$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft File: Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json) Hash identifier: vy37L73m3OdC+YTeQCH3Ax+F/ZjEyeRuEJddiiWXxEg= Subject key identifier: 43:B7:E8:1A:BE:B3:23:7C:58:AA:6E:87:DA:D7:B6:B3:E3:3A:A7:9D Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft Manifest number: 0C20 Signing time: Sat 04 Apr 2026 18:37:22 +0000 Manifest this update: Sat 04 Apr 2026 18:37:22 +0000 Manifest next update: Sat 11 Apr 2026 18:37:22 +0000 Files and hashes: 1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: iHQsnw+qXYtkIPopb4u1+LF7rVIMlokYWC2QmQYw/sc=) 2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: y7I7T2g0mI0lsLqMSMjVPNFG5gKcdIMy2Rd0f1B2C0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Validity Not Before: Apr 4 18:37:22 2026 GMT Not After : Apr 11 18:37:22 2026 GMT Subject: CN=69d15a62-bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:79:f7:c7:b3:a6:fe:1b:2b:ab:74:e9:04: 4a:31:50:c5:0e:14:0e:0e:55:9e:9c:4c:d5:06:18: 1d:65:5c:0e:3f:9b:d0:c0:0e:e2:39:c9:ea:cd:a9: 2b:6a:28:88:1b:2c:a4:96:3b:c9:e4:f5:21:85:80: 4e:ad:53:36:67:9a:d9:f3:ee:89:bf:6c:ae:32:32: 58:ed:de:e9:72:43:dd:02:bf:6a:3e:ec:83:37:2d: 35:be:d8:f3:cf:d3:9c:ef:8c:1f:0c:7b:50:18:1b: c1:20:f6:3e:0d:83:0c:f2:5c:f6:92:57:e6:75:8a: 19:61:77:90:3a:2f:2b:49:df:e1:58:04:47:ee:b9: db:9c:77:9d:77:db:b7:aa:5a:8f:22:2a:8b:c2:09: e2:8a:1a:d9:f5:75:96:ce:06:b4:ff:5b:9c:db:33: 78:75:6d:b5:a0:72:1d:45:50:e6:9c:d0:fc:24:85: 3d:3b:8a:a9:3f:d3:7b:e2:18:af:20:01:d4:41:ff: 0e:42:26:36:93:00:f6:05:cf:de:8c:bf:82:00:5a: 3a:e3:1f:4c:03:4f:18:59:de:a3:e4:2d:0b:24:a5: 6e:9a:ff:e7:84:0b:3d:70:2d:5d:e4:73:ad:e0:58: ff:f0:4b:3b:7c:f7:3d:13:f9:ce:ec:86:b3:d5:63: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B7:E8:1A:BE:B3:23:7C:58:AA:6E:87:DA:D7:B6:B3:E3:3A:A7:9D X509v3 Authority Key Identifier: keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:12:93:50:f4:ea:7e:b4:af:f8:48:b0:c1:48:28:93:87:5c: eb:2b:5a:b3:28:23:ca:a5:df:35:14:67:4f:62:26:ff:33:95: 3a:70:fe:5d:e1:0b:71:de:84:5c:95:ef:e1:92:aa:ca:c4:d4: ec:25:a7:e0:88:4b:a9:a1:50:4d:10:10:9d:41:9b:0c:2c:b6: 8a:31:db:92:40:a0:54:4c:60:4d:0c:45:d6:25:62:b2:54:41: 62:b8:07:63:e9:38:4c:43:45:5b:20:0f:9d:fe:40:b7:4c:7c: c7:6a:72:6e:34:25:f2:99:e5:60:19:36:7d:33:ee:65:df:66: 39:06:45:22:f6:d6:92:4b:e9:a8:24:ce:a9:4c:6f:a7:3d:f5: ea:8c:10:5f:42:63:89:28:4c:48:21:73:a4:ee:3e:40:3c:48: 6b:87:dd:95:0f:9d:46:b6:46:b0:49:83:ec:b3:4e:05:1a:a3: 0c:7e:8d:01:47:dd:75:f8:39:54:88:ba:b1:75:1a:41:c3:8d: df:6d:ad:e8:3c:3d:3e:fe:ce:4b:58:32:8d:bd:80:71:fb:06: 69:f3:67:40:d6:11:11:6b:0a:27:ae:aa:15:77:28:15:02:13: 79:fd:35:45:60:1e:cd:db:63:20:6c:f6:a2:7e:5b:d8:0e:73: c2:4d:2c:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFODkxMTAvBgNVBAUTKDBERkQ4MDFFRTk2NjIyRUQxN0RGNTVEN0FBQTY0Qzcx RUZGOUI3QkQwHhcNMjYwNDA0MTgzNzIyWhcNMjYwNDExMTgzNzIyWjAYMRYwFAYD VQQDEw02OWQxNWE2Mi1iZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiZ598ezpv4bK6t06QRKMVDFDhQODlWenEzVBhgdZVwOP5vQwA7iOcnqzakr aiiIGyykljvJ5PUhhYBOrVM2Z5rZ8+6Jv2yuMjJY7d7pckPdAr9qPuyDNy01vtjz z9Oc74wfDHtQGBvBIPY+DYMM8lz2klfmdYoZYXeQOi8rSd/hWARH7rnbnHedd9u3 qlqPIiqLwgniihrZ9XWWzga0/1uc2zN4dW21oHIdRVDmnND8JIU9O4qpP9N74hiv IAHUQf8OQiY2kwD2Bc/ejL+CAFo64x9MA08YWd6j5C0LJKVumv/nhAs9cC1d5HOt 4Fj/8Es7fPc9E/nO7Iaz1WPRuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEO36Bq+ syN8WKpuh9rXtrPjOqedMB8GA1UdIwQYMBaAFA39gB7pZiLtF99V16qmTHHv+be9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEU4OS9DNTMzRDcyNDJB RjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1MFgzMVhYcXFaTWNlXzV0 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmMkFIdWxtSXUwWDMxWFhxcVpNY2VfNXQ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEU4OS9DNTMzRDcyNDJBRjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1 MFgzMVhYcXFaTWNlXzV0NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUBKTUPTqfrSv+EiwwUgok4dc6ytasygjyqXfNRRnT2Im/zOVOnD+XeELcd6E XJXv4ZKqysTU7CWn4IhLqaFQTRAQnUGbDCy2ijHbkkCgVExgTQxF1iVislRBYrgH Y+k4TENFWyAPnf5At0x8x2pybjQl8pnlYBk2fTPuZd9mOQZFIvbWkkvpqCTOqUxv pz316owQX0JjiShMSCFzpO4+QDxIa4fdlQ+dRrZGsEmD7LNOBRqjDH6NAUfddfg5 VIi6sXUaQcON322t6Dw9Pv7OS1gyjb2AcfsGafNnQNYREWsKJ66qFXcoFQITef01 RWAezdtjIGz2on5b2A5zwk0spw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:50 2026 by rpki-client