$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: xLoC6FPYts7OXzz309NT1HTa3h5cqo4up0hQ2+5avO0= Subject key identifier: C7:DC:B0:D5:5A:60:42:E1:83:1D:77:1F:41:F3:7D:5D:5C:35:17:55 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 14EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 14DE Signing time: Sat 04 Apr 2026 16:44:58 +0000 Manifest this update: Sat 04 Apr 2026 16:44:58 +0000 Manifest next update: Sat 11 Apr 2026 16:44:58 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: RN4l3WHzN0ezoxaTvt9TVkf6XVda8cZ4ZpWm96e3dik=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: p9ON/vBF+VJhjti0OsHW+khk9UzScAaJd1Q9IQceEPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5355 (0x14eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Apr 4 16:44:58 2026 GMT Not After : Apr 11 16:44:58 2026 GMT Subject: CN=69d1400a-731d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:a9:b2:3d:eb:31:e1:fc:9e:5c:66:14:83: 61:03:d1:15:04:fe:9a:f0:6b:ce:59:50:ed:9e:e0: ac:0f:6d:62:03:bc:ef:2e:7c:2d:17:6a:42:22:39: 39:43:6c:6a:f9:e8:31:67:e5:78:7a:b8:ca:fb:ce: ae:f4:25:5e:7d:05:c7:e3:ac:3d:85:be:8a:3e:f7: 1f:ff:94:97:12:64:f5:ae:dd:fc:0d:48:ad:10:71: 57:44:9b:e4:11:65:44:52:91:c3:a8:94:ae:e4:14: 0d:05:6d:83:f9:ac:a4:d7:d3:2a:32:b6:16:26:8d: b9:1f:24:76:3b:67:ef:8c:ab:b5:a4:93:ac:8c:f8: 84:ea:c4:f4:c5:e2:18:49:03:9f:06:41:3a:79:a0: cc:81:a7:b5:82:3a:8c:40:d9:5e:a2:95:23:16:50: 55:0b:df:88:47:17:e1:54:c0:fb:83:4d:46:f7:20: 16:45:b8:4b:ef:a7:23:ae:d0:76:8e:cb:e3:4f:93: b5:32:bd:1d:fd:08:14:70:4d:24:42:0e:04:c9:3a: 2a:78:e2:ec:ad:c5:de:61:6a:4f:1d:f2:c6:e2:90: 46:53:71:f4:e5:3b:fb:dd:4c:c3:68:17:6f:e5:ab: bd:c0:73:28:2d:7e:b2:92:5a:70:f6:74:2f:d7:a9: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DC:B0:D5:5A:60:42:E1:83:1D:77:1F:41:F3:7D:5D:5C:35:17:55 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c0:9f:b4:ab:13:03:9f:c9:d4:a3:99:e9:f6:23:96:f9:0d: 08:f3:4c:3f:d4:d3:9d:ad:5d:3d:d5:ab:6b:95:36:c7:bd:f1: e8:52:d8:81:54:3e:73:8c:62:59:28:f2:17:ee:b2:3b:c9:16: 4a:f9:19:b3:75:29:55:f1:16:26:48:a2:b5:77:57:a1:8c:e8: c3:b0:4d:36:09:73:12:b8:04:f1:d1:19:4f:6c:3f:d2:6a:2a: ae:10:41:11:e2:13:0e:68:5b:27:0c:cc:3d:1b:e9:15:5f:36: 57:eb:43:08:1b:54:47:05:8f:6c:0a:64:d1:7c:c6:5d:82:cd: 93:37:67:8c:b8:7f:af:61:7f:ac:e1:52:03:86:6e:da:45:c8: ac:93:2b:e3:0f:49:50:f6:0c:44:c1:a7:b4:dc:63:60:73:cc: e6:42:e7:61:bb:5b:f9:5f:3f:d1:ad:4c:62:7a:8d:0a:ee:91: d7:1a:8e:cc:7f:79:40:b7:0e:40:80:d0:68:97:42:14:f0:ad: ac:a8:e7:d7:0a:23:b7:8d:10:fe:63:4a:d1:05:5c:0b:1b:31: f8:c6:20:4f:71:5d:49:47:fb:40:59:07:ac:bd:3b:88:79:7c: 6f:df:5d:5b:28:c8:8c:d4:2e:c1:5e:87:31:d3:cd:43:7a:91: 32:34:3f:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjYwNDA0MTY0NDU4WhcNMjYwNDExMTY0NDU4WjAYMRYwFAYD VQQDEw02OWQxNDAwYS03MzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDSpsj3rMeH8nlxmFINhA9EVBP6a8GvOWVDtnuCsD21iA7zvLnwtF2pCIjk5 Q2xq+egxZ+V4erjK+86u9CVefQXH46w9hb6KPvcf/5SXEmT1rt38DUitEHFXRJvk EWVEUpHDqJSu5BQNBW2D+ayk19MqMrYWJo25HyR2O2fvjKu1pJOsjPiE6sT0xeIY SQOfBkE6eaDMgae1gjqMQNleopUjFlBVC9+IRxfhVMD7g01G9yAWRbhL76cjrtB2 jsvjT5O1Mr0d/QgUcE0kQg4EyToqeOLsrcXeYWpPHfLG4pBGU3H05Tv73UzDaBdv 5au9wHMoLX6yklpw9nQv16lcuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfcsNVa YELhgx13H0HzfV1cNRdVMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvcCftKsTA5/J1KOZ6fYjlvkNCPNMP9TTna1dPdWra5U2x73x6FLYgVQ+c4xi WSjyF+6yO8kWSvkZs3UpVfEWJkiitXdXoYzow7BNNglzErgE8dEZT2w/0moqrhBB EeITDmhbJwzMPRvpFV82V+tDCBtURwWPbApk0XzGXYLNkzdnjLh/r2F/rOFSA4Zu 2kXIrJMr4w9JUPYMRMGntNxjYHPM5kLnYbtb+V8/0a1MYnqNCu6R1xqOzH95QLcO QIDQaJdCFPCtrKjn1wojt40Q/mNK0QVcCxsx+MYgT3FdSUf7QFkHrL07iHl8b99d WyjIjNQuwV6HMdPNQ3qRMjQ/lw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:28:56 2026 by rpki-client