$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft File: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json) Hash identifier: wUnEUiPYUH9QPRaaI24vR78uNYyZb8LWTxGDqXFb0u8= Subject key identifier: 23:53:A7:EE:44:22:1D:01:CB:C9:55:5B:0D:DC:88:41:50:AB:4B:1D Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft Manifest number: 0158 Signing time: Sun 05 Apr 2026 04:28:37 +0000 Manifest this update: Sun 05 Apr 2026 04:28:37 +0000 Manifest next update: Sun 12 Apr 2026 04:28:37 +0000 Files and hashes: 1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: bZL2LLhd8+yOcK5YPkoV1ADpcAsSpRuPSew/1LwU1Ls=) 2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: 7pTLODEiwxdgiEvkl8qH82EnqbNP4jVD6G5IWDrN454=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24 Validity Not Before: Apr 5 04:28:37 2026 GMT Not After : Apr 12 04:28:37 2026 GMT Subject: CN=69d1e4f5-f194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:00:09:ac:04:c6:0e:b6:21:67:03:f6:65: 73:28:67:d5:6f:87:4d:21:ce:f8:99:7d:ee:22:f9: 8a:82:ef:2a:de:f6:e9:e5:eb:2d:ee:1c:10:74:c0: 58:81:63:c2:ca:e3:90:6f:30:dc:96:41:76:19:88: 67:13:d6:5c:b0:ea:ff:42:9b:a3:3c:34:c3:46:73: ef:bb:13:9a:63:0d:f6:3d:ce:01:d3:c8:d1:2c:af: ee:ac:0e:bb:13:0c:9f:ba:40:83:f3:a1:4d:61:63: 78:53:e2:f0:79:cb:6e:b9:29:8b:12:75:d9:49:34: 56:ed:1d:ba:0f:81:b5:55:2b:94:21:7a:aa:d9:1e: 52:a5:9f:8b:a3:91:ff:3f:ec:e0:51:69:fd:4b:4c: 93:85:20:5b:d8:a6:56:c9:70:3f:6f:13:15:4e:79: 21:83:0a:f9:2e:ad:ac:97:fd:c0:14:13:f7:f8:a7: a1:7a:4a:d7:dd:ad:4c:0f:49:21:23:ea:d1:aa:e1: 74:2e:7c:63:1f:b0:d9:38:ea:13:d5:a0:86:59:f1: 1b:9e:28:96:ad:1c:da:ed:2c:2a:06:77:06:3a:29: 4e:92:f9:07:94:a0:b4:5b:4f:ed:23:ac:1b:a1:b0: e0:21:38:28:e1:a6:21:26:52:af:ce:b1:ed:e1:6a: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:A7:EE:44:22:1D:01:CB:C9:55:5B:0D:DC:88:41:50:AB:4B:1D X509v3 Authority Key Identifier: keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4e:4c:60:59:d4:08:7d:f2:0c:a1:ee:87:bd:cc:65:e0:4f: fc:6f:9b:35:dd:bc:df:5a:6c:32:0a:8f:e2:d2:cf:71:bd:9e: d5:94:19:9d:14:a9:54:43:6a:47:9a:db:45:a6:1e:98:85:66: d0:e4:f7:33:41:ae:49:2b:7d:f1:e1:25:5c:88:4c:04:fd:c6: 43:f3:8d:cb:62:d5:01:f5:46:eb:54:9b:4b:19:ab:00:c6:08: 8f:a3:ff:37:d2:54:12:0b:68:15:8b:e2:5b:43:56:55:b3:1b: 09:2a:95:63:7c:21:98:a2:61:ec:51:f9:1c:0f:f9:e1:bc:a9: e2:5e:f9:18:ef:06:84:12:90:c1:c0:6a:11:17:7d:58:85:5b: dc:90:25:ea:46:cc:30:e5:88:8a:f9:31:10:47:ce:25:90:43: 49:6e:8c:a4:3d:64:70:c3:8d:d8:d5:bf:a8:a5:8c:ca:4d:3c: ba:13:02:d2:33:f4:54:12:5d:38:f3:2f:5c:9a:b0:17:a9:71: 2a:5e:cf:7d:a4:16:e4:ee:c6:ee:83:a8:62:90:a9:86:9d:9c: 02:58:b8:51:07:66:1e:7a:4c:11:55:43:f2:e9:b3:2e:69:b8: 7b:81:58:1d:93:48:a5:9f:6a:71:fc:79:f2:78:91:dc:99:0a: 1a:2a:a0:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2RjkxMTAvBgNVBAUTKDgyNzM1QjNGOUM5RUE5NzVENEUwMkE5NEUyQTEwODFC QTRBOEFCMjQwHhcNMjYwNDA1MDQyODM3WhcNMjYwNDEyMDQyODM3WjAYMRYwFAYD VQQDEw02OWQxZTRmNS1mMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8kACawExg62IWcD9mVzKGfVb4dNIc74mX3uIvmKgu8q3vbp5est7hwQdMBY gWPCyuOQbzDclkF2GYhnE9ZcsOr/QpujPDTDRnPvuxOaYw32Pc4B08jRLK/urA67 EwyfukCD86FNYWN4U+LwectuuSmLEnXZSTRW7R26D4G1VSuUIXqq2R5SpZ+Lo5H/ P+zgUWn9S0yThSBb2KZWyXA/bxMVTnkhgwr5Lq2sl/3AFBP3+KehekrX3a1MD0kh I+rRquF0LnxjH7DZOOoT1aCGWfEbniiWrRza7SwqBncGOilOkvkHlKC0W0/tI6wb obDgITgo4aYhJlKvzrHt4Wq+RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNTp+5E Ih0By8lVWw3ciEFQq0sdMB8GA1UdIwQYMBaAFIJzWz+cnql11OAqlOKhCBukqKsk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTZGOS9GOTQ5NDAwODJB MUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFYWFU0Q3FVNHFFSUc2U29x eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duTmJQNXllcVhYVTRDcVU0cUVJRzZTb3F5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTZGOS9GOTQ5NDAwODJBMUQxMUVGQTlFMUY5ODVDNEY5QUUwMi9nbk5iUDV5ZXFY WFU0Q3FVNHFFSUc2U29xeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXE5MYFnUCH3yDKHuh73MZeBP/G+bNd2831psMgqP4tLPcb2e1ZQZnRSpVENq R5rbRaYemIVm0OT3M0GuSSt98eElXIhMBP3GQ/ONy2LVAfVG61SbSxmrAMYIj6P/ N9JUEgtoFYviW0NWVbMbCSqVY3whmKJh7FH5HA/54byp4l75GO8GhBKQwcBqERd9 WIVb3JAl6kbMMOWIivkxEEfOJZBDSW6MpD1kcMON2NW/qKWMyk08uhMC0jP0VBJd OPMvXJqwF6lxKl7PfaQW5O7G7oOoYpCphp2cAli4UQdmHnpMEVVD8umzLmm4e4FY HZNIpZ9qcfx58niR3JkKGiqg0Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:42:24 2026 by rpki-client