$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json) Hash identifier: Axzsm4EhdAZICx/1EQYdKOTyvBEe8wKE2hd6+sbElCg= Subject key identifier: B0:95:49:6C:ED:FA:3B:6D:8F:8F:F2:8F:27:7F:4F:BA:65:86:1C:3E Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft Manifest number: 0BED Signing time: Mon 20 Apr 2026 18:54:43 +0000 Manifest this update: Mon 20 Apr 2026 18:54:43 +0000 Manifest next update: Mon 27 Apr 2026 18:54:43 +0000 Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: P8G8H+qPpRHgSg3ZdJkyHIyNm8t5fp5JAQD5SJcotYM=) 2: 7147D9D69D9811F09B4CDC3EC4F9AE02.roa (hash: xUDY8fa7BGcrzHTy/hrdZE1BbzUbC3rseR2XxjoP1gs=) 3: 09534036847011F0A17FCE63C4F9AE02.roa (hash: +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=) 4: BB46A670849811F08EA6E444C4F9AE02.roa (hash: gZhASpUdS2kKZkIDGyUcYVa0JbfP6X8oZEBvcGxjMeM=) 5: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: iHncQlzb704Umur42ElwW4bGPSOVnnYc0muryAxJjrc=) 6: F6722FA6822411F088762570C4F9AE02.roa (hash: FYa4vN/cUGv4uAuMbz/mOKfD6eVvy62iEPGrtmeoWO0=) 7: F5E1478E822411F088762570C4F9AE02.roa (hash: XOOFVhR+X9ay6WkgnJIVnO7Un1zvha+xlStC4yqXXU4=) 8: 80C33BD4227811F190F6266DA4833773.roa (hash: 3v+B4tCUwpOF2mkM4uEJ/dje8PYL5k+BkV2Dze67PRM=) 9: 0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (hash: Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=) 10: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (hash: IIBSEhSGWvOtD18zZJ+qeiGEnoieLx/pQzi9soqlUGk=) 11: 541716E2B95411F0B8E2D868C4F9AE02.roa (hash: 1nUtY951jqRrI+dTCVWXi0cSf76Zz6olI1+fh+4G7wY=) 12: 701DFED0219D11F1B09B7EBF113D8C67.roa (hash: 3bsqhgLSGJ0jySaUj0UoaU5+UCc3YemslUryYMqMd14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 18:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Apr 20 18:54:43 2026 GMT Not After : Apr 27 18:54:43 2026 GMT Subject: CN=69e67673-ba44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9f:12:9e:d0:cb:a6:4e:3a:89:25:b0:64:43: c3:36:01:9c:d3:1d:36:95:9a:58:44:40:45:98:77: 1d:fd:cb:76:9d:1e:ab:44:d5:9f:8c:b9:3b:35:2f: 36:02:af:a5:ef:0d:64:1c:12:76:b2:16:41:2e:2f: 0a:ef:81:9f:dc:c6:1a:8c:e5:aa:6c:c8:ae:4d:47: 52:33:35:c6:f9:95:49:1f:99:aa:66:ea:96:fc:eb: 58:04:ed:2b:3b:b3:2c:7d:04:7a:e7:40:5d:31:17: 37:7d:02:4b:00:89:3a:0e:37:51:49:4c:43:15:bc: ba:06:61:a3:fe:8b:9b:ec:e8:76:02:b3:5e:8f:f0: e5:0d:47:7b:6d:ac:fd:12:b0:d9:e6:62:20:dc:e6: 02:55:af:9c:ab:34:66:8c:29:9e:d2:2d:64:12:da: 17:5c:5a:21:f9:4d:59:77:ca:09:14:4d:05:7f:0a: ff:a1:2f:6d:58:a7:3a:a5:76:9c:3a:02:65:dd:3f: 37:45:b5:6e:84:22:54:13:7d:f1:f3:d9:ca:a9:d4: f9:6a:6b:78:91:2c:c0:f2:09:9d:41:29:0a:b5:2b: b1:ba:e3:48:ec:b3:b4:92:0a:01:10:2f:60:57:c8: 47:23:ec:5e:b2:1f:74:be:04:cc:5a:2a:82:9c:d2: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:95:49:6C:ED:FA:3B:6D:8F:8F:F2:8F:27:7F:4F:BA:65:86:1C:3E X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:24:4d:33:ee:6d:05:a6:49:47:34:38:c4:bd:17:4e:c3:e1: da:48:03:6c:fe:42:81:45:e1:f2:60:6b:b1:58:97:ce:03:f1: d5:47:7d:6b:0f:15:eb:b4:89:7f:cd:ef:d4:3c:12:6a:0f:8a: 10:05:45:9b:c7:d3:1d:43:5b:8a:b3:30:bc:30:45:e0:d3:5c: 42:12:be:55:76:e9:a2:f1:19:6f:75:b7:bc:da:d6:69:a1:e6: 97:67:6a:db:0f:d1:65:28:6e:3a:1b:ff:91:52:c1:40:d5:9b: 38:49:79:07:b4:f5:22:c1:0e:09:22:2d:ee:15:f5:96:f8:9c: 6f:59:e5:ba:91:f8:7c:92:81:83:a4:3f:27:40:d9:80:23:0a: b9:4a:88:f2:20:60:eb:3b:81:5f:39:17:b8:99:63:74:85:4a: 6c:8f:c9:7b:89:8a:b5:24:26:74:8a:82:1c:3f:db:58:b2:fa: fb:da:72:a1:7d:a7:94:ca:54:7c:b1:b0:22:c0:e5:f7:7e:6d: f8:7a:c6:3a:1d:16:ca:7c:aa:35:d7:67:f9:10:49:ad:c9:e8: 91:6f:4b:2c:97:51:0b:e9:e2:d1:13:b0:26:3b:ae:18:ef:84: 82:b3:47:7e:5a:00:3d:37:7b:5d:e0:2d:bd:82:8c:e6:67:b6: 7f:f2:ff:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwNDIwMTg1NDQzWhcNMjYwNDI3MTg1NDQzWjAYMRYwFAYD VQQDEw02OWU2NzY3My1iYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5p8SntDLpk46iSWwZEPDNgGc0x02lZpYREBFmHcd/ct2nR6rRNWfjLk7NS82 Aq+l7w1kHBJ2shZBLi8K74Gf3MYajOWqbMiuTUdSMzXG+ZVJH5mqZuqW/OtYBO0r O7MsfQR650BdMRc3fQJLAIk6DjdRSUxDFby6BmGj/oub7Oh2ArNej/DlDUd7baz9 ErDZ5mIg3OYCVa+cqzRmjCme0i1kEtoXXFoh+U1Zd8oJFE0Ffwr/oS9tWKc6pXac OgJl3T83RbVuhCJUE33x89nKqdT5amt4kSzA8gmdQSkKtSuxuuNI7LO0kgoBEC9g V8hHI+xesh90vgTMWiqCnNLrkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCVSWzt +jttj4/yjyd/T7plhhw+MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5 eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAviRNM+5tBaZJRzQ4xL0XTsPh2kgDbP5CgUXh8mBrsViXzgPx1Ud9aw8V67SJ f83v1DwSag+KEAVFm8fTHUNbirMwvDBF4NNcQhK+VXbpovEZb3W3vNrWaaHml2dq 2w/RZShuOhv/kVLBQNWbOEl5B7T1IsEOCSIt7hX1lvicb1nlupH4fJKBg6Q/J0DZ gCMKuUqI8iBg6zuBXzkXuJljdIVKbI/Je4mKtSQmdIqCHD/bWLL6+9pyoX2nlMpU fLGwIsDl935t+HrGOh0WynyqNddn+RBJrcnokW9LLJdRC+ni0ROwJjuuGO+EgrNH floAPTd7XeAtvYKM5me2f/L/VQ== -----END CERTIFICATE-----Generated at Tue Apr 21 19:10:15 2026 by rpki-client