$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: mUbdBFF4lFi40OpTVpIVZ//z8sRQR4Gp8eVR/Y/wm/s= Subject key identifier: C4:86:B2:FA:23:0E:26:B4:8F:51:4C:4E:AC:2D:8A:69:F0:A7:E3:6A Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D47 Signing time: Sat 04 Apr 2026 17:54:01 +0000 Manifest this update: Sat 04 Apr 2026 17:54:00 +0000 Manifest next update: Sat 11 Apr 2026 17:54:00 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: xHbfANu7AVps2V6qiyPI0bQOH953Mx/xkpFAeRAsbWQ=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: n64xYPc/honl4c/2W5UUus2lLDkgfGWSMJZBO6CSTtw=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: 6W0EKCmbhZXUCb3JTj4cb3LX+lvYczLDKfF06TRghFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Apr 4 17:54:00 2026 GMT Not After : Apr 11 17:54:00 2026 GMT Subject: CN=69d15039-bb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:b9:c5:01:40:25:2a:b2:1d:5a:89:1c:1f: 2c:9c:4f:af:e8:fa:31:7e:3f:80:81:7c:4c:2e:5a: 9e:ee:e6:9a:54:b9:34:04:7a:f4:3f:57:45:c1:3a: 2f:01:e3:e4:bf:50:29:92:58:6f:2b:48:40:f0:d8: fe:96:18:c6:53:5d:a3:79:f7:27:6a:17:67:b7:3e: c9:13:c7:6d:fd:85:1f:23:32:83:d5:f3:0b:65:33: 8f:19:97:26:71:dc:fe:fa:51:65:76:19:08:8f:6f: 1c:0c:1b:f3:ac:71:e5:2f:f2:58:30:af:58:f2:18: 0b:44:6d:58:3e:df:09:15:44:76:28:3d:cf:51:86: 80:71:08:d3:af:0e:0c:52:32:2d:bb:34:fe:3b:73: c0:af:6b:a4:56:70:2f:2a:ce:70:7c:22:8f:ea:74: 6b:09:b5:31:bb:05:01:1a:bd:1a:c7:b7:43:64:65: 81:6b:c2:1e:e6:b9:2f:e5:f2:a0:16:32:96:d7:c3: 94:40:d1:85:6b:0c:34:fe:9b:b2:45:32:37:f2:3b: 8f:a2:2c:ef:a0:64:6a:58:15:7c:87:ce:54:65:42: c0:c2:32:56:ce:c2:19:1a:ed:34:47:a0:27:ad:3a: c0:2c:b0:1b:2d:b9:2b:1f:ef:b8:c2:5e:26:94:1d: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:86:B2:FA:23:0E:26:B4:8F:51:4C:4E:AC:2D:8A:69:F0:A7:E3:6A X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:43:a8:27:62:62:9a:77:87:bf:94:8d:f0:9f:f1:38:28:83: 73:bc:39:32:44:fd:fa:47:b1:87:33:82:ba:56:d6:5f:42:02: 58:ec:8f:82:06:a1:d0:19:3d:56:77:f8:e0:ca:72:3d:0c:e0: 68:70:34:eb:3d:9c:0a:1b:d7:e7:e9:00:2d:48:37:96:68:32: bb:cc:b0:41:81:37:60:ca:a0:61:2a:4a:87:3b:03:3c:e2:ff: 69:6b:b5:1e:a0:e5:9b:4e:e8:9c:94:8d:45:d3:be:a0:09:10: 73:ad:0d:ee:a8:96:ae:24:f5:b4:30:60:5c:50:74:35:6a:da: 54:91:32:00:d5:31:d9:a0:e1:45:c8:46:a0:96:99:1f:c2:03: 4b:77:22:da:ba:d9:ec:0e:9d:74:9e:4a:66:45:c7:3f:61:72: 43:ba:52:4e:7a:05:4b:51:97:7f:23:54:77:6e:4a:6b:0b:b5: c9:a7:0b:93:55:49:09:7d:27:de:12:20:0d:40:94:44:bd:22: 6a:90:cd:e0:67:38:eb:f4:61:9a:47:32:f1:2c:24:6a:59:5a: 77:38:f5:c1:5d:5a:93:bb:b6:2b:68:62:6f:a0:b0:ab:0f:4d: cb:7d:3e:d5:c5:6d:91:93:25:50:1c:45:99:54:43:1a:81:0f: d8:1f:51:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjYwNDA0MTc1NDAwWhcNMjYwNDExMTc1NDAwWjAYMRYwFAYD VQQDEw02OWQxNTAzOS1iYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+u5xQFAJSqyHVqJHB8snE+v6Poxfj+AgXxMLlqe7uaaVLk0BHr0P1dFwTov AePkv1ApklhvK0hA8Nj+lhjGU12jefcnahdntz7JE8dt/YUfIzKD1fMLZTOPGZcm cdz++lFldhkIj28cDBvzrHHlL/JYMK9Y8hgLRG1YPt8JFUR2KD3PUYaAcQjTrw4M UjItuzT+O3PAr2ukVnAvKs5wfCKP6nRrCbUxuwUBGr0ax7dDZGWBa8Ie5rkv5fKg FjKW18OUQNGFaww0/puyRTI38juPoizvoGRqWBV8h85UZULAwjJWzsIZGu00R6An rTrALLAbLbkrH++4wl4mlB0k/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSGsvoj Dia0j1FMTqwtimnwp+NqMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN0OoJ2JimneHv5SN8J/xOCiDc7w5MkT9+kexhzOCulbWX0ICWOyPggah0Bk9 Vnf44MpyPQzgaHA06z2cChvX5+kALUg3lmgyu8ywQYE3YMqgYSpKhzsDPOL/aWu1 HqDlm07onJSNRdO+oAkQc60N7qiWriT1tDBgXFB0NWraVJEyANUx2aDhRchGoJaZ H8IDS3ci2rrZ7A6ddJ5KZkXHP2FyQ7pSTnoFS1GXfyNUd25Kawu1yacLk1VJCX0n 3hIgDUCURL0iapDN4Gc46/Rhmkcy8Swkalladzj1wV1ak7u2K2hib6Cwqw9Ny30+ 1cVtkZMlUBxFmVRDGoEP2B9Row== -----END CERTIFICATE-----Generated at Mon Apr 6 15:13:59 2026 by rpki-client