$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: 9TauCwNHJwfsyvkXYyU4EjXgzGr4Pwl1c//+TWaM1AI= Subject key identifier: DB:7E:F4:91:AA:12:B3:4F:A4:42:26:EA:11:0A:16:8F:3F:64:01:B8 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0CE5 Signing time: Sat 04 Apr 2026 18:05:12 +0000 Manifest this update: Sat 04 Apr 2026 18:05:11 +0000 Manifest next update: Sat 11 Apr 2026 18:05:11 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: slcREpoQi2as1vOTqC7zS842SHkvDxLXY10uLjR8P/s=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: 1lJZiaXN2+jlJbSyyyT2ZVc0TvKSt6+Hz3K+SpWk1T8=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: YHhtbTx3DFi9+kl85V+ijdhzu/uN/CR3C5x9c+CBrX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Apr 4 18:05:11 2026 GMT Not After : Apr 11 18:05:11 2026 GMT Subject: CN=69d152d8-5e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:05:34:6f:44:0d:b2:84:92:29:2b:30:8a: 7b:ec:8c:a2:07:16:72:56:44:b2:bf:67:11:d7:1b: d5:fb:36:0f:83:f2:c4:5f:f2:e3:e2:57:5b:17:0b: 33:ec:23:2d:21:05:13:a1:52:99:15:3c:57:63:6e: 74:c3:0c:36:7d:b5:3a:9e:75:83:75:0f:8f:a4:40: 91:5c:09:a9:bc:f6:89:a0:71:8e:5c:33:93:df:f4: 98:46:76:d8:d9:d8:3a:d8:81:93:1f:50:d1:1c:e1: d2:f2:22:89:01:a2:03:d7:f5:cf:de:a0:66:84:c5: ca:32:a2:0e:89:e1:7d:d7:36:ee:91:82:74:d5:ab: f2:78:7a:e2:23:39:b1:cc:a2:d3:73:13:da:96:62: 18:0a:fa:83:6a:93:1e:59:f3:fb:29:31:ce:97:49: 8a:1f:d5:43:18:96:61:25:02:80:cc:a9:36:df:38: 38:7f:6d:1f:7e:e3:c3:82:e9:83:e7:cf:a6:71:93: eb:ee:e4:43:65:ab:36:1a:2d:eb:2b:8f:c8:eb:e9: 18:a6:f6:0e:e0:7f:18:6a:9a:15:36:3f:d9:2e:b1: 1a:ab:d5:4a:fa:a8:43:3e:a2:00:69:38:7d:e7:15: 6b:af:a8:a7:48:8a:b1:82:79:09:ad:87:ad:8c:20: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7E:F4:91:AA:12:B3:4F:A4:42:26:EA:11:0A:16:8F:3F:64:01:B8 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:47:32:f2:7f:d1:23:8d:0a:83:7c:67:49:a4:c4:7f:20:d1: 6e:ad:44:17:a9:56:28:62:74:08:a3:0f:ad:da:90:7b:d9:7f: b5:7c:fc:d8:94:97:13:a1:9e:7f:e6:22:9a:f1:1b:b4:33:67: 1e:9e:b5:ef:0e:0b:47:15:80:11:0f:18:7c:1b:ba:c7:ad:6e: 7c:b2:e2:96:31:76:73:4b:28:2f:3e:62:87:be:08:0b:81:61: a5:31:b6:10:66:8e:5f:bf:52:85:65:fa:f0:5f:d6:7e:eb:34: 46:ec:cd:b9:d8:38:63:31:5d:09:bd:85:aa:31:e9:51:54:3f: 4e:5a:ed:df:c1:7d:5f:fa:42:fd:d6:82:21:80:f1:24:43:04: 84:e6:2e:5e:e1:a1:e7:45:ad:c1:9a:f4:81:8a:8e:c9:ae:4b: 81:7a:22:26:41:40:38:93:84:2d:ac:59:e3:8c:a8:6b:61:2a: 10:ab:bf:7e:8b:e6:87:ad:66:06:73:3a:f3:6d:b2:e9:1c:a9: 5f:23:81:23:8b:32:92:12:30:c1:aa:03:74:1e:05:93:e9:4e: 1a:c2:aa:e3:6e:08:61:4b:1e:f7:76:d3:4c:26:73:c1:e9:64: 16:8e:85:a6:1f:a6:cc:b2:83:c3:ac:8f:c8:45:95:03:a8:b4: 8e:fe:17:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjYwNDA0MTgwNTExWhcNMjYwNDExMTgwNTExWjAYMRYwFAYD VQQDEw02OWQxNTJkOC01ZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwoFNG9EDbKEkikrMIp77IyiBxZyVkSyv2cR1xvV+zYPg/LEX/Lj4ldbFwsz 7CMtIQUToVKZFTxXY250www2fbU6nnWDdQ+PpECRXAmpvPaJoHGOXDOT3/SYRnbY 2dg62IGTH1DRHOHS8iKJAaID1/XP3qBmhMXKMqIOieF91zbukYJ01avyeHriIzmx zKLTcxPalmIYCvqDapMeWfP7KTHOl0mKH9VDGJZhJQKAzKk23zg4f20ffuPDgumD 58+mcZPr7uRDZas2Gi3rK4/I6+kYpvYO4H8YapoVNj/ZLrEaq9VK+qhDPqIAaTh9 5xVrr6inSIqxgnkJrYetjCCqBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNt+9JGq ErNPpEIm6hEKFo8/ZAG4MB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU0cy8n/RI40Kg3xnSaTEfyDRbq1EF6lWKGJ0CKMPrdqQe9l/tXz82JSXE6Ge f+YimvEbtDNnHp617w4LRxWAEQ8YfBu6x61ufLLiljF2c0soLz5ih74IC4FhpTG2 EGaOX79ShWX68F/Wfus0RuzNudg4YzFdCb2FqjHpUVQ/Tlrt38F9X/pC/daCIYDx JEMEhOYuXuGh50WtwZr0gYqOya5LgXoiJkFAOJOELaxZ44yoa2EqEKu/fovmh61m BnM6822y6RypXyOBI4sykhIwwaoDdB4Fk+lOGsKq424IYUse93bTTCZzwelkFo6F ph+mzLKDw6yPyEWVA6i0jv4XVA== -----END CERTIFICATE-----Generated at Mon Apr 6 15:26:30 2026 by rpki-client