$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: t/AFLVXxiAdYjIqasb+LFpxtF6z2X6ITjlGdyc/d8v8= Subject key identifier: 1D:16:C7:A7:83:6F:06:28:4B:3E:C4:D8:97:9F:B9:05:F7:C7:2E:08 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 0546 Signing time: Sun 26 Apr 2026 23:26:15 +0000 Manifest this update: Sun 26 Apr 2026 23:26:15 +0000 Manifest next update: Sun 03 May 2026 23:26:15 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: jmooyUtzRf0+k8hixaSV64RAjQle8s/pmVNSZQWMaOQ=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: lYuc7KAwDmnwAL+8k2Ka5IK1fQ2BuQOjBbbuBba3h5c=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: t3chBruHTyyhjmWGr7PACIhRpSOcddPnItF52cMQU50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Apr 26 23:26:15 2026 GMT Not After : May 3 23:26:15 2026 GMT Subject: CN=69ee9f17-8dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:38:19:71:7b:02:b5:18:b6:a2:08:12:ed: 7b:3a:3e:24:3f:f4:45:63:b0:e5:01:ac:d4:11:6e: 5a:65:79:75:9a:d8:65:35:14:3e:55:90:32:87:2e: 60:eb:83:a4:2b:b1:3a:9f:6c:65:14:5e:4f:fc:c8: 4e:47:d1:63:f2:0d:9a:20:7d:41:f0:1e:eb:dd:db: 4e:50:12:01:fe:3b:5e:01:3e:48:06:ef:e7:75:25: c0:ea:71:28:51:9c:d9:a3:68:cc:7a:51:c2:cf:cf: 3b:8d:18:45:7c:88:74:38:b5:e8:55:80:97:0b:ff: f9:78:aa:d8:0a:76:a5:39:88:f5:b9:da:b0:27:38: a8:3d:f7:8c:fc:97:73:dd:6b:da:1c:95:18:f7:69: fc:76:30:80:70:35:ba:c5:6d:98:c6:72:b8:54:8a: 22:1e:5e:dd:b6:5b:8f:49:e9:34:66:f5:97:2c:e9: 20:21:a5:fd:58:9f:95:ec:87:ba:9b:26:67:fd:c1: 86:2a:7a:84:d3:58:2e:82:2d:c5:31:fa:dd:a3:94: 2e:53:a8:e5:61:5d:8a:3c:dc:f0:b4:e1:d7:c6:f9: 3f:91:7c:1a:17:15:34:4e:58:5e:9d:c7:72:a3:4e: 11:f6:aa:0e:d5:50:e1:ef:26:2a:49:96:ae:e0:02: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:16:C7:A7:83:6F:06:28:4B:3E:C4:D8:97:9F:B9:05:F7:C7:2E:08 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ab:f5:b0:5f:86:cb:00:1c:7c:f2:81:18:e5:cc:0b:88:73: ae:80:66:8b:b6:5c:ee:0b:9c:13:c5:08:00:ac:99:30:e0:b7: 83:48:c1:ca:03:aa:04:1e:5a:7e:11:83:8b:55:72:36:d2:ea: f3:3e:85:3f:dd:ba:82:8d:ff:92:97:b0:b6:54:b0:2a:bd:09: f3:dd:30:fa:e4:85:da:a1:0d:b7:cf:ba:dc:63:5a:e1:97:d8: 6d:cf:df:b2:c3:ab:ce:74:03:14:49:d1:b2:f9:54:94:7d:cb: c7:2b:28:3a:ab:15:b5:37:81:9f:3c:8c:d7:a5:11:9e:bc:0e: f1:4e:5a:30:fb:9f:79:9a:47:f4:32:4e:7e:cc:1b:7a:1f:5b: 97:8b:b0:ae:a4:ff:a2:76:d6:c7:7b:cb:38:59:87:2a:c6:8a: 81:27:28:c7:51:4c:df:a5:5b:b9:e1:2d:f7:77:5a:3d:8e:90: b3:76:ce:b0:de:d4:53:5c:e0:fb:b7:a3:a7:89:45:5d:74:0c: a7:39:21:7a:c5:49:44:5e:3d:f1:4f:86:6e:f2:8d:f1:57:2a: 83:42:88:07:63:fd:87:70:37:1a:cf:6b:60:3e:05:d0:aa:ef: f7:5b:bc:41:92:0b:88:b2:59:b0:85:fa:69:5a:29:c9:72:5f: b1:69:62:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjYwNDI2MjMyNjE1WhcNMjYwNTAzMjMyNjE1WjAYMRYwFAYD VQQDEw02OWVlOWYxNy04ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Dw4GXF7ArUYtqIIEu17Oj4kP/RFY7DlAazUEW5aZXl1mthlNRQ+VZAyhy5g 64OkK7E6n2xlFF5P/MhOR9Fj8g2aIH1B8B7r3dtOUBIB/jteAT5IBu/ndSXA6nEo UZzZo2jMelHCz887jRhFfIh0OLXoVYCXC//5eKrYCnalOYj1udqwJzioPfeM/Jdz 3WvaHJUY92n8djCAcDW6xW2YxnK4VIoiHl7dtluPSek0ZvWXLOkgIaX9WJ+V7Ie6 myZn/cGGKnqE01gugi3FMfrdo5QuU6jlYV2KPNzwtOHXxvk/kXwaFxU0Tlhencdy o04R9qoO1VDh7yYqSZau4AIqzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0Wx6eD bwYoSz7E2JefuQX3xy4IMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6v1sF+GywAcfPKBGOXMC4hzroBmi7Zc7gucE8UIAKyZMOC3g0jBygOqBB5a fhGDi1VyNtLq8z6FP926go3/kpewtlSwKr0J890w+uSF2qENt8+63GNa4ZfYbc/f ssOrznQDFEnRsvlUlH3LxysoOqsVtTeBnzyM16URnrwO8U5aMPufeZpH9DJOfswb eh9bl4uwrqT/onbWx3vLOFmHKsaKgScox1FM36VbueEt93daPY6Qs3bOsN7UU1zg +7ejp4lFXXQMpzkhesVJRF498U+GbvKN8Vcqg0KIB2P9h3A3Gs9rYD4F0Krv91u8 QZILiLJZsIX6aVopyXJfsWlirQ== -----END CERTIFICATE-----Generated at Mon Apr 27 23:51:26 2026 by rpki-client