$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: DfPN8KJKQFFIGDUy8fv5Yw/sGWRWxd1OwZzRnURdcWI= Subject key identifier: AA:66:0B:8B:CF:4C:1C:D3:C3:34:00:70:DA:79:34:68:47:B8:7A:5E Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0DAE Signing time: Sat 04 Apr 2026 17:47:12 +0000 Manifest this update: Sat 04 Apr 2026 17:47:12 +0000 Manifest next update: Sat 11 Apr 2026 17:47:12 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: eYHmHtXVGhED6gqcFTGuvvX0bz+4X9iAs8Bb89Jo/wc=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: wM4jTVSXdRa49wS3QCPAkcV9PaMIwDAgOcfWtEI5Jsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Apr 4 17:47:12 2026 GMT Not After : Apr 11 17:47:12 2026 GMT Subject: CN=69d14ea0-e08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:4b:9d:1e:7b:b0:9a:78:98:74:6b:58:27: aa:cc:88:d4:12:93:a7:11:d6:91:a8:61:e1:88:13: a5:47:40:cc:d6:2a:d7:2a:2a:43:22:56:66:57:33: 5a:9c:71:e8:8b:f5:8f:cd:3a:6f:6f:aa:a1:97:5e: d9:a5:30:c1:d1:dd:28:ba:ab:89:6c:71:cb:55:28: 6a:1a:51:58:0b:a1:3c:ff:c8:45:de:8f:d6:c3:e4: ca:62:60:81:cf:5d:04:bb:f2:e7:35:6c:d6:16:83: bb:81:a2:a3:ae:d7:b8:2b:53:24:9d:17:48:2b:66: 87:4b:ae:6e:d8:6c:82:12:19:e0:4a:f5:e3:6a:6a: 9f:f0:7f:3d:8d:91:ff:f2:cd:22:8b:7c:d9:66:9b: b0:8e:7d:ab:08:1c:e4:55:c5:06:61:c4:47:44:ea: 99:6f:39:59:af:18:1d:f5:85:71:0c:a9:9d:c5:b1: af:34:f4:8e:cf:ef:3c:95:9d:00:64:6b:b0:8d:26: c9:9d:46:00:2b:72:13:5e:e5:bb:6e:e0:05:9e:e4: c2:4e:84:27:ca:09:79:aa:7e:f1:41:0c:35:c5:fc: 61:85:4b:45:5b:51:08:b3:7d:98:51:dd:77:e4:a7: cf:bb:40:ca:16:9b:52:cc:54:6b:c5:48:da:16:f4: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:0B:8B:CF:4C:1C:D3:C3:34:00:70:DA:79:34:68:47:B8:7A:5E X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:93:6c:21:0e:ea:b6:e9:50:b2:cb:ef:f4:28:76:fc:57:d6: 05:d2:e0:41:af:90:ba:ba:81:b5:cd:62:3e:73:b4:ff:79:08: 76:55:42:ed:01:f3:0e:e3:e1:1c:f9:9e:92:a1:23:a8:42:01: a4:f6:13:1e:20:54:77:18:e2:63:86:90:08:67:3a:54:96:04: 45:17:c8:b9:e3:54:f6:d9:3d:fa:14:f2:8d:33:cd:1d:d9:30: 72:7b:21:f5:60:c1:0f:a5:b7:17:4c:b1:11:b3:eb:60:f1:20: 9c:b2:30:8f:1c:d4:53:98:87:df:aa:80:ea:09:cf:f4:03:c8: fc:e6:aa:89:cd:67:dc:05:d3:5c:95:52:98:cd:65:1c:8d:cd: c4:1a:3f:ca:b6:f8:7a:50:dc:39:ac:f0:53:02:1a:0b:3f:0c: 39:3a:7c:e8:1c:e5:83:9b:a0:0b:0b:d7:d6:a6:80:3a:d7:93: b6:66:5c:55:e6:43:50:91:9d:b1:49:64:f2:38:9e:56:a5:19: 4c:c1:22:05:4f:97:8d:5b:3d:f1:9c:4d:97:3c:51:93:1d:15: f5:31:79:1b:a3:66:7e:c8:a2:07:cb:87:71:6c:5c:a4:9d:06: 92:a7:71:68:00:da:45:3d:ea:d8:3e:80:c3:18:71:02:90:ce: 75:78:76:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjYwNDA0MTc0NzEyWhcNMjYwNDExMTc0NzEyWjAYMRYwFAYD VQQDEw02OWQxNGVhMC1lMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqRLnR57sJp4mHRrWCeqzIjUEpOnEdaRqGHhiBOlR0DM1irXKipDIlZmVzNa nHHoi/WPzTpvb6qhl17ZpTDB0d0ouquJbHHLVShqGlFYC6E8/8hF3o/Ww+TKYmCB z10Eu/LnNWzWFoO7gaKjrte4K1MknRdIK2aHS65u2GyCEhngSvXjamqf8H89jZH/ 8s0ii3zZZpuwjn2rCBzkVcUGYcRHROqZbzlZrxgd9YVxDKmdxbGvNPSOz+88lZ0A ZGuwjSbJnUYAK3ITXuW7buAFnuTCToQnygl5qn7xQQw1xfxhhUtFW1EIs32YUd13 5KfPu0DKFptSzFRrxUjaFvRn2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpmC4vP TBzTwzQAcNp5NGhHuHpeMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpNsIQ7qtulQssvv9Ch2/FfWBdLgQa+QurqBtc1iPnO0/3kIdlVC7QHzDuPh HPmekqEjqEIBpPYTHiBUdxjiY4aQCGc6VJYERRfIueNU9tk9+hTyjTPNHdkwcnsh 9WDBD6W3F0yxEbPrYPEgnLIwjxzUU5iH36qA6gnP9API/Oaqic1n3AXTXJVSmM1l HI3NxBo/yrb4elDcOazwUwIaCz8MOTp86Bzlg5ugCwvX1qaAOteTtmZcVeZDUJGd sUlk8jieVqUZTMEiBU+XjVs98ZxNlzxRkx0V9TF5G6NmfsiiB8uHcWxcpJ0Gkqdx aADaRT3q2D6AwxhxApDOdXh2TA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:31 2026 by rpki-client