$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: 4IhIgM49sX0nb5ornhI5d4Y3EE0aiXN2QGUfx6A1TYI= Subject key identifier: F5:42:35:CB:D2:82:65:F0:DA:15:AD:78:1A:37:69:4B:F1:EB:3A:96 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 02A1 Signing time: Sun 19 Apr 2026 01:24:46 +0000 Manifest this update: Sun 19 Apr 2026 01:24:45 +0000 Manifest next update: Sun 26 Apr 2026 01:24:45 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: qgh2JTHeonMU2KGvBMd97rZsHk+O2xTKFKJSvEwbncU=) 2: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=) 3: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 01:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Apr 19 01:24:45 2026 GMT Not After : Apr 26 01:24:45 2026 GMT Subject: CN=69e42ede-2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:a9:1f:77:d3:b5:a9:69:15:47:4c:40:1b: 4d:d8:c8:97:61:59:df:97:f5:26:b9:66:41:87:f1: 86:88:b2:60:db:65:f5:c5:71:83:60:f5:15:c4:dc: f5:88:89:04:61:e8:75:89:84:b0:4f:93:5c:a2:ea: 16:50:fb:8a:ba:dc:c5:2f:b6:b0:59:3d:24:7a:6e: b2:76:7f:88:fd:b6:19:2f:9f:7a:81:6e:d4:65:ab: 1f:45:29:07:84:72:f3:27:07:c6:09:b2:4c:ef:61: ce:95:f0:4b:75:d4:53:95:d0:87:4a:54:63:99:34: dd:12:2c:e0:6d:e4:8e:23:bb:a8:77:d1:ae:f6:92: 95:99:97:6a:3f:d5:04:fb:83:df:73:c8:f6:62:3a: 71:be:67:b6:8f:a0:e5:0e:a4:45:a1:81:4b:20:5b: af:b5:bc:93:24:7b:dd:2e:1b:0f:fb:1e:a4:1a:c3: 04:55:4a:39:4b:e2:de:14:2f:5a:de:63:f7:ce:65: e5:5c:c8:a7:ef:aa:c1:ea:19:1f:01:6e:eb:89:b0: 9b:cf:70:9f:c5:cf:5b:23:a6:7b:49:16:98:1d:bb: b3:2d:ed:d5:66:16:3d:02:4d:d1:ec:39:b9:95:77: 0e:2e:d6:c1:2f:1e:a6:98:ea:c4:8c:89:55:7d:a5: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:42:35:CB:D2:82:65:F0:DA:15:AD:78:1A:37:69:4B:F1:EB:3A:96 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a6:63:10:19:56:62:57:ba:ee:68:8b:81:ab:f5:45:61:04: 12:71:ea:8a:19:f6:d9:45:09:28:d3:63:a4:48:e3:ff:8b:dd: b7:f2:f4:48:ef:15:00:58:90:9e:4a:35:b8:95:20:b5:8e:3f: ae:4a:4d:b9:71:08:ec:26:45:29:51:d5:40:3b:c9:1f:99:80: 9b:32:4f:08:0d:ea:a1:c4:e2:98:b5:e9:06:b4:50:ae:0c:f1: e5:b0:60:58:9d:aa:22:9c:4b:c0:05:ef:a1:5c:52:db:e7:af: cd:cc:1b:e8:6b:2f:89:9c:fc:b0:ca:4d:5f:22:5f:c2:a9:a4: 52:d7:26:11:bc:5a:9a:ad:82:f8:f9:aa:b4:71:ff:e4:bc:10: 8b:89:1b:f4:db:ec:9e:9e:a9:b2:0b:b1:2a:43:1d:13:85:06: 93:ee:c7:d4:7d:bc:84:e5:32:ec:ce:1a:13:87:d5:c8:e1:18: 51:f5:b4:12:2e:84:40:70:31:54:c5:83:cc:b3:fa:3d:54:5d: b2:25:c6:56:58:01:e1:01:57:76:6b:ec:9f:a0:7b:0b:da:00: ee:80:e0:5a:4c:c5:4f:5a:86:b7:6e:d1:33:80:5d:9d:24:a5: 9c:2a:5c:97:11:a9:6d:8e:91:94:64:a8:6d:d5:f9:36:a4:8d: 52:af:aa:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjYwNDE5MDEyNDQ1WhcNMjYwNDI2MDEyNDQ1WjAYMRYwFAYD VQQDEw02OWU0MmVkZS0yMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4qpH3fTtalpFUdMQBtN2MiXYVnfl/UmuWZBh/GGiLJg22X1xXGDYPUVxNz1 iIkEYeh1iYSwT5NcouoWUPuKutzFL7awWT0kem6ydn+I/bYZL596gW7UZasfRSkH hHLzJwfGCbJM72HOlfBLddRTldCHSlRjmTTdEizgbeSOI7uod9Gu9pKVmZdqP9UE +4Pfc8j2Yjpxvme2j6DlDqRFoYFLIFuvtbyTJHvdLhsP+x6kGsMEVUo5S+LeFC9a 3mP3zmXlXMin76rB6hkfAW7ribCbz3Cfxc9bI6Z7SRaYHbuzLe3VZhY9Ak3R7Dm5 lXcOLtbBLx6mmOrEjIlVfaWycwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVCNcvS gmXw2hWteBo3aUvx6zqWMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf6ZjEBlWYle67miLgav1RWEEEnHqihn22UUJKNNjpEjj/4vdt/L0SO8VAFiQ nko1uJUgtY4/rkpNuXEI7CZFKVHVQDvJH5mAmzJPCA3qocTimLXpBrRQrgzx5bBg WJ2qIpxLwAXvoVxS2+evzcwb6GsviZz8sMpNXyJfwqmkUtcmEbxamq2C+PmqtHH/ 5LwQi4kb9Nvsnp6psguxKkMdE4UGk+7H1H28hOUy7M4aE4fVyOEYUfW0Ei6EQHAx VMWDzLP6PVRdsiXGVlgB4QFXdmvsn6B7C9oA7oDgWkzFT1qGt27RM4BdnSSlnCpc lxGpbY6RlGSobdX5NqSNUq+qWw== -----END CERTIFICATE-----Generated at Mon Apr 20 09:47:46 2026 by rpki-client