$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: xzqZ7MZE83pj56A0AEBaKLwJuBJOBGrEdGsi9Nq2wBI= Subject key identifier: A3:0F:76:12:C0:81:6F:3F:B8:C1:20:71:19:C4:6D:48:E8:E0:4C:42 Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 0298 Signing time: Sun 05 Apr 2026 01:15:19 +0000 Manifest this update: Sun 05 Apr 2026 01:15:19 +0000 Manifest next update: Sun 12 Apr 2026 01:15:19 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: S7rcywSs6XdKBMcBQhFehmE8zIUi7kgMCH8HEuWgD9g=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: /OmusQFGUMLnSfPvaQeL+Y1Ye83OM/m03GrlGqmFNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: Apr 5 01:15:19 2026 GMT Not After : Apr 12 01:15:19 2026 GMT Subject: CN=69d1b7a7-bde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:20:4b:0c:f0:47:97:d7:c7:51:a5:90:20: 24:f4:3c:04:2b:3f:ba:06:85:06:53:f8:59:ec:f0: 08:45:13:40:b4:9c:3f:76:3e:30:bd:4e:82:0e:91: b0:3b:df:d9:72:b2:81:d4:51:a8:1d:17:1e:cc:7a: 17:e3:ec:94:a5:13:c5:bc:e1:98:50:99:1e:8f:3b: 8b:20:ac:f1:5e:b0:88:4e:b3:a4:ed:e3:f9:e6:59: 6d:79:c7:fd:3c:bb:ab:63:d0:1d:b6:f4:5e:b7:7a: f1:1d:25:fd:37:75:d6:9f:f9:96:26:00:74:00:ef: bd:61:ca:db:f7:bc:00:25:9f:e7:f1:fb:2a:aa:12: c3:36:b7:b1:97:cf:44:b2:30:c1:92:c9:f7:a7:b4: a9:22:f4:71:d6:da:26:87:8c:4f:6b:85:bd:7b:3a: a3:cd:8b:6e:07:57:80:0b:4c:c0:b1:68:4c:5c:e3: ae:c8:5c:2d:d5:d3:57:8f:3b:90:bb:b0:f5:94:2a: e3:d9:b7:c3:cc:b1:f5:b7:1a:c1:9c:5b:44:ba:d3: bd:f4:3f:8e:7e:7a:ba:9f:3f:04:07:bd:8f:4b:57: c0:96:73:bf:c1:9d:87:2b:a7:76:7f:04:0d:95:c9: 44:9c:2e:ed:a7:d4:19:0c:64:0c:23:a1:e6:28:49: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0F:76:12:C0:81:6F:3F:B8:C1:20:71:19:C4:6D:48:E8:E0:4C:42 X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:be:1e:eb:98:9b:25:8f:bf:17:45:83:28:a4:29:d1:05:30: 09:e0:90:b2:7e:ee:a3:21:53:b4:9e:b8:eb:f8:39:c8:71:77: 3e:6b:39:96:39:d1:7f:74:ca:44:0d:eb:3e:bd:5e:6f:04:0e: 0f:c5:98:31:cb:4b:20:7f:6f:2b:6d:39:2d:c5:d9:c0:43:52: 87:ae:a1:0f:8b:10:10:6f:03:93:72:99:62:f5:21:9b:80:d2: 96:d3:b6:57:30:8a:4a:7f:fa:a1:c7:e5:87:2d:2a:aa:f3:cd: e4:9a:79:b8:31:6e:d6:2c:23:81:a7:f5:1e:4c:0e:07:92:57: ad:07:44:6e:05:83:f7:9e:df:6b:a6:a6:5c:dc:97:40:32:db: 4f:46:08:0e:a4:18:17:d6:d9:0f:69:99:54:64:b3:94:21:6b: 66:04:8d:63:24:5d:de:34:56:06:01:11:08:ab:d8:72:be:d1: 31:e0:ce:c6:1d:67:e7:2d:ba:63:0a:b9:55:e1:17:17:bf:31: ca:89:b8:d6:9f:7c:26:f7:50:53:dd:6d:67:bb:b3:3a:9c:56: b3:9e:f1:28:70:a9:81:74:f7:35:a2:ea:d1:94:80:cc:18:1a: 0e:8e:d7:2f:79:c0:c5:68:aa:e5:93:35:9c:cd:8f:3c:7f:ed: 48:b1:b4:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjYwNDA1MDExNTE5WhcNMjYwNDEyMDExNTE5WjAYMRYwFAYD VQQDEw02OWQxYjdhNy1iZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK0gSwzwR5fXx1GlkCAk9DwEKz+6BoUGU/hZ7PAIRRNAtJw/dj4wvU6CDpGw O9/ZcrKB1FGoHRcezHoX4+yUpRPFvOGYUJkejzuLIKzxXrCITrOk7eP55lltecf9 PLurY9AdtvRet3rxHSX9N3XWn/mWJgB0AO+9Ycrb97wAJZ/n8fsqqhLDNrexl89E sjDBksn3p7SpIvRx1tomh4xPa4W9ezqjzYtuB1eAC0zAsWhMXOOuyFwt1dNXjzuQ u7D1lCrj2bfDzLH1txrBnFtEutO99D+Ofnq6nz8EB72PS1fAlnO/wZ2HK6d2fwQN lclEnC7tp9QZDGQMI6HmKEkwLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMPdhLA gW8/uMEgcRnEbUjo4ExCMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAr4e65ibJY+/F0WDKKQp0QUwCeCQsn7uoyFTtJ646/g5yHF3Pms5ljnRf3TK RA3rPr1ebwQOD8WYMctLIH9vK205LcXZwENSh66hD4sQEG8Dk3KZYvUhm4DSltO2 VzCKSn/6ocflhy0qqvPN5Jp5uDFu1iwjgaf1HkwOB5JXrQdEbgWD957fa6amXNyX QDLbT0YIDqQYF9bZD2mZVGSzlCFrZgSNYyRd3jRWBgERCKvYcr7RMeDOxh1n5y26 Ywq5VeEXF78xyom41p98JvdQU91tZ7uzOpxWs57xKHCpgXT3NaLq0ZSAzBgaDo7X L3nAxWiq5ZM1nM2PPH/tSLG0Pw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:23 2026 by rpki-client