$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: pIoZXn5RWObD65ag85BuWsQ8eR4VDvTskzZINDPZC/8= Subject key identifier: 4C:DA:35:DA:66:5E:8B:2F:39:B3:41:7F:D2:F2:18:27:E6:DD:17:D3 Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 01E7 Signing time: Sun 05 Apr 2026 02:57:12 +0000 Manifest this update: Sun 05 Apr 2026 02:57:11 +0000 Manifest next update: Sun 12 Apr 2026 02:57:11 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: nBi+u80HDsBE1z71HKm8Ozx0p/D+ybUiSiQu898MYdw=) 2: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: J1ocAT03CSbRpODB0RRAKFgJGRB6ade57V3/kum0InU=) 3: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: mhjbk4CN2+rPJc7zvgeaO7bX0mHh9qBVgN/f8ar/U0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Apr 5 02:57:11 2026 GMT Not After : Apr 12 02:57:11 2026 GMT Subject: CN=69d1cf88-84f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:4c:90:e3:86:fc:de:fb:50:fe:91:9f:ab: c0:8f:67:4e:f7:b9:63:b8:5c:ba:37:35:2d:44:e6: 0f:e2:0c:81:c8:7d:f5:d5:ee:7c:ff:9c:fb:f5:51: e4:82:b6:94:e2:7e:52:db:0a:d9:3d:89:f1:cc:23: 1a:22:5a:12:1b:2c:1e:7d:33:f5:67:43:fa:0a:00: 22:b9:a1:55:f5:a1:33:8f:11:a0:53:45:88:84:f2: 8c:6c:7e:bc:d0:94:ea:9f:bf:59:70:84:e4:77:d4: 1b:79:b6:c4:3b:8a:c6:f6:fe:53:64:e4:40:26:35: 56:44:be:ac:9a:d3:15:9d:8f:01:ac:e9:74:9b:b3: d2:0b:24:2f:9d:42:ed:01:e3:f9:a1:8c:bc:3c:e7: a4:5d:69:ea:94:9b:f2:dc:8f:5d:bb:3a:c0:7e:42: 51:03:ef:3a:1a:87:ae:b7:36:c9:c0:af:6b:4f:34: 0a:d4:ff:3e:bd:fe:60:cd:a7:0b:b0:5d:a2:56:e3: 9a:a5:fe:e4:f3:1a:28:7d:04:95:1b:51:f6:9f:ca: b4:b0:0f:18:f4:37:66:83:1f:ae:ff:55:9b:8e:a3: 08:15:3e:a8:94:58:21:39:7c:f1:17:75:ea:4a:a3: af:b4:0c:87:c5:ca:8f:fd:6a:e1:e1:38:26:39:ed: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DA:35:DA:66:5E:8B:2F:39:B3:41:7F:D2:F2:18:27:E6:DD:17:D3 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0d:57:09:5c:50:92:b9:c3:8c:3b:19:d3:37:58:63:19:0c: d3:c1:3c:5b:7a:e5:4b:45:66:c5:d5:bb:46:df:27:12:19:f5: 39:5e:5f:fa:e5:4a:b8:bd:9c:99:cf:57:aa:0f:4f:ae:8e:b0: 9e:0f:e8:aa:43:11:0b:13:8c:dc:4e:5f:90:ee:59:42:fe:6c: 42:20:d8:bb:89:c9:4d:45:b0:ae:9f:da:a5:d4:60:2b:8d:8b: 14:53:50:57:50:44:d9:fd:ed:8b:c7:ce:25:0d:ee:39:51:a7: 75:10:6a:ee:1f:5c:7d:c5:0f:05:a4:10:2b:5f:4e:dc:cd:c3: 17:8a:0b:09:bc:b7:e1:c9:d8:0a:d0:21:e2:db:f7:33:e6:8c: 47:b4:c5:9d:e1:dd:9d:a4:45:80:24:6b:ec:a9:1a:86:a5:86: d8:6c:1c:62:10:83:f6:0e:3e:15:13:2a:8f:9c:41:8b:c4:02: 4b:a2:01:a8:62:c1:09:f1:80:25:d0:ca:0c:57:db:9e:d0:6e: 7a:93:9e:eb:97:54:c4:d6:85:56:82:d2:88:07:14:58:fc:04: 21:c4:85:76:01:42:91:75:5f:e9:f1:42:32:7c:84:5d:36:e9: 2c:f1:5a:3c:c3:84:b0:05:b7:34:62:94:3f:7f:c7:3d:76:f0: 9e:21:52:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjYwNDA1MDI1NzExWhcNMjYwNDEyMDI1NzExWjAYMRYwFAYD VQQDEw02OWQxY2Y4OC04NGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C1MkOOG/N77UP6Rn6vAj2dO97ljuFy6NzUtROYP4gyByH311e58/5z79VHk graU4n5S2wrZPYnxzCMaIloSGywefTP1Z0P6CgAiuaFV9aEzjxGgU0WIhPKMbH68 0JTqn79ZcITkd9QbebbEO4rG9v5TZORAJjVWRL6smtMVnY8BrOl0m7PSCyQvnULt AeP5oYy8POekXWnqlJvy3I9duzrAfkJRA+86GoeutzbJwK9rTzQK1P8+vf5gzacL sF2iVuOapf7k8xoofQSVG1H2n8q0sA8Y9Ddmgx+u/1WbjqMIFT6olFghOXzxF3Xq SqOvtAyHxcqP/Wrh4TgmOe20eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzaNdpm XosvObNBf9LyGCfm3RfTMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApw1XCVxQkrnDjDsZ0zdYYxkM08E8W3rlS0VmxdW7Rt8nEhn1OV5f+uVKuL2c mc9Xqg9Pro6wng/oqkMRCxOM3E5fkO5ZQv5sQiDYu4nJTUWwrp/apdRgK42LFFNQ V1BE2f3ti8fOJQ3uOVGndRBq7h9cfcUPBaQQK19O3M3DF4oLCby34cnYCtAh4tv3 M+aMR7TFneHdnaRFgCRr7KkahqWG2GwcYhCD9g4+FRMqj5xBi8QCS6IBqGLBCfGA JdDKDFfbntBuepOe65dUxNaFVoLSiAcUWPwEIcSFdgFCkXVf6fFCMnyEXTbpLPFa PMOEsAW3NGKUP3/HPXbwniFS5A== -----END CERTIFICATE-----Generated at Mon Apr 6 09:52:47 2026 by rpki-client