$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: 5m2R3lAQapI21kFhKXB/4CmXolXuz3pLYXWDH6p5Dy0= Subject key identifier: FC:D7:89:17:DC:E5:CC:62:3A:48:1E:C4:73:C6:CF:E8:EE:80:32:1E Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 13EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 13D1 Signing time: Mon 20 Apr 2026 16:54:07 +0000 Manifest this update: Mon 20 Apr 2026 16:54:06 +0000 Manifest next update: Mon 27 Apr 2026 16:54:06 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: WJ3GBZuJ2iosiEiO9CXyAKS44/X6+G/MOLToLBNqQNk=) 2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) 3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 16:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5100 (0x13ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Apr 20 16:54:06 2026 GMT Not After : Apr 27 16:54:06 2026 GMT Subject: CN=69e65a2e-568a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:77:20:8c:48:3b:7c:86:27:c4:e6:58:89: 3b:5f:f1:71:c6:a9:37:21:a4:6f:e8:51:a8:29:5d: b3:f5:52:f2:ff:34:16:b6:69:06:65:14:85:1a:a9: d2:87:87:2b:95:fc:b1:a7:24:25:0e:68:a7:2f:38: c1:27:b6:da:b7:1a:12:3f:eb:e9:92:73:3b:af:65: df:c2:5c:d2:44:56:ba:e1:90:d0:d3:03:a3:96:e1: 19:d9:49:03:8d:45:29:cd:22:40:cb:04:66:56:b7: eb:9b:25:24:40:cb:9e:a7:11:d7:2f:fe:69:22:b6: bd:33:4e:e6:0d:b6:bb:3b:cb:68:39:37:04:3e:e6: 5f:77:39:7c:79:c9:ec:8e:b7:b6:39:39:06:28:86: ed:96:5d:34:30:93:5d:c5:ba:ea:93:3d:a7:d6:45: e6:0c:27:28:64:6e:2b:e5:53:01:de:1f:c4:f3:4e: 27:e2:29:6d:3a:59:fc:fc:67:91:6a:8f:bd:77:d3: e6:10:f6:93:db:5b:f9:af:0c:d6:3a:38:67:de:d0: 14:0f:7c:c5:95:38:52:b6:33:f8:3a:6c:93:2a:c1: 9e:3f:34:57:7e:db:12:97:ed:96:59:85:58:43:ef: d2:d5:ac:42:eb:59:bb:f8:2f:ca:59:12:94:8d:42: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D7:89:17:DC:E5:CC:62:3A:48:1E:C4:73:C6:CF:E8:EE:80:32:1E X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:88:78:f1:e1:dc:80:79:2a:c4:3c:2f:cb:cb:09:c8:7f:04: 0f:44:c7:f0:da:7d:16:bc:06:02:dc:8a:54:5a:52:a9:c2:de: b5:7f:ad:a5:47:18:67:6d:22:2d:bd:7e:ab:c7:56:96:de:fe: fc:09:07:4c:7d:f9:68:4e:7f:df:7e:e8:32:4a:3b:51:fe:c1: 27:77:be:8d:37:c8:07:31:21:93:fe:c4:aa:4d:6a:7c:03:e9: 05:e3:fe:4f:08:0a:1d:e8:77:17:6d:96:1c:81:b0:27:5b:0c: cf:8a:6e:fe:a4:c3:03:12:b5:c9:e1:74:ea:92:3f:fb:95:4e: 64:60:49:c8:f2:15:89:32:44:34:8f:be:9d:ac:08:a8:f9:c9: 80:61:62:e4:1d:67:67:c8:57:8d:55:1a:50:0e:1e:1c:53:fa: 29:60:a1:a1:db:e2:81:0e:de:cd:98:08:06:24:0a:00:49:d7: 87:cc:57:45:22:90:30:e9:cc:2c:6b:4d:8e:1a:3f:08:46:a0: 59:dc:9d:fe:61:74:a5:93:50:e1:bf:69:a4:56:e6:7d:51:40: 66:6b:62:50:d1:b8:04:c5:9f:0a:93:ff:5f:de:2a:80:79:bc: cc:9d:b3:fb:cf:14:3b:69:33:0e:70:52:5c:34:1d:f7:e6:2d: 67:c0:c7:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwNDIwMTY1NDA2WhcNMjYwNDI3MTY1NDA2WjAYMRYwFAYD VQQDEw02OWU2NWEyZS01NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyd3IIxIO3yGJ8TmWIk7X/Fxxqk3IaRv6FGoKV2z9VLy/zQWtmkGZRSFGqnS h4crlfyxpyQlDminLzjBJ7batxoSP+vpknM7r2XfwlzSRFa64ZDQ0wOjluEZ2UkD jUUpzSJAywRmVrfrmyUkQMuepxHXL/5pIra9M07mDba7O8toOTcEPuZfdzl8ecns jre2OTkGKIbtll00MJNdxbrqkz2n1kXmDCcoZG4r5VMB3h/E804n4iltOln8/GeR ao+9d9PmEPaT21v5rwzWOjhn3tAUD3zFlThStjP4OmyTKsGePzRXftsSl+2WWYVY Q+/S1axC61m7+C/KWRKUjUK4MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzXiRfc 5cxiOkgexHPGz+jugDIeMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL4h48eHcgHkqxDwvy8sJyH8ED0TH8Np9FrwGAtyKVFpSqcLetX+tpUcYZ20i Lb1+q8dWlt7+/AkHTH35aE5/337oMko7Uf7BJ3e+jTfIBzEhk/7Eqk1qfAPpBeP+ TwgKHeh3F22WHIGwJ1sMz4pu/qTDAxK1yeF06pI/+5VOZGBJyPIViTJENI++nawI qPnJgGFi5B1nZ8hXjVUaUA4eHFP6KWChodvigQ7ezZgIBiQKAEnXh8xXRSKQMOnM LGtNjho/CEagWdyd/mF0pZNQ4b9ppFbmfVFAZmtiUNG4BMWfCpP/X94qgHm8zJ2z +88UO2kzDnBSXDQd9+YtZ8DHDw== -----END CERTIFICATE-----Generated at Wed Apr 22 09:00:11 2026 by rpki-client