$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json) Hash identifier: AQ+NNkwCoX/WT7KxEBuj+NdTKY0C0XsjfZsXchayrGc= Subject key identifier: 08:5F:68:CC:49:C7:63:A5:FB:30:B1:8C:EA:44:70:89:A5:E3:8C:B7 Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft Manifest number: 34 Signing time: Tue 21 Apr 2026 08:24:53 +0000 Manifest this update: Tue 21 Apr 2026 08:24:52 +0000 Manifest next update: Tue 28 Apr 2026 08:24:52 +0000 Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: 9VVL95wqhnaMCGwDmbqgu29IkmT2guRbQWheqw55Fd8=) 2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: Apr 21 08:24:52 2026 GMT Not After : Apr 28 08:24:52 2026 GMT Subject: CN=69e73455-4608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:9b:ca:c4:29:30:ac:27:57:61:0e:f5:2b: f5:61:7d:35:30:c0:e0:30:12:1b:b5:b7:10:e6:01: a7:f1:a2:5d:a1:05:3a:3b:72:04:b2:53:98:25:52: f4:0b:5e:d2:02:d8:ac:eb:40:03:78:b7:f3:ba:45: e9:ad:a8:f7:50:82:06:c3:67:23:18:a9:35:07:a1: 1f:47:16:02:e2:a9:9d:d6:ab:13:34:8e:16:bd:db: 1e:2e:1c:43:71:58:6b:fc:bf:85:4c:cb:b2:00:35: 8b:0d:84:bc:4b:57:d7:c0:2d:44:31:ad:6a:1d:bb: 98:10:d3:15:ea:25:d1:71:05:31:ac:ad:95:2c:09: 46:bb:01:81:fe:79:ae:53:66:5d:da:e8:88:9a:06: eb:59:fb:2e:36:c0:7f:80:54:2d:4e:b2:08:f8:be: a7:fa:9d:ae:f5:a1:d9:fb:bb:e1:56:cc:fd:a9:2d: 8c:a9:6e:2b:39:b1:ca:4e:41:ab:9c:02:a4:71:41: bf:ab:ba:53:08:d5:6a:8f:82:33:db:1e:ac:7a:13: b0:7a:28:73:7e:1d:c6:d1:f3:aa:27:d1:0e:1e:6d: 33:08:6c:58:17:dd:a7:6a:12:44:8e:8e:a2:54:70: 3d:01:b6:71:7e:25:60:e4:a5:56:18:91:3e:9f:84: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:68:CC:49:C7:63:A5:FB:30:B1:8C:EA:44:70:89:A5:E3:8C:B7 X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f3:ab:a1:3f:61:a1:6c:ad:16:60:3b:ad:5a:fa:87:1d:fb: de:53:17:83:69:51:a0:93:c6:22:ab:6d:cf:b5:cb:40:5a:a9: 53:2e:84:84:58:07:2b:ae:1c:7e:32:87:9c:1b:ad:65:8b:9f: d8:d8:4b:54:0e:c1:f9:d1:2e:5f:0c:88:f8:a7:73:c7:ac:c2: 99:e7:09:74:24:74:d8:4c:60:e3:04:64:c5:ab:87:96:db:10: f5:5c:8a:e3:bf:43:d5:47:75:3e:de:59:8a:c7:b0:e7:ca:3f: fe:8c:f6:64:ae:7f:d1:2c:47:d6:9c:70:eb:70:d5:a2:49:9f: 5f:a7:72:12:ff:ff:65:1c:74:02:a2:06:20:3a:8c:cb:67:ce: e0:56:44:0f:80:8a:ab:78:40:a0:4d:53:b2:7c:8d:70:b8:d1: 29:11:9d:67:14:cf:a1:9f:1b:ec:78:be:d3:17:32:ad:56:0d: c3:6f:ad:7c:71:1b:0c:65:16:e8:7c:9a:f4:9b:d6:9c:fd:b3: 59:16:45:97:e4:4a:3a:2b:6f:59:56:af:45:b3:06:5b:f6:d3: fa:76:8b:89:5e:e3:e3:17:c1:a3:ca:37:c7:07:93:d8:ae:91: b9:c5:1c:1c:b6:61:50:51:8d:c4:bc:4b:d8:33:b6:af:a7:19: ad:1a:21:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjA0MjEwODI0NTJaFw0yNjA0MjgwODI0NTJaMBgxFjAUBgNV BAMTDTY5ZTczNDU1LTQ2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOgJvKxCkwrCdXYQ71K/VhfTUwwOAwEhu1txDmAafxol2hBTo7cgSyU5glUvQL XtIC2KzrQAN4t/O6RemtqPdQggbDZyMYqTUHoR9HFgLiqZ3WqxM0jha92x4uHENx WGv8v4VMy7IANYsNhLxLV9fALUQxrWodu5gQ0xXqJdFxBTGsrZUsCUa7AYH+ea5T Zl3a6IiaButZ+y42wH+AVC1Osgj4vqf6na71odn7u+FWzP2pLYypbis5scpOQauc AqRxQb+rulMI1WqPgjPbHqx6E7B6KHN+HcbR86on0Q4ebTMIbFgX3adqEkSOjqJU cD0BtnF+JWDkpVYYkT6fhI7tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCF9ozEnH Y6X7MLGM6kRwiaXjjLcwHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD QjA5L0YzMDJFNTM0RjRGRTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4 VWVLdzZ0V3BxdFBuQnZVWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBU86uhP2GhbK0WYDutWvqHHfveUxeDaVGgk8Yiq23PtctAWqlTLoSEWAcrrhx+ MoecG61li5/Y2EtUDsH50S5fDIj4p3PHrMKZ5wl0JHTYTGDjBGTFq4eW2xD1XIrj v0PVR3U+3lmKx7Dnyj/+jPZkrn/RLEfWnHDrcNWiSZ9fp3IS//9lHHQCogYgOozL Z87gVkQPgIqreECgTVOyfI1wuNEpEZ1nFM+hnxvseL7TFzKtVg3Db618cRsMZRbo fJr0m9ac/bNZFkWX5Eo6K29ZVq9FswZb9tP6douJXuPjF8GjyjfHB5PYrpG5xRwc tmFQUY3EvEvYM7avpxmtGiFb -----END CERTIFICATE-----Generated at Wed Apr 22 01:43:08 2026 by rpki-client