$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: oDimK5DPhuHxhJmhzOdh9hG33ffXqhst/EQTXPwrYxA= Subject key identifier: 72:4E:D5:BA:DE:7A:9A:DB:9E:AD:FE:31:EB:EE:D5:53:8D:FB:EC:A5 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0AA8 Signing time: Sat 04 Apr 2026 20:04:59 +0000 Manifest this update: Sat 04 Apr 2026 20:04:58 +0000 Manifest next update: Sat 11 Apr 2026 20:04:58 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: kNZomtxiVZ8e2+4pLi2F7sMz5A1Gx7udeM3DKcI0sLg=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Apr 4 20:04:58 2026 GMT Not After : Apr 11 20:04:58 2026 GMT Subject: CN=69d16eeb-a1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5c:24:12:78:b7:d8:aa:69:d4:16:c5:53:6f: 7b:3e:41:6b:06:99:9f:7b:d1:78:e9:8d:35:7f:50: 90:a6:fc:59:bd:3b:89:d8:dd:3f:0e:18:df:47:32: 77:2c:10:e2:02:56:0b:7c:e4:31:da:f6:40:2e:40: 9e:73:7b:73:9d:86:c1:9c:af:28:43:6c:3d:bd:1e: ad:5e:9d:c3:f7:14:f9:28:d9:9d:21:02:dd:eb:b2: 16:28:be:37:d0:9a:68:df:1d:89:82:6c:37:cc:4d: e5:76:5f:96:c6:7c:92:17:5a:b1:a7:da:83:35:71: 79:db:74:61:cb:dc:69:08:27:c7:66:23:a2:a2:b9: b5:22:07:91:3b:5d:1a:42:1d:86:4a:e9:e8:18:b2: 52:27:4f:27:ae:ef:30:70:24:23:a1:40:d4:a6:7a: b3:4c:0b:76:b1:c8:50:e6:7b:94:42:53:ce:2b:d0: 62:fe:b9:b1:2a:1f:16:e3:c7:cd:2e:18:a2:46:7f: 71:92:82:5f:23:0b:41:03:67:cd:b8:7f:be:9c:1a: 4c:7b:09:c3:34:f3:c4:24:bb:f8:78:f2:54:60:18: 6d:67:69:66:e2:67:53:13:3b:2c:23:b1:dd:e4:a7: 68:27:80:8d:0f:19:19:a8:3c:2f:43:0e:44:18:8d: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4E:D5:BA:DE:7A:9A:DB:9E:AD:FE:31:EB:EE:D5:53:8D:FB:EC:A5 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f5:d6:ab:14:a5:0d:35:06:26:53:d0:6a:31:48:69:3c:7f: b3:bd:85:6c:a8:bb:32:ef:71:a7:2c:d0:7c:a4:9e:72:37:b3: 47:fe:51:bf:d3:e9:db:63:ec:9f:fc:e3:cd:3a:32:20:32:be: 3b:3f:83:93:43:f2:39:4f:20:a4:34:92:ea:99:0d:9c:5d:07: 01:88:66:bb:7f:2e:6b:a2:ae:1b:bc:c6:c9:ed:08:b2:79:31: 8b:ee:cd:0c:74:04:24:85:8e:47:87:49:73:a4:d0:3f:4f:d6: 78:95:78:95:65:a0:60:55:b0:8b:1d:0f:44:29:b5:cd:cf:26: 65:dd:ad:c9:8a:ca:b9:b9:db:88:e1:64:b2:f2:24:0c:f7:4d: 9f:c1:c6:09:be:a7:1d:6c:c6:de:02:d2:c8:20:09:5e:e2:c5: d9:cd:6d:2f:93:21:d7:1f:09:b0:7a:59:59:de:80:f8:35:f9: 51:6f:1e:d5:c2:28:00:42:2e:ce:bc:bc:57:1c:c2:0d:78:86: c9:6d:a4:94:15:49:92:be:f6:23:43:90:34:9b:da:33:dd:58: 24:af:e7:e4:06:0e:63:bc:c3:fb:b1:78:e9:67:10:a5:6a:bc: 4b:95:08:9d:e2:f3:a1:1e:31:0c:78:f6:5f:59:4e:02:0c:7c: ba:16:58:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjYwNDA0MjAwNDU4WhcNMjYwNDExMjAwNDU4WjAYMRYwFAYD VQQDEw02OWQxNmVlYi1hMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VwkEni32Kpp1BbFU297PkFrBpmfe9F46Y01f1CQpvxZvTuJ2N0/DhjfRzJ3 LBDiAlYLfOQx2vZALkCec3tznYbBnK8oQ2w9vR6tXp3D9xT5KNmdIQLd67IWKL43 0Jpo3x2Jgmw3zE3ldl+WxnySF1qxp9qDNXF523Rhy9xpCCfHZiOiorm1IgeRO10a Qh2GSunoGLJSJ08nru8wcCQjoUDUpnqzTAt2schQ5nuUQlPOK9Bi/rmxKh8W48fN LhiiRn9xkoJfIwtBA2fNuH++nBpMewnDNPPEJLv4ePJUYBhtZ2lm4mdTEzssI7Hd 5KdoJ4CNDxkZqDwvQw5EGI2hLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJO1bre eprbnq3+Mevu1VON++ylMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/XWqxSlDTUGJlPQajFIaTx/s72FbKi7Mu9xpyzQfKSecjezR/5Rv9Pp22Ps n/zjzToyIDK+Oz+Dk0PyOU8gpDSS6pkNnF0HAYhmu38ua6KuG7zGye0Isnkxi+7N DHQEJIWOR4dJc6TQP0/WeJV4lWWgYFWwix0PRCm1zc8mZd2tyYrKubnbiOFksvIk DPdNn8HGCb6nHWzG3gLSyCAJXuLF2c1tL5Mh1x8JsHpZWd6A+DX5UW8e1cIoAEIu zry8VxzCDXiGyW2klBVJkr72I0OQNJvaM91YJK/n5AYOY7zD+7F46WcQpWq8S5UI neLzoR4xDHj2X1lOAgx8uhZYmQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:48 2026 by rpki-client