$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: Lcr7CB55QUILQ7H/8NvOphSM5so7PsjEVfaWAfK/+lY= Subject key identifier: 99:73:92:1E:8F:B4:58:2F:03:5C:F7:6B:A2:2D:98:D1:6E:78:E4:43 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 021E Signing time: Sun 05 Apr 2026 02:20:20 +0000 Manifest this update: Sun 05 Apr 2026 02:20:19 +0000 Manifest next update: Sun 12 Apr 2026 02:20:19 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: qYG7ikhDKfIif3Bxapnk/jbEIVTU2uHIshDxNzhyrO4=) 2: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 5THegraPgMqqp6VrhQyR4hOqJ9d+jYAhvqCx1inYwhs=) 3: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: 93lqVQhsdgkNqe+QLKSt6rzwX0cHhLHTkYfLV3iVFU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Apr 5 02:20:19 2026 GMT Not After : Apr 12 02:20:19 2026 GMT Subject: CN=69d1c6e4-e421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:4d:29:43:79:40:3f:56:35:84:f7:4a:a3: a9:90:f7:63:88:f4:87:0c:70:a8:72:fd:8c:ce:1a: 99:69:2e:64:d5:4f:c5:70:14:93:26:c2:fd:73:22: 38:2e:c0:75:04:75:cb:43:12:93:f9:5b:00:26:37: a4:fb:90:fc:ae:56:0c:bc:69:42:4e:36:ad:f4:0f: 48:67:7b:9f:d9:77:e9:d4:a3:2a:91:b4:36:bf:bb: d4:89:e0:fa:04:46:65:dc:4a:b4:ff:d4:91:e5:51: 10:49:66:42:93:dc:7f:91:99:79:9e:1f:08:e9:97: b9:c3:fb:5d:62:d2:46:e4:5b:a9:9a:0b:e0:8f:8b: 11:38:a7:3a:75:00:83:25:bd:b4:82:90:2d:a6:66: 03:44:11:38:3e:2a:5f:60:0f:6b:e4:99:1c:30:55: 68:55:4f:67:73:34:0c:e8:6f:12:ba:41:85:f8:5d: 37:48:3c:ff:ec:20:6e:15:ff:9a:8b:dc:ef:c2:3d: 26:55:19:8d:a2:41:08:3a:ed:6b:8c:e5:f9:86:cb: 64:06:a3:75:36:42:02:ae:28:84:9a:47:05:db:0e: ad:b3:1e:b2:af:a1:a1:d4:83:10:6d:86:b0:d4:89: e0:08:61:a0:7d:90:f8:5a:9c:e1:6f:ad:7e:46:51: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:73:92:1E:8F:B4:58:2F:03:5C:F7:6B:A2:2D:98:D1:6E:78:E4:43 X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bf:dd:59:1a:8e:99:3f:02:48:8a:a3:22:a8:16:43:28:66: 80:c4:cf:eb:6b:fc:28:67:b5:a5:44:db:8a:b9:c3:26:3e:b6: 77:10:a1:fd:d0:fa:57:0f:3f:db:da:bd:24:5a:61:08:77:ca: 3a:c6:0b:c4:bd:a7:21:f5:62:53:2e:89:0f:99:9f:ec:83:72: 70:85:f7:0c:40:d6:52:59:6d:1a:b2:90:c3:49:a6:5c:16:a5: 01:ee:ce:1d:d3:72:44:24:5d:9b:2b:b7:c0:f7:5e:4c:80:bf: 9b:7e:bb:f9:63:65:c9:dc:60:f0:79:42:6e:b2:eb:f8:4c:67: a6:42:59:b8:ca:41:c9:ae:84:cb:ec:f2:41:a6:c0:57:80:92: 7d:f9:a2:7d:ed:20:2a:f0:e4:d1:14:c6:c8:f2:b0:12:a4:fc: 45:c5:68:82:49:13:ce:0d:e0:42:da:01:de:2b:7e:05:f8:48: 30:aa:47:58:9f:52:b1:05:35:27:63:2d:db:27:68:79:1e:a8: af:08:be:3c:c5:f1:a6:b7:fc:5b:14:ec:aa:c1:da:6a:ec:9d: 6e:46:0f:1f:32:b8:4c:fd:dd:09:30:00:2f:19:62:e0:4a:a2: 40:22:48:ce:2b:1b:9b:11:51:04:7d:32:30:4a:a9:cb:58:b4: 40:3a:9c:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjYwNDA1MDIyMDE5WhcNMjYwNDEyMDIyMDE5WjAYMRYwFAYD VQQDEw02OWQxYzZlNC1lNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLVNKUN5QD9WNYT3SqOpkPdjiPSHDHCocv2MzhqZaS5k1U/FcBSTJsL9cyI4 LsB1BHXLQxKT+VsAJjek+5D8rlYMvGlCTjat9A9IZ3uf2Xfp1KMqkbQ2v7vUieD6 BEZl3Eq0/9SR5VEQSWZCk9x/kZl5nh8I6Ze5w/tdYtJG5Fupmgvgj4sROKc6dQCD Jb20gpAtpmYDRBE4PipfYA9r5JkcMFVoVU9nczQM6G8SukGF+F03SDz/7CBuFf+a i9zvwj0mVRmNokEIOu1rjOX5hstkBqN1NkICriiEmkcF2w6tsx6yr6Gh1IMQbYaw 1IngCGGgfZD4Wpzhb61+RlFUgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlzkh6P tFgvA1z3a6ItmNFueORDMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEL/dWRqOmT8CSIqjIqgWQyhmgMTP62v8KGe1pUTbirnDJj62dxCh/dD6Vw8/ 29q9JFphCHfKOsYLxL2nIfViUy6JD5mf7INycIX3DEDWUlltGrKQw0mmXBalAe7O HdNyRCRdmyu3wPdeTIC/m367+WNlydxg8HlCbrLr+ExnpkJZuMpBya6Ey+zyQabA V4CSffmife0gKvDk0RTGyPKwEqT8RcVogkkTzg3gQtoB3it+BfhIMKpHWJ9SsQU1 J2Mt2ydoeR6orwi+PMXxprf8WxTsqsHaauydbkYPHzK4TP3dCTAALxli4EqiQCJI zisbmxFRBH0yMEqpy1i0QDqcew== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:48 2026 by rpki-client