E4:33:28:EC:B6:B6:75:9D:88:A0 Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB Certificate issuer: /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft Manifest number: 1A Signing time: Sun 05 Apr 2026 08:18:31 +0000 Manifest this update: Sun 05 Apr 2026 08:18:30 +0000 Manifest next update: Sun 12 Apr 2026 08:18:30 +0000 Files and hashes: 1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: /3EJlGz16EsL9ng58xjC3l7KybGJjl8tPFSO6d05JFM=) 2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB Validity Not Before: Apr 5 08:18:30 2026 GMT Not After : Apr 12 08:18:30 2026 GMT Subject: CN=69d21ad6-8d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:ad:c3:d0:ad:8b:b0:f9:d6:f9:c2:d9:00: 58:52:73:0b:d9:88:38:97:21:65:88:bc:08:81:71: fa:0a:57:ca:d3:2d:14:f9:84:e9:14:60:34:c5:cb: c6:05:d0:56:f6:1b:27:d7:e0:13:57:66:4f:05:42: de:cb:4c:ad:e6:f4:39:4f:19:2e:68:68:fd:2c:d0: f6:5a:97:5e:8a:06:44:4a:3b:f7:d0:9f:3c:96:b9: 75:42:c2:12:f2:91:99:99:91:9f:0c:84:29:f4:e6: 22:2c:6e:83:a9:5f:e8:7d:47:0c:1b:09:6b:9d:94: 73:92:f3:8b:10:58:c4:c4:a1:ca:12:51:87:8a:6a: 4b:e0:85:90:dc:ff:0d:3d:a3:a4:be:fa:12:05:35: 42:b7:1c:ae:52:6f:c3:9b:40:37:fc:39:3e:cc:e2: 5e:1c:33:0c:d1:5a:15:4f:8d:46:00:2a:3e:7e:13: 1d:4d:17:d2:f4:c4:0a:93:20:5c:2f:75:df:7e:94: 29:8f:81:60:48:d5:0c:9e:d8:78:cb:7b:07:5c:6b: f9:9d:f9:11:c4:ad:32:f2:e7:fe:63:a4:02:f1:4f: 9f:f4:c6:1b:2a:9d:de:f7:55:fd:56:2f:5c:73:bf: 57:9a:35:5e:95:43:1f:a6:db:12:00:dc:d8:09:fe: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2C:CA:EA:5A:6A:84:68:43:06:E4:33:28:EC:B6:B6:75:9D:88:A0 X509v3 Authority Key Identifier: keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:4a:1e:53:c1:10:92:fc:18:24:5a:54:11:78:cd:3d:57:b0: bc:62:ab:79:7d:c3:79:01:34:2b:bf:1c:bf:d5:76:26:3b:34: b2:8e:cf:ea:11:f4:51:b9:b6:11:3d:15:7b:95:92:01:67:2b: 03:ad:9e:34:76:e6:75:45:ce:80:f0:99:99:19:12:c1:fd:ff: 8b:87:e4:55:c8:57:17:a3:b7:1f:86:23:07:85:e7:c9:73:ff: 07:81:89:5a:1a:9f:e6:3f:9c:50:87:16:ef:47:f0:25:c7:0e: f9:48:95:2a:70:8a:0d:5c:6c:a0:60:31:ed:48:9b:6e:fe:41: 0a:70:12:12:e5:8c:22:7b:79:cc:69:05:a0:36:0e:1d:42:47: b4:dd:28:88:8d:1e:5f:57:7c:4d:16:9a:96:31:22:a6:b5:3f: 5a:ae:ae:12:8d:3e:7c:f2:56:88:1f:1e:a8:d6:58:06:da:be: 13:a2:f5:47:c1:21:9b:ef:d5:a7:53:01:3e:8d:7c:b4:ed:f1: bc:86:fc:f8:4e:30:eb:19:cb:a3:39:3a:e7:66:58:60:62:6a: 8e:b4:fd:a8:b5:0e:4e:6c:08:1c:93:07:aa:d3:b0:77:8f:28: b9:0e:87:94:f7:86:64:2c:26:e9:5f:05:0f:11:c0:2d:bb:57: f9:c2:7b:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE1NzExMC8GA1UEBRMoRUY4MDQyQjQyMUExMDE3ODc1M0FCOTUzOERBMzQzQjg5 ODc4OURCQjAeFw0yNjA0MDUwODE4MzBaFw0yNjA0MTIwODE4MzBaMBgxFjAUBgNV BAMTDTY5ZDIxYWQ2LThkNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCM/q3D0K2LsPnW+cLZAFhScwvZiDiXIWWIvAiBcfoKV8rTLRT5hOkUYDTFy8YF 0Fb2GyfX4BNXZk8FQt7LTK3m9DlPGS5oaP0s0PZal16KBkRKO/fQnzyWuXVCwhLy kZmZkZ8MhCn05iIsboOpX+h9RwwbCWudlHOS84sQWMTEocoSUYeKakvghZDc/w09 o6S++hIFNUK3HK5Sb8ObQDf8OT7M4l4cMwzRWhVPjUYAKj5+Ex1NF9L0xAqTIFwv dd9+lCmPgWBI1Qye2HjLewdca/md+RHErTLy5/5jpALxT5/0xhsqnd73Vf1WL1xz v1eaNV6VQx+m2xIA3NgJ/rQpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpSzK6lpq hGhDBuQzKOy2tnWdiKAwHwYDVR0jBBgwFoAU74BCtCGhAXh1OrlTjaNDuJh4nbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzBBNzkwQkU0MTE0 MjExRjE5RDM3NjI4RjIxM0Q4QzY3Lzc0QkN0Q0doQVhoMU9ybFRqYU5EdUpoNG5i cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzRCQ3RDR2hBWGgxT3JsVGphTkR1Smg0bmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTU3LzBBNzkwQkU0MTE0MjExRjE5RDM3NjI4RjIxM0Q4QzY3Lzc0QkN0Q0doQVho MU9ybFRqYU5EdUpoNG5icy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCUSh5TwRCS/BgkWlQReM09V7C8Yqt5fcN5ATQrvxy/1XYmOzSyjs/qEfRRubYR PRV7lZIBZysDrZ40duZ1Rc6A8JmZGRLB/f+Lh+RVyFcXo7cfhiMHhefJc/8HgYla Gp/mP5xQhxbvR/Alxw75SJUqcIoNXGygYDHtSJtu/kEKcBIS5Ywie3nMaQWgNg4d Qke03SiIjR5fV3xNFpqWMSKmtT9arq4SjT588laIHx6o1lgG2r4TovVHwSGb79Wn UwE+jXy07fG8hvz4TjDrGcujOTrnZlhgYmqOtP2otQ5ObAgckweq07B3jyi5DoeU 94ZkLCbpXwUPEcAtu1f5wnvX -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:13 2026 by rpki-client