$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: w1At0etwkA2wiSXh1d81AcHbgHImlYJOTl8JRfUvGbQ= Subject key identifier: BE:75:5F:62:F2:A5:EB:FA:57:D4:BE:5C:D1:7E:D4:8A:8E:9C:35:4C Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 354B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 353A Signing time: Sat 04 Apr 2026 14:43:48 +0000 Manifest this update: Sat 04 Apr 2026 14:43:47 +0000 Manifest next update: Sat 11 Apr 2026 14:43:47 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: 841Zk/XvT7RI+x5gjJKJO8SYW133vy5VZsCw2dj+sdA=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: 13OFQ4+DXlBY64hL4vDY3u0qJPTe15xHqCHPoGlCW1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13643 (0x354b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Apr 4 14:43:47 2026 GMT Not After : Apr 11 14:43:47 2026 GMT Subject: CN=69d123a4-ad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:c9:ec:43:09:70:a0:c4:61:fe:e3:c5:ec: 13:97:68:db:95:15:92:53:35:f2:8a:d1:c7:69:77: b0:35:b8:54:78:f4:d9:45:3e:96:a9:d6:99:ec:61: d8:2a:d0:e3:57:88:90:ef:9f:51:96:fc:04:f3:87: e1:f8:e6:0a:6d:70:18:42:0f:05:e1:97:49:c5:8a: 31:33:77:b3:58:4e:a7:d7:88:72:bc:d9:56:04:2a: 0e:c6:9c:b4:8d:d1:ea:22:a5:b2:62:dc:30:31:25: cc:91:9f:44:48:de:6c:7c:46:59:89:95:5b:a3:9e: 47:e7:cb:e2:42:37:7f:4a:c8:13:7d:dd:a0:5e:a9: 9c:60:82:2a:87:aa:06:b6:40:d9:a2:e8:1a:c7:a9: ca:62:e1:54:af:77:5d:a3:2f:f2:a7:8f:fd:28:8f: 67:48:6a:3f:bd:9f:5d:6d:b9:a8:96:e4:9d:02:e6: 5e:c4:07:c0:df:ea:5e:c1:2a:cd:9c:e2:0e:d5:2e: 17:eb:1a:8a:5b:eb:2a:ca:2d:15:60:77:28:9c:72: c5:83:84:62:d8:c3:23:78:5f:df:6c:40:a6:fa:38: e0:14:58:94:80:6a:b0:59:16:e9:1d:76:e5:40:07: 56:76:9f:72:7c:91:9f:db:bb:5c:28:e8:bb:b5:d0: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:5F:62:F2:A5:EB:FA:57:D4:BE:5C:D1:7E:D4:8A:8E:9C:35:4C X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:af:cb:6e:24:39:5a:61:ec:22:8f:3b:5e:23:69:34:ef:72: e3:36:ad:81:b1:fe:46:e8:90:57:3a:4a:25:62:75:a9:e2:cc: bf:4f:35:d6:30:91:b4:2c:c5:41:13:47:e4:68:73:92:10:aa: 62:2b:8a:08:69:23:31:a5:07:ee:72:99:9c:c4:4c:96:59:f0: 29:16:5e:7a:a2:0c:b5:eb:fb:30:8f:c4:aa:c0:c9:57:31:7e: 76:45:09:29:58:4c:2a:49:bd:df:e2:8a:fa:d8:05:27:09:39: 31:49:12:76:b9:8e:99:15:69:f8:60:ff:b5:de:32:72:54:04: 99:17:86:8d:aa:a1:d9:15:8a:6d:84:0e:de:2f:39:01:c4:a7: 69:9f:d3:88:25:48:bf:cd:84:75:d1:fe:b5:38:fc:e4:c3:5d: dc:0a:3e:6c:0a:65:1a:7c:1e:f3:35:4a:7f:29:65:99:57:59: 9a:5c:5b:e0:7d:ec:e7:13:e5:6f:00:db:af:51:f5:9d:f6:c5: 15:04:00:17:d0:aa:f9:17:2f:14:90:f3:d2:d2:32:3a:e8:1f: 69:36:c6:ea:32:6d:ee:54:97:d7:63:ca:85:f3:17:0a:0d:fe: 01:cf:60:73:25:89:b0:62:ef:dd:f3:ed:03:1f:e0:68:a5:e3: 6f:b2:a5:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjYwNDA0MTQ0MzQ3WhcNMjYwNDExMTQ0MzQ3WjAYMRYwFAYD VQQDEw02OWQxMjNhNC1hZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsffJ7EMJcKDEYf7jxewTl2jblRWSUzXyitHHaXewNbhUePTZRT6WqdaZ7GHY KtDjV4iQ759RlvwE84fh+OYKbXAYQg8F4ZdJxYoxM3ezWE6n14hyvNlWBCoOxpy0 jdHqIqWyYtwwMSXMkZ9ESN5sfEZZiZVbo55H58viQjd/SsgTfd2gXqmcYIIqh6oG tkDZougax6nKYuFUr3ddoy/yp4/9KI9nSGo/vZ9dbbmoluSdAuZexAfA3+pewSrN nOIO1S4X6xqKW+sqyi0VYHconHLFg4Ri2MMjeF/fbECm+jjgFFiUgGqwWRbpHXbl QAdWdp9yfJGf27tcKOi7tdBtcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL51X2Ly pev6V9S+XNF+1IqOnDVMMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoa/LbiQ5WmHsIo87XiNpNO9y4zatgbH+RuiQVzpKJWJ1qeLMv0811jCRtCzF QRNH5GhzkhCqYiuKCGkjMaUH7nKZnMRMllnwKRZeeqIMtev7MI/EqsDJVzF+dkUJ KVhMKkm93+KK+tgFJwk5MUkSdrmOmRVp+GD/td4yclQEmReGjaqh2RWKbYQO3i85 AcSnaZ/TiCVIv82EddH+tTj85MNd3Ao+bAplGnwe8zVKfyllmVdZmlxb4H3s5xPl bwDbr1H1nfbFFQQAF9Cq+RcvFJDz0tIyOugfaTbG6jJt7lSX12PKhfMXCg3+Ac9g cyWJsGLv3fPtAx/gaKXjb7KllQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:16 2026 by rpki-client