$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: gfpCrm85hd0W2HWjP1S+o3gPMBzoit3t4tV21kZwXJo= Subject key identifier: 01:AF:B5:FE:DB:62:BF:CA:A5:4B:35:98:61:17:1C:60:3C:4F:76:77 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 0288 Signing time: Mon 27 Apr 2026 01:44:19 +0000 Manifest this update: Mon 27 Apr 2026 01:44:19 +0000 Manifest next update: Mon 04 May 2026 01:44:19 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: vCO2IkSh0gImAJUCz7Hwv+t171SmrcMlzZJnEhLn+sQ=) 2: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: niAe7uFd21HH6WERU7iTs3hEOi8m5PmAvBhzB5K4rB0=) 3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Apr 27 01:44:19 2026 GMT Not After : May 4 01:44:19 2026 GMT Subject: CN=69eebf73-87d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3d:d1:b8:c6:32:01:0c:cb:f8:ca:6a:44:f9: 39:0e:21:c5:18:42:90:6c:c1:53:cc:aa:c5:1d:da: 1e:e7:e0:33:01:74:c8:1a:54:45:3d:5c:ca:e2:ea: ad:fc:f1:6d:a2:40:fe:0e:e3:3b:a5:fc:3f:d7:23: 2a:0c:67:68:6b:2c:f0:13:dd:34:10:ed:e5:15:ec: 10:2a:db:22:01:a3:3d:e8:8c:05:3c:9e:47:a2:83: dd:2d:bc:da:d5:88:6a:7c:9b:72:73:27:1f:56:41: 11:cd:89:e2:42:59:3b:ed:4a:32:39:f8:37:36:06: 00:0f:e1:91:54:21:cd:dc:b1:7a:4e:18:39:1b:13: 48:93:80:b7:04:37:fb:0f:7b:e4:10:dd:7a:21:32: db:7f:ff:37:ae:0c:b4:36:8f:b2:a2:44:1c:eb:0e: 51:a3:da:07:e7:fc:71:cc:c4:10:30:f1:11:e6:44: 6c:d2:0e:57:57:19:16:44:fc:83:29:42:b3:5a:1b: c0:99:5f:1e:ad:74:b7:8a:f4:ff:d7:2c:35:52:40: 44:f3:9c:36:b4:08:ca:f2:a2:33:2a:2c:65:7e:cc: 3d:9c:ff:48:e0:05:89:1c:89:6c:21:a5:69:8e:89: c4:6b:9c:b4:ca:59:4b:68:69:45:47:50:d2:d2:d1: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AF:B5:FE:DB:62:BF:CA:A5:4B:35:98:61:17:1C:60:3C:4F:76:77 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c5:cf:0a:a2:ed:e2:0a:10:f7:fc:11:40:23:3f:20:a5:e0: 85:e7:d5:db:ff:fd:75:f2:04:bf:cd:af:f3:8d:1b:10:3f:8b: b5:3e:df:23:0c:3a:92:6a:c5:d8:34:af:a4:93:5a:9a:23:be: c5:3e:72:c1:04:ad:2d:f8:5d:71:26:88:01:48:57:5b:ad:56: 9a:9a:53:ed:d3:b8:55:db:52:c6:9e:8c:6a:ff:da:78:04:e3: 01:33:b3:5a:9c:54:27:82:c0:55:49:d8:21:81:7a:04:62:b0: e6:d5:1a:ab:55:f0:7a:5c:2f:4d:5f:da:b1:be:be:72:c3:6b: be:7a:1d:89:4c:02:60:f5:6f:d8:9a:05:5c:7c:50:24:25:53: 1d:55:27:58:35:b0:76:12:43:55:f3:31:93:8b:c2:ac:7b:b3: 50:07:a6:eb:d8:c3:1a:ab:c9:bb:79:22:89:4b:0c:ab:8f:5a: b8:13:28:82:20:f4:f6:a1:01:c4:94:cb:1a:ea:29:92:3a:33: 30:50:40:c1:87:bf:d5:65:ef:93:e8:bd:3c:c4:2f:93:46:8f: 91:38:77:c7:55:4a:e1:12:a9:73:ff:50:41:06:30:a2:b0:d4: 90:57:04:e8:4b:c7:78:1e:7b:6c:a9:c5:83:b7:61:f0:4d:32: 5a:dc:0e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYwNDI3MDE0NDE5WhcNMjYwNTA0MDE0NDE5WjAYMRYwFAYD VQQDEw02OWVlYmY3My04N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z3RuMYyAQzL+MpqRPk5DiHFGEKQbMFTzKrFHdoe5+AzAXTIGlRFPVzK4uqt /PFtokD+DuM7pfw/1yMqDGdoayzwE900EO3lFewQKtsiAaM96IwFPJ5HooPdLbza 1YhqfJtycycfVkERzYniQlk77UoyOfg3NgYAD+GRVCHN3LF6Thg5GxNIk4C3BDf7 D3vkEN16ITLbf/83rgy0No+yokQc6w5Ro9oH5/xxzMQQMPER5kRs0g5XVxkWRPyD KUKzWhvAmV8erXS3ivT/1yw1UkBE85w2tAjK8qIzKixlfsw9nP9I4AWJHIlsIaVp jonEa5y0yllLaGlFR1DS0tErKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGvtf7b Yr/KpUs1mGEXHGA8T3Z3MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADMXPCqLt4goQ9/wRQCM/IKXghefV2//9dfIEv82v840bED+LtT7fIww6kmrF 2DSvpJNamiO+xT5ywQStLfhdcSaIAUhXW61WmppT7dO4VdtSxp6Mav/aeATjATOz WpxUJ4LAVUnYIYF6BGKw5tUaq1XwelwvTV/asb6+csNrvnodiUwCYPVv2JoFXHxQ JCVTHVUnWDWwdhJDVfMxk4vCrHuzUAem69jDGqvJu3kiiUsMq49auBMogiD09qEB xJTLGuopkjozMFBAwYe/1WXvk+i9PMQvk0aPkTh3x1VK4RKpc/9QQQYworDUkFcE 6EvHeB57bKnFg7dh8E0yWtwOBQ== -----END CERTIFICATE-----Generated at Tue Apr 28 17:09:12 2026 by rpki-client