$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json) Hash identifier: ZdcyRbZVESILNUz1PAYl8HM5Nnq+l3rQcI7z0zvx/74= Subject key identifier: 8F:E2:A1:89:8C:D1:40:29:4B:A5:7C:46:5B:64:57:5E:19:13:16:A1 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft Manifest number: 0125 Signing time: Sun 05 Apr 2026 05:05:33 +0000 Manifest this update: Sun 05 Apr 2026 05:05:33 +0000 Manifest next update: Sun 12 Apr 2026 05:05:33 +0000 Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: QRdtla+GHWPVunSKIQGQRRfmCSQMjCKiJ5LP2IXSoHA=) 2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: FW4g/QhH4gL1hdaSiCtFk1K0xDP8/LV5Fbh+qpfxD0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Apr 5 05:05:33 2026 GMT Not After : Apr 12 05:05:33 2026 GMT Subject: CN=69d1ed9d-5be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:8e:ea:06:97:d9:7b:b4:c1:ff:1d:54:8c: 97:99:b3:cc:d4:2a:51:ab:ac:ad:24:40:2e:86:09: 20:5c:81:e5:95:2c:0a:45:18:43:6d:0a:f7:3c:35: 03:eb:c8:6e:63:fb:d3:f8:b1:fb:a7:81:14:bf:13: 4d:11:25:e7:1a:a9:b0:7f:03:08:6c:35:30:12:21: 1f:a4:db:f8:f6:9a:e9:ac:ec:ae:dd:20:6d:fc:65: c0:fb:65:e1:8a:b0:5b:ea:f9:06:f2:07:fc:88:35: ff:02:6c:1a:ec:42:7b:cb:27:dc:45:78:9e:52:1d: 1e:57:95:23:81:65:3e:3b:08:27:2e:72:d1:56:5b: 50:40:9d:e6:3c:d7:b9:70:50:83:2e:24:bd:3d:52: a8:33:45:36:5e:51:61:11:22:a7:c4:11:55:10:6a: ef:e2:dc:a1:71:19:3f:9f:8b:e4:82:e9:22:d7:0a: ed:03:86:e2:4f:76:80:1c:5b:7d:ed:f8:7c:cf:a2: 28:80:12:b0:07:42:62:c8:7d:38:29:77:11:95:00: aa:9c:3f:40:9d:3b:ad:bc:1a:c2:d8:ad:3c:b9:c9: 38:63:8f:06:6b:a6:71:22:5b:81:fb:ba:84:67:a8: e2:9f:81:4e:a2:0f:21:91:42:32:e9:db:85:49:10: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:A1:89:8C:D1:40:29:4B:A5:7C:46:5B:64:57:5E:19:13:16:A1 X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f0:24:a2:89:94:f5:e3:22:cd:f8:bb:b4:21:ad:00:17:9f: 39:ce:ec:2d:54:87:51:d5:d3:1d:55:c5:50:29:f7:5c:f0:c0: 35:91:84:02:d1:a5:09:66:59:90:74:dc:f7:3d:f1:d0:db:fd: 94:89:20:15:f8:6c:ff:e8:64:14:5a:49:90:6d:81:9c:98:d3: 2b:6c:6c:db:05:5d:58:58:2a:88:7a:63:c8:46:4d:7d:a5:24: 38:16:61:ec:7f:02:da:8b:63:a5:cc:46:67:02:70:0b:45:c0: c7:e8:7d:93:75:5e:87:17:5d:22:89:70:0a:ba:0f:0b:3d:5d: cd:1d:a1:90:4e:35:01:56:f1:b7:da:b1:d1:c2:bc:51:c4:e9: fb:be:69:2a:70:ba:2a:1e:fc:77:1c:77:f7:30:ca:3e:10:02: 40:8f:39:e7:e4:65:af:42:0f:b1:ae:f5:dd:cc:d3:bc:49:13: 61:e7:ba:04:29:b1:f1:29:ae:64:88:46:26:76:3f:fc:19:1e: 94:68:ce:f8:c4:5b:5b:f9:35:38:83:42:a6:c2:86:15:0e:47: 19:39:f2:c4:9d:bf:9a:38:51:fe:1d:b3:e6:90:0c:3f:ed:02: 3f:2d:ae:6e:67:8d:51:15:90:e3:12:41:44:82:4f:ad:49:de: cf:fb:e3:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjYwNDA1MDUwNTMzWhcNMjYwNDEyMDUwNTMzWjAYMRYwFAYD VQQDEw02OWQxZWQ5ZC01YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZGO6gaX2Xu0wf8dVIyXmbPM1CpRq6ytJEAuhgkgXIHllSwKRRhDbQr3PDUD 68huY/vT+LH7p4EUvxNNESXnGqmwfwMIbDUwEiEfpNv49prprOyu3SBt/GXA+2Xh irBb6vkG8gf8iDX/Amwa7EJ7yyfcRXieUh0eV5UjgWU+OwgnLnLRVltQQJ3mPNe5 cFCDLiS9PVKoM0U2XlFhESKnxBFVEGrv4tyhcRk/n4vkguki1wrtA4biT3aAHFt9 7fh8z6IogBKwB0JiyH04KXcRlQCqnD9AnTutvBrC2K08uck4Y48Ga6ZxIluB+7qE Z6jin4FOog8hkUIy6duFSRCN8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/ioYmM 0UApS6V8RltkV14ZExahMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0QxNC9DREIzQjlBQTc0QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0Ju YXluOWVyeWZnYlNwSDlpb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjfAkoomU9eMizfi7tCGtABefOc7sLVSHUdXTHVXFUCn3XPDANZGEAtGlCWZZ kHTc9z3x0Nv9lIkgFfhs/+hkFFpJkG2BnJjTK2xs2wVdWFgqiHpjyEZNfaUkOBZh 7H8C2otjpcxGZwJwC0XAx+h9k3VehxddIolwCroPCz1dzR2hkE41AVbxt9qx0cK8 UcTp+75pKnC6Kh78dxx39zDKPhACQI855+Rlr0IPsa713czTvEkTYee6BCmx8Smu ZIhGJnY//BkelGjO+MRbW/k1OINCpsKGFQ5HGTnyxJ2/mjhR/h2z5pAMP+0CPy2u bmeNURWQ4xJBRIJPrUnez/vj2Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:47 2026 by rpki-client