$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: uZ8QKpGqEVBd/T9SzqaXTXIueotwJ9Q7MQLe6zzS7i8= Subject key identifier: 47:65:DC:F8:41:F2:21:7E:1B:27:35:0C:D6:9D:59:13:18:30:F4:5E Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: 98 Signing time: Mon 27 Apr 2026 07:25:45 +0000 Manifest this update: Mon 27 Apr 2026 07:25:44 +0000 Manifest next update: Mon 04 May 2026 07:25:44 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: T4TRJ4J/cV5rq9pvKY1a6TmEKMWokSlU3nSDb9Cx/QU=) 2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=) 3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 07:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Apr 27 07:25:44 2026 GMT Not After : May 4 07:25:44 2026 GMT Subject: CN=69ef0f78-dea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:a2:9b:14:55:a6:4a:be:9e:8d:05:cc:e1: e7:7d:c3:c9:d0:8b:70:79:bc:17:31:c6:3a:fa:6d: 33:af:b9:12:f8:e0:35:10:0f:15:cb:c3:2d:a1:0e: ff:b9:81:63:01:15:02:7e:e3:71:11:dd:44:d9:cf: c2:77:55:67:3d:18:6a:e5:fb:24:08:26:fe:7e:01: 5a:53:cb:83:77:62:7d:d3:d5:d2:ef:f7:77:15:6b: 79:af:01:5e:c5:ee:03:47:19:74:53:e0:1b:c8:2d: 72:b0:b4:4d:be:2e:92:eb:87:89:03:1f:a4:4f:9d: ca:95:47:a8:d9:cb:71:5e:98:fe:66:d3:96:cf:9f: 9e:12:17:0f:24:2f:08:63:2a:ba:c7:4c:96:f8:2a: cc:28:97:48:f8:5c:81:79:be:25:fa:b1:60:1e:46: 35:5b:ef:65:7e:8d:05:bb:b9:a9:7b:b9:f2:b6:8f: 38:ba:f7:cb:eb:89:a9:2c:e5:48:0f:67:92:d5:96: 30:6e:65:d4:55:29:f1:11:5e:98:d6:5c:82:7c:c1: f8:40:b8:4a:6d:14:27:9c:32:85:86:04:c2:fb:e0: 4c:1d:61:4d:11:02:9f:af:09:66:14:17:3a:3e:c4: b6:34:55:f1:7d:1d:95:65:ea:d8:98:08:f9:d9:91: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:65:DC:F8:41:F2:21:7E:1B:27:35:0C:D6:9D:59:13:18:30:F4:5E X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:12:cd:62:28:89:36:2b:82:05:54:a3:ce:8d:b6:3a:04:23: 80:d8:cc:be:c7:8a:7b:9f:a0:3f:3d:fd:e5:6c:d3:fa:22:5e: c2:d5:a1:c2:89:6c:c2:7b:0c:2c:38:bb:48:1b:f1:9a:1e:2b: 55:22:27:ce:98:eb:8f:8c:02:0c:38:19:31:22:89:b5:fe:d4: 75:97:de:20:34:a8:14:74:fd:4b:f9:24:0f:38:58:98:c6:13: fa:6f:83:9d:0c:8b:11:15:3b:41:88:1c:07:16:4f:23:ec:bd: 9e:47:67:1d:34:b0:74:6e:c5:58:3f:18:af:0c:d0:e1:0e:be: 0c:b2:90:15:73:13:de:ec:0a:3f:3b:9f:e8:8e:6a:2a:b8:e0: 35:e0:c0:56:54:45:ab:50:3b:de:8f:6d:2e:03:19:40:90:9c: eb:92:10:d4:6b:67:ab:c1:76:6c:df:39:de:2e:bd:64:2c:a4: 62:04:ce:9e:62:ec:ba:ff:e1:4f:e1:33:32:94:3c:36:09:fa: 76:1d:37:91:e6:e7:e5:43:8f:6f:32:24:87:97:ad:8c:2b:af: 72:9f:8b:02:95:19:57:ab:41:8b:23:ad:23:84:a0:ca:c9:73: 31:26:52:f1:b2:48:a4:27:dc:58:07:51:43:15:3b:4e:c3:a3: 53:4d:c6:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwNDI3MDcyNTQ0WhcNMjYwNTA0MDcyNTQ0WjAYMRYwFAYD VQQDEw02OWVmMGY3OC1kZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Q6imxRVpkq+no0FzOHnfcPJ0ItwebwXMcY6+m0zr7kS+OA1EA8Vy8MtoQ7/ uYFjARUCfuNxEd1E2c/Cd1VnPRhq5fskCCb+fgFaU8uDd2J909XS7/d3FWt5rwFe xe4DRxl0U+AbyC1ysLRNvi6S64eJAx+kT53KlUeo2ctxXpj+ZtOWz5+eEhcPJC8I Yyq6x0yW+CrMKJdI+FyBeb4l+rFgHkY1W+9lfo0Fu7mpe7nyto84uvfL64mpLOVI D2eS1ZYwbmXUVSnxEV6Y1lyCfMH4QLhKbRQnnDKFhgTC++BMHWFNEQKfrwlmFBc6 PsS2NFXxfR2VZerYmAj52ZHbxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdl3PhB 8iF+Gyc1DNadWRMYMPReMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhLNYiiJNiuCBVSjzo22OgQjgNjMvseKe5+gPz395WzT+iJewtWhwolswnsM LDi7SBvxmh4rVSInzpjrj4wCDDgZMSKJtf7UdZfeIDSoFHT9S/kkDzhYmMYT+m+D nQyLERU7QYgcBxZPI+y9nkdnHTSwdG7FWD8YrwzQ4Q6+DLKQFXMT3uwKPzuf6I5q KrjgNeDAVlRFq1A73o9tLgMZQJCc65IQ1Gtnq8F2bN853i69ZCykYgTOnmLsuv/h T+EzMpQ8Ngn6dh03kebn5UOPbzIkh5etjCuvcp+LApUZV6tBiyOtI4SgyslzMSZS 8bJIpCfcWAdRQxU7TsOjU03GHg== -----END CERTIFICATE-----Generated at Tue Apr 28 12:46:09 2026 by rpki-client