$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft File: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft (raw, json) Hash identifier: 4LMkgXwAKbAhf+tsYdpfuUwT3D8WBtAmnbTInmO2qXk= Subject key identifier: FF:A3:4D:2D:FB:13:E4:E6:C8:C8:36:46:C7:F8:C1:A1:1C:B7:2D:FA Authority key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C Certificate issuer: /CN=A91BE8A9/serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft Manifest number: 2F Signing time: Tue 21 Apr 2026 08:27:48 +0000 Manifest this update: Tue 21 Apr 2026 08:27:47 +0000 Manifest next update: Tue 28 Apr 2026 08:27:47 +0000 Files and hashes: 1: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl (hash: /89kmZO//tAOJGHPyX1qPIgVvqORw136abAz9+LUMyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C Validity Not Before: Apr 21 08:27:47 2026 GMT Not After : Apr 28 08:27:47 2026 GMT Subject: CN=69e73503-871b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:40:ab:c3:3b:03:07:4d:ce:4b:03:2c:02: dd:31:4c:76:59:6b:6a:4d:b3:c1:31:dc:db:f2:e2: 62:26:69:d7:3c:30:db:f9:99:21:60:b9:ec:71:b3: 41:0f:1b:b6:5b:cf:64:38:b3:82:11:34:48:25:39: 35:69:4e:cf:1a:5c:0e:f0:71:63:6d:8c:82:7d:a7: 24:c9:6f:2e:77:86:09:a3:52:39:8a:d3:cf:04:33: 95:f6:83:9f:35:6f:93:e3:f4:74:fe:24:c1:60:d4: 3a:a5:4a:e0:82:18:52:1b:8e:9b:0b:a8:e4:5a:57: ae:83:3a:2a:f2:25:b3:0b:f6:22:85:51:5e:f6:c7: 5b:6a:02:76:5a:65:3f:90:8f:99:8c:d2:ae:0c:9c: 09:36:76:5e:52:24:77:ba:9b:3e:8d:0d:13:68:14: 7a:d7:be:18:f9:91:ee:1a:2a:d0:c0:b7:63:f6:f0: 2f:b5:e7:98:31:ee:ea:09:8a:3e:2c:a3:98:bc:f6: 57:ae:7e:a7:20:a7:cf:83:f6:20:fe:25:18:96:a9: d2:45:4b:06:5a:61:25:55:88:fc:9a:00:b0:96:0a: 6a:46:e4:80:93:9a:de:6b:f8:60:33:41:9f:24:e4: ae:aa:b9:56:cc:2c:83:37:42:c8:a7:3f:52:94:91: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:4D:2D:FB:13:E4:E6:C8:C8:36:46:C7:F8:C1:A1:1C:B7:2D:FA X509v3 Authority Key Identifier: keyid:47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:54:da:5c:4c:ef:0c:35:e8:7c:97:cb:45:77:e6:91:27: 5b:ab:52:16:c1:85:49:cd:c3:e6:aa:e0:25:95:83:f2:90:c4: 15:df:4a:2e:ac:23:fc:5d:7d:40:4e:bd:e5:fd:d7:9f:30:f7: af:64:cd:8a:0c:4d:be:7f:d4:b0:de:c6:5c:7e:39:3c:26:8c: 2f:71:14:6b:a5:3c:a4:6f:b0:49:7c:b6:66:7d:0f:07:e6:a5: 3a:78:3e:ca:be:d5:83:de:ae:c1:ec:18:c2:04:9c:0a:b3:b9: ba:0b:7d:cc:66:74:98:f6:7f:b1:a7:4a:1a:96:39:e1:5d:15: 99:51:ee:a3:49:38:a0:c2:8b:ba:5f:f8:cb:6a:df:bc:68:3c: f1:eb:05:5f:02:fb:91:f0:09:02:3b:08:bf:c1:72:e1:ee:f3: 4e:d4:6a:9f:f2:00:c5:c4:92:b5:cc:f9:19:fe:32:b4:69:21: 1e:6e:38:63:32:8a:76:b4:25:cf:58:db:67:66:c4:16:06:bf: 32:f4:c6:c2:d1:29:c1:3d:6e:0f:11:ad:49:10:09:d7:7e:ee: b2:b0:28:c1:30:9e:e5:29:51:1f:18:52:a7:16:98:79:0b:73: b0:85:4e:38:3c:74:58:ea:64:ed:53:6f:17:fe:05:71:3a:01: 28:09:53:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoNDc2M0FBREYwQUJBNzhFNEMwMjI0RDNFREEwNkM0NDAw RTk3MTk4QzAeFw0yNjA0MjEwODI3NDdaFw0yNjA0MjgwODI3NDdaMBgxFjAUBgNV BAMTDTY5ZTczNTAzLTg3MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsSECrwzsDB03OSwMsAt0xTHZZa2pNs8Ex3Nvy4mImadc8MNv5mSFguexxs0EP G7Zbz2Q4s4IRNEglOTVpTs8aXA7wcWNtjIJ9pyTJby53hgmjUjmK088EM5X2g581 b5Pj9HT+JMFg1DqlSuCCGFIbjpsLqORaV66DOiryJbML9iKFUV72x1tqAnZaZT+Q j5mM0q4MnAk2dl5SJHe6mz6NDRNoFHrXvhj5ke4aKtDAt2P28C+155gx7uoJij4s o5i89leufqcgp8+D9iD+JRiWqdJFSwZaYSVViPyaALCWCmpG5ICTmt5r+GAzQZ8k 5K6quVbMLIM3QsinP1KUkdb3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/6NNLfsT 5ObIyDZGx/jBoRy3LfowHwYDVR0jBBgwFoAUR2Oq3wq6eOTAIk0+2gbEQA6XGYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0NFREZGNTE2RkJG NzExRjA4REMxRDgxODcxNkY1NkJDL1IyT3Ezd3E2ZU9UQUlrMC0yZ2JFUUE2WEdZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvUjJPcTN3cTZlT1RBSWswLTJnYkVRQTZYR1l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0NFREZGNTE2RkJGNzExRjA4REMxRDgxODcxNkY1NkJDL1IyT3Ezd3E2ZU9U QUlrMC0yZ2JFUUE2WEdZdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGa1TaXEzvDDXofJfLRXfmkSdbq1IWwYVJzcPmquAllYPykMQV30ourCP8XX1A Tr3l/defMPevZM2KDE2+f9Sw3sZcfjk8JowvcRRrpTykb7BJfLZmfQ8H5qU6eD7K vtWD3q7B7BjCBJwKs7m6C33MZnSY9n+xp0oaljnhXRWZUe6jSTigwou6X/jLat+8 aDzx6wVfAvuR8AkCOwi/wXLh7vNO1Gqf8gDFxJK1zPkZ/jK0aSEebjhjMop2tCXP WNtnZsQWBr8y9MbC0SnBPW4PEa1JEAnXfu6ysCjBMJ7lKVEfGFKnFph5C3OwhU44 PHRY6mTtU28X/gVxOgEoCVOi -----END CERTIFICATE-----Generated at Wed Apr 22 00:11:09 2026 by rpki-client