$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: TQeQhorBsbYzszrHTQuyyJaimiPUC0jyP8YCGSC4loY= Subject key identifier: B1:25:E8:EE:45:9A:A9:12:82:BC:1E:38:8B:1F:84:49:02:73:AC:6E Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 56 Signing time: Sat 18 Apr 2026 18:08:13 +0000 Manifest this update: Sat 18 Apr 2026 18:08:12 +0000 Manifest next update: Sat 25 Apr 2026 18:08:12 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: boS7PFVQiN7XFCM9XWp9Zv/96wN0CfQllLqBK950UVo=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Apr 18 18:08:12 2026 GMT Not After : Apr 25 18:08:12 2026 GMT Subject: CN=69e3c88c-4c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:b6:52:9c:d2:94:b2:97:b5:8f:59:ef:64: 49:05:60:7d:4e:f5:9a:18:12:6b:3d:b6:94:50:9f: cc:e3:04:d2:ea:e6:46:2d:7f:dd:19:67:83:67:f8: 39:dd:3e:5a:d8:56:e7:3c:fa:ed:ae:95:7f:29:d5: 5d:2a:af:23:94:dd:bd:90:20:7d:bc:d0:f1:e0:f7: 0a:fa:6a:61:72:d9:a6:04:d6:e1:cb:f8:83:2a:c5: 66:ad:04:7f:b0:03:57:b0:ae:32:9b:04:83:08:44: 54:02:23:b3:27:15:23:9e:0a:8b:84:5c:44:65:cd: af:4f:dc:6c:25:94:92:7d:37:ba:ea:77:bc:f1:eb: 1b:d7:e6:66:00:fd:df:74:63:1f:7b:ec:c8:73:6c: 47:30:a8:ec:8a:c3:dc:e3:20:f8:08:95:34:21:be: fa:f4:5d:43:65:e6:d4:f9:a0:49:4e:27:41:36:61: d9:6b:6f:22:26:88:a8:ac:e1:71:81:a6:32:82:dd: 6e:98:b6:6b:81:e0:ae:1e:52:25:a5:69:0f:b4:30: 29:50:db:af:61:fd:97:50:04:24:00:0e:0d:f2:67: 7a:ff:d7:74:03:32:44:18:69:82:81:15:e4:fe:74: 8d:27:29:eb:66:c5:62:82:68:1f:45:e6:b6:b3:2f: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:E8:EE:45:9A:A9:12:82:BC:1E:38:8B:1F:84:49:02:73:AC:6E X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:63:ca:85:c3:ad:c7:af:78:00:20:e5:b3:61:34:15:8d:6d: 44:df:d0:34:54:46:a3:c4:2a:7e:8a:89:9b:64:42:a4:38:08: 67:22:51:9d:51:1f:e0:1b:6e:29:20:97:ea:e7:9c:4c:87:41: 3b:66:d3:d4:e7:04:f9:d6:28:ef:6b:1e:91:1d:cf:94:23:94: 56:aa:b7:85:80:9d:8e:08:bd:81:29:a8:68:44:13:21:16:b8: 52:8d:fb:a8:16:45:be:d6:11:1a:55:83:c9:80:b1:6c:45:f7: 49:73:1d:80:66:2f:85:6c:ce:60:a2:7f:a3:5b:dc:1a:6d:ad: 2f:ef:56:12:01:8e:54:49:1d:76:4e:5c:db:d5:04:b7:fb:7d: 76:16:99:f7:01:06:1a:86:1c:80:2a:43:f6:c9:57:11:af:7f: 5f:23:b2:07:b8:51:30:ed:80:23:c7:07:12:0a:92:52:2a:df: db:f2:8e:2b:bf:16:7d:5d:52:dd:23:3e:06:cb:14:c0:12:73: b5:84:9a:bc:ab:02:15:95:d7:ab:60:52:d0:9f:b0:86:32:87: cb:0b:4a:8c:4a:15:27:51:47:53:d4:87:7f:51:13:14:50:51: 0d:67:4a:f2:01:a5:ac:b6:df:b9:4b:85:dd:fa:91:3a:f9:2a: 56:c7:de:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNjA0MTgxODA4MTJaFw0yNjA0MjUxODA4MTJaMBgxFjAUBgNV BAMTDTY5ZTNjODhjLTRjMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyWrZSnNKUspe1j1nvZEkFYH1O9ZoYEms9tpRQn8zjBNLq5kYtf90ZZ4Nn+Dnd PlrYVuc8+u2ulX8p1V0qryOU3b2QIH280PHg9wr6amFy2aYE1uHL+IMqxWatBH+w A1ewrjKbBIMIRFQCI7MnFSOeCouEXERlza9P3GwllJJ9N7rqd7zx6xvX5mYA/d90 Yx977MhzbEcwqOyKw9zjIPgIlTQhvvr0XUNl5tT5oElOJ0E2YdlrbyImiKis4XGB pjKC3W6YtmuB4K4eUiWlaQ+0MClQ269h/ZdQBCQADg3yZ3r/13QDMkQYaYKBFeT+ dI0nKetmxWKCaB9F5razLwhHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsSXo7kWa qRKCvB44ix+ESQJzrG4wHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWY8qFw63Hr3gAIOWzYTQVjW1E39A0VEajxCp+iombZEKkOAhnIlGdUR/gG24p IJfq55xMh0E7ZtPU5wT51ijvax6RHc+UI5RWqreFgJ2OCL2BKahoRBMhFrhSjfuo FkW+1hEaVYPJgLFsRfdJcx2AZi+FbM5gon+jW9waba0v71YSAY5USR12Tlzb1QS3 +312Fpn3AQYahhyAKkP2yVcRr39fI7IHuFEw7YAjxwcSCpJSKt/b8o4rvxZ9XVLd Iz4GyxTAEnO1hJq8qwIVlderYFLQn7CGMofLC0qMShUnUUdT1Id/URMUUFENZ0ry AaWstt+5S4Xd+pE6+SpWx97E -----END CERTIFICATE-----Generated at Sat Apr 18 21:06:53 2026 by rpki-client