$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: bmXkIUH/4RIfFmQrrM5l4WsJYnkB8R1WgOqhgQn6QQM= Subject key identifier: 97:D8:5C:C3:0B:CF:2C:D0:7F:0A:13:8C:24:69:5D:FB:05:6C:B1:85 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 017F Signing time: Sun 05 Apr 2026 04:05:38 +0000 Manifest this update: Sun 05 Apr 2026 04:05:38 +0000 Manifest next update: Sun 12 Apr 2026 04:05:38 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: zZnHmAHjXwztoTNRTXFHr4zXmkWGBLu5nXWibKETnDg=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: NSdNu+vXnYcTSniUQqnt8p+QBPXnXEprmzukCezOx0U=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: RseQd9x0Qtjlynx4q/LTY8jY17t9oSxHJT5UuEAvOWU=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: irjK47i6Sld0YH0p5+DxVPsO0MEpAL8iYc9/ecny0Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Apr 5 04:05:38 2026 GMT Not After : Apr 12 04:05:38 2026 GMT Subject: CN=69d1df92-ac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:39:36:0f:a4:53:cc:2a:bd:1e:db:ae:fa:01: af:c8:8b:9c:27:6b:c1:8d:84:50:1a:4d:5f:5f:e8: 84:ae:2a:ff:8f:50:83:ad:ce:21:f9:65:86:5f:55: b1:c3:63:b8:17:bf:6d:87:c6:5f:e6:57:e4:d5:8c: 56:88:2c:00:2a:46:03:60:fb:14:38:88:e5:68:20: 11:b7:fe:56:2c:2d:57:68:85:a5:de:30:b0:d1:c9: 7b:2f:09:28:05:28:de:6c:40:04:07:9f:44:ba:35: 68:71:3e:ab:64:a4:77:d5:b1:cd:b4:86:7d:58:69: 7e:c1:9a:7a:99:2f:b7:8c:75:c5:a6:bf:6d:ff:76: 02:4d:fe:5d:c9:7e:f8:56:ac:53:9d:d4:54:4f:ae: f0:fe:7f:53:08:05:c7:91:56:66:6c:d4:f3:e5:58: 48:7a:11:aa:59:b3:c4:03:2a:f2:ef:8c:00:11:e7: b6:78:3c:9a:a4:07:73:30:f4:26:03:45:25:56:0d: 44:50:d7:e7:da:14:91:a3:7d:58:66:e8:5a:2f:cb: 48:b9:22:60:f6:8a:15:53:91:93:fa:ff:4c:49:c8: c4:cf:56:5f:b9:bd:6c:5a:56:f5:75:00:e4:2a:8f: 53:bf:d3:32:10:5c:7e:a6:31:39:e6:a9:7e:4e:fa: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D8:5C:C3:0B:CF:2C:D0:7F:0A:13:8C:24:69:5D:FB:05:6C:B1:85 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:3b:ad:24:ff:55:37:21:b1:29:cf:9b:4d:2b:4a:04:25:8a: f4:d3:15:4d:bc:98:f9:1c:7b:51:f1:21:95:f3:79:81:1e:b0: 7c:61:f1:60:69:47:1b:d8:8d:c7:de:47:c7:6b:1e:7f:93:2c: a5:69:92:44:ae:39:38:6a:97:3b:7b:90:32:8e:ef:7c:58:fe: 01:89:17:44:4f:58:4c:16:fe:f7:be:69:82:35:29:1f:7b:29: 08:84:92:ae:2d:8a:69:cf:9c:c9:48:67:d9:0a:e8:ab:bb:67: 46:1c:64:a0:b8:3e:a4:db:9e:c1:49:28:d7:63:99:09:8e:ad: 67:1d:1a:0a:95:95:5b:e0:01:8f:35:13:e9:49:e1:38:7d:e6: 97:22:4d:85:b7:57:da:b9:85:04:34:5e:86:19:f3:2d:a0:c5: 72:d8:f0:90:87:53:48:b3:a1:6a:ee:24:05:87:f1:e8:f9:b2: c3:4b:76:bc:10:c3:a1:a4:34:25:75:59:cc:f1:44:4b:41:f3: f1:dd:d9:91:a6:36:30:80:2a:9e:57:0b:55:0c:c9:00:33:96: 39:46:64:6c:a9:7d:7b:4a:ab:38:85:00:c9:fd:7c:ef:da:ad: 4e:0a:30:62:93:4e:15:bf:6b:f7:58:96:ae:af:65:45:3a:90: e3:4f:b3:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwNDA1MDQwNTM4WhcNMjYwNDEyMDQwNTM4WjAYMRYwFAYD VQQDEw02OWQxZGY5Mi1hYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Tk2D6RTzCq9Htuu+gGvyIucJ2vBjYRQGk1fX+iErir/j1CDrc4h+WWGX1Wx w2O4F79th8Zf5lfk1YxWiCwAKkYDYPsUOIjlaCARt/5WLC1XaIWl3jCw0cl7Lwko BSjebEAEB59EujVocT6rZKR31bHNtIZ9WGl+wZp6mS+3jHXFpr9t/3YCTf5dyX74 VqxTndRUT67w/n9TCAXHkVZmbNTz5VhIehGqWbPEAyry74wAEee2eDyapAdzMPQm A0UlVg1EUNfn2hSRo31YZuhaL8tIuSJg9ooVU5GT+v9MScjEz1Zfub1sWlb1dQDk Ko9Tv9MyEFx+pjE55ql+TvrvtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfYXMML zyzQfwoTjCRpXfsFbLGFMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzutJP9VNyGxKc+bTStKBCWK9NMVTbyY+Rx7UfEhlfN5gR6wfGHxYGlHG9iN x95Hx2sef5MspWmSRK45OGqXO3uQMo7vfFj+AYkXRE9YTBb+975pgjUpH3spCISS ri2Kac+cyUhn2Qroq7tnRhxkoLg+pNuewUko12OZCY6tZx0aCpWVW+ABjzUT6Unh OH3mlyJNhbdX2rmFBDRehhnzLaDFctjwkIdTSLOhau4kBYfx6Pmyw0t2vBDDoaQ0 JXVZzPFES0Hz8d3ZkaY2MIAqnlcLVQzJADOWOUZkbKl9e0qrOIUAyf1879qtTgow YpNOFb9r91iWrq9lRTqQ40+zaw== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:45 2026 by rpki-client