$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json) Hash identifier: JKF3+WCJ2k3O9LyIz8x97CpaXKt2gZTfe1XFVcc7uHU= Subject key identifier: 56:45:41:4E:D5:B4:6D:42:36:70:36:1B:08:88:72:9C:83:84:75:0C Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft Manifest number: 39 Signing time: Mon 20 Apr 2026 14:32:34 +0000 Manifest this update: Mon 20 Apr 2026 14:32:33 +0000 Manifest next update: Mon 27 Apr 2026 14:32:33 +0000 Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: OuIC9X5vna1PNBvslTZzsrB2Ud/gqk5VIusCmnrRKgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Validity Not Before: Apr 20 14:32:33 2026 GMT Not After : Apr 27 14:32:33 2026 GMT Subject: CN=69e63901-8c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:ac:01:ed:42:47:c7:7a:68:a0:56:14:97: f8:9a:4a:f3:31:be:19:f9:2d:5f:cd:88:a5:14:35: ce:2b:e4:88:1c:e1:5e:36:c2:77:b2:17:32:7a:a3: 91:a9:8a:51:69:0a:7a:cc:25:e9:3c:6e:6a:36:84: 16:46:41:d1:1b:53:e9:72:85:cf:9c:74:86:b2:c3: 38:e4:f9:50:4f:21:e5:b9:41:40:1c:bc:f8:fa:58: 9b:37:39:10:4f:c0:a5:70:12:71:04:26:20:fd:11: 2f:28:e5:68:bd:e2:0d:29:4c:dc:f6:07:a7:f2:bb: 0c:41:1e:0c:b4:e9:7d:b9:fd:b1:71:27:5c:e1:eb: bb:af:1c:23:7d:8f:fc:15:7c:e6:14:15:eb:24:ee: d9:ae:00:66:66:a2:f1:13:36:e0:0a:20:04:24:bf: b3:3d:cc:ed:d3:ca:1b:33:7f:8a:f1:1c:b3:24:e8: 28:c3:26:2a:89:3c:3b:76:ce:14:2c:88:7a:de:fc: 9f:1e:b8:26:b9:fc:7b:a6:ce:0a:4d:fa:44:7c:50: 51:87:aa:37:24:4f:f9:ec:8f:2c:43:0e:42:a0:10: 54:7f:b1:b5:e6:9b:23:d7:36:27:0d:85:06:a0:f5: 47:e6:83:93:46:40:4d:0d:bf:86:19:43:1c:01:61: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:41:4E:D5:B4:6D:42:36:70:36:1B:08:88:72:9C:83:84:75:0C X509v3 Authority Key Identifier: keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4e:8f:66:5a:3a:49:f4:b5:28:c1:58:97:d6:8c:fc:7c:10: ae:88:81:c6:02:32:58:5f:51:fe:9c:a5:56:b5:d2:f0:b8:4b: 2c:c4:2b:bb:c3:05:71:58:6e:f5:2e:94:c5:1f:d6:a3:86:94: df:e1:3a:26:3b:10:29:cc:f4:9e:a1:aa:3a:40:5e:34:2b:f4: 28:76:6f:70:62:9f:8d:28:b4:22:a3:06:49:74:36:c8:5d:19: 8e:03:16:b7:d9:88:cd:67:25:0a:e4:fb:9a:95:82:36:a5:0b: 5a:ce:0a:dc:5a:92:9e:89:d8:bb:3b:ba:3f:55:d9:c4:60:93: 82:00:a3:97:8c:87:d6:03:32:94:9b:e4:73:95:41:44:b7:18: 41:47:96:10:8c:9c:84:ce:b8:55:6e:c7:41:0d:0f:01:b3:5a: 13:d9:5d:30:ef:20:11:74:58:3f:e1:36:f4:5f:5c:14:03:d3: 3d:c8:f8:32:ac:b0:3f:ee:71:7b:2b:a7:e1:cf:70:e2:3d:7e: c5:ed:45:a3:13:6b:49:02:f3:23:c8:ec:f8:f7:a1:57:72:be: 3a:68:2f:63:f7:cd:e8:1a:82:4b:1d:f2:a4:df:d2:1f:72:ba: c0:3c:37:33:e3:3c:88:55:ef:21:43:f1:cb:ba:37:21:96:8d: f0:36:5d:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QkY0NzExMC8GA1UEBRMoMDlERDBFQTJEMjAzMTFGNzkzRTQ3NDNGMDg2NUM4NEEw MjQ3M0ZEQjAeFw0yNjA0MjAxNDMyMzNaFw0yNjA0MjcxNDMyMzNaMBgxFjAUBgNV BAMTDTY5ZTYzOTAxLThjM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5TqwB7UJHx3pooFYUl/iaSvMxvhn5LV/NiKUUNc4r5Igc4V42wneyFzJ6o5Gp ilFpCnrMJek8bmo2hBZGQdEbU+lyhc+cdIaywzjk+VBPIeW5QUAcvPj6WJs3ORBP wKVwEnEEJiD9ES8o5Wi94g0pTNz2B6fyuwxBHgy06X25/bFxJ1zh67uvHCN9j/wV fOYUFesk7tmuAGZmovETNuAKIAQkv7M9zO3Tyhszf4rxHLMk6CjDJiqJPDt2zhQs iHre/J8euCa5/HumzgpN+kR8UFGHqjckT/nsjyxDDkKgEFR/sbXmmyPXNicNhQag 9Ufmg5NGQE0Nv4YZQxwBYb3tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVkVBTtW0 bUI2cDYbCIhynIOEdQwwHwYDVR0jBBgwFoAUCd0OotIDEfeT5HQ/CGXISgJHP9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCRjQ3LzBERkFFRTQ4RjI4 QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZlVDVIUV9DR1hJU2dKSFA5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQ2QwT290SURFZmVUNUhRX0NHWElTZ0pIUDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC RjQ3LzBERkFFRTQ4RjI4QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZl VDVIUV9DR1hJU2dKSFA5cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaTo9mWjpJ9LUowViX1oz8fBCuiIHGAjJYX1H+nKVWtdLwuEssxCu7wwVxWG71 LpTFH9ajhpTf4TomOxApzPSeoao6QF40K/Qodm9wYp+NKLQiowZJdDbIXRmOAxa3 2YjNZyUK5PualYI2pQtazgrcWpKeidi7O7o/VdnEYJOCAKOXjIfWAzKUm+RzlUFE txhBR5YQjJyEzrhVbsdBDQ8Bs1oT2V0w7yARdFg/4Tb0X1wUA9M9yPgyrLA/7nF7 K6fhz3DiPX7F7UWjE2tJAvMjyOz496FXcr46aC9j983oGoJLHfKk39IfcrrAPDcz 4zyIVe8hQ/HLujchlo3wNl1P -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:10 2026 by rpki-client