$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: iKRUw1zfGWihzPOK/cU2p3c9/sgcv+n85oMoNvxHMyo= Subject key identifier: D5:58:0E:B4:F2:F8:0F:A3:CE:E8:A7:B1:E5:FD:B9:90:24:5E:A6:CC Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 02A5 Signing time: Tue 21 Apr 2026 01:23:36 +0000 Manifest this update: Tue 21 Apr 2026 01:23:35 +0000 Manifest next update: Tue 28 Apr 2026 01:23:35 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: f36kmBWZMgsrumOtS5kdwCPA+IuwuOEq+xxLkP9Zd7A=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 01:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Apr 21 01:23:35 2026 GMT Not After : Apr 28 01:23:35 2026 GMT Subject: CN=69e6d198-da55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:1a:fb:54:69:e3:13:ff:7d:30:8f:79:86: 09:cb:9f:09:8b:ec:72:cf:5b:72:3c:5b:84:59:b6: 6b:7e:eb:ae:7d:bb:32:64:10:8b:e4:6c:14:27:1a: bc:37:20:ff:1c:fe:66:1d:ee:d1:e2:a1:5e:aa:b4: 95:65:d8:31:da:25:29:61:b2:f8:1a:00:da:97:b8: 12:b9:f3:e6:f6:cd:ad:b1:55:7a:9a:7f:23:cf:02: bc:29:2d:1d:13:18:8d:11:b7:2c:01:2e:6c:a7:69: 33:39:53:19:67:d8:ac:ea:1b:18:6b:54:05:dd:20: 85:7d:af:d3:5c:9d:62:da:11:01:fb:61:d2:2c:96: a7:86:50:52:79:03:c0:be:6a:2e:24:bd:08:9b:1c: cb:e4:3c:28:8d:f2:e9:c5:ff:0a:e3:9b:7e:b7:1c: c5:66:51:f8:fb:89:4d:79:0b:a9:69:70:3b:4d:01: 81:d0:e5:bc:89:92:4e:3d:f4:1e:5a:b1:49:c3:ef: d3:1b:63:40:3a:ed:97:03:51:3d:a7:47:f0:93:a3: 3d:d3:a2:8d:ff:4f:c5:62:fc:6a:eb:39:0f:0c:eb: 32:89:b9:bf:48:b9:d5:e0:7f:21:24:5f:69:d4:68: 37:90:16:64:2a:6a:bf:85:10:45:9a:ef:2f:d2:b7: 19:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:0E:B4:F2:F8:0F:A3:CE:E8:A7:B1:E5:FD:B9:90:24:5E:A6:CC X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:82:7d:b0:1e:f0:96:78:d1:a9:1d:b2:f7:1b:71:3d:96: 59:9a:32:be:9c:d5:31:3b:e2:d9:5a:7f:4f:39:7d:98:a1:49: 21:61:34:fc:f3:73:0d:6b:79:5a:b2:98:cf:ff:08:d3:a4:2b: 4c:5c:22:8b:71:b2:8e:61:b1:e6:76:4f:eb:b2:9d:41:35:5b: 4c:8d:30:ab:9e:9b:b4:2a:bf:41:ef:07:35:5f:47:e1:1d:38: 63:ec:b4:39:71:ba:61:f1:aa:43:0f:96:db:cf:e0:a5:0f:ea: fd:9b:a3:86:06:29:11:ee:eb:0f:54:98:8c:cb:73:5d:ce:2d: 45:b2:03:c4:50:73:b6:5b:1b:81:30:53:57:04:5a:39:fe:1d: 0d:65:4f:13:a8:23:27:5c:23:11:da:a9:4b:0d:15:30:1e:51: b0:96:8a:59:13:cb:ed:42:b7:ac:c8:4f:23:5c:59:01:26:1a: c9:91:6a:36:6b:c1:97:26:fb:62:3d:48:3e:27:33:dc:e8:b9: cd:2e:b6:bb:12:0f:4b:f3:d0:8d:d8:ac:12:81:81:ea:42:0b: de:c2:cb:bb:ef:23:03:51:d4:a6:1f:e6:9f:25:03:ed:5d:d9: ff:9b:f1:53:28:a2:f8:a9:aa:13:8d:81:e3:d8:64:97:d3:df: 20:d9:da:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjYwNDIxMDEyMzM1WhcNMjYwNDI4MDEyMzM1WjAYMRYwFAYD VQQDEw02OWU2ZDE5OC1kYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiJ4a+1Rp4xP/fTCPeYYJy58Ji+xyz1tyPFuEWbZrfuuufbsyZBCL5GwUJxq8 NyD/HP5mHe7R4qFeqrSVZdgx2iUpYbL4GgDal7gSufPm9s2tsVV6mn8jzwK8KS0d ExiNEbcsAS5sp2kzOVMZZ9is6hsYa1QF3SCFfa/TXJ1i2hEB+2HSLJanhlBSeQPA vmouJL0ImxzL5DwojfLpxf8K45t+txzFZlH4+4lNeQupaXA7TQGB0OW8iZJOPfQe WrFJw+/TG2NAOu2XA1E9p0fwk6M906KN/0/FYvxq6zkPDOsyibm/SLnV4H8hJF9p 1Gg3kBZkKmq/hRBFmu8v0rcZzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVYDrTy +A+jzuinseX9uZAkXqbMMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQP+CfbAe8JZ40akdsvcbcT2WWZoyvpzVMTvi2Vp/Tzl9mKFJIWE0/PNzDWt5 WrKYz/8I06QrTFwii3GyjmGx5nZP67KdQTVbTI0wq56btCq/Qe8HNV9H4R04Y+y0 OXG6YfGqQw+W28/gpQ/q/ZujhgYpEe7rD1SYjMtzXc4tRbIDxFBztlsbgTBTVwRa Of4dDWVPE6gjJ1wjEdqpSw0VMB5RsJaKWRPL7UK3rMhPI1xZASYayZFqNmvBlyb7 Yj1IPicz3Oi5zS62uxIPS/PQjdisEoGB6kIL3sLLu+8jA1HUph/mnyUD7V3Z/5vx Uyii+KmqE42B49hkl9PfINna8w== -----END CERTIFICATE-----Generated at Wed Apr 22 10:27:49 2026 by rpki-client