$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: x+j5hddsh3v0KOgOA++jsm5FmiwZW62j3+RoRcsuOIU= Subject key identifier: 4B:79:23:0B:A3:29:97:AF:76:99:01:DB:DA:13:35:BA:5F:86:4F:65 Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: CA Signing time: Sun 05 Apr 2026 06:15:11 +0000 Manifest this update: Sun 05 Apr 2026 06:15:10 +0000 Manifest next update: Sun 12 Apr 2026 06:15:10 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: dSUeHtK5PlDfg+1DDi6u8QFyulrY45T7g62Qw/FiuDw=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: Apr 5 06:15:10 2026 GMT Not After : Apr 12 06:15:10 2026 GMT Subject: CN=69d1fdef-5b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:7a:c9:18:77:b7:11:08:99:6f:b1:a5:fd: f0:eb:42:c4:27:f1:26:44:64:93:09:1d:93:54:ae: 0e:cc:55:38:1e:a6:5e:df:49:67:db:bc:5c:2b:39: b4:49:86:e3:16:39:aa:e7:d4:d1:df:32:0f:b6:c8: 91:ac:02:3e:66:7a:e5:cf:ee:2b:f6:1e:99:83:e6: 47:ce:fd:fa:33:b5:06:ae:19:ed:29:4c:43:f6:af: 2c:16:7e:f5:9f:dc:23:2b:91:18:99:84:fe:f6:d4: 39:5c:0e:70:6b:df:70:03:b4:e6:a8:42:e0:1d:4d: 1f:21:fb:69:2d:bb:34:75:ac:be:9d:d0:e3:bf:00: 24:84:9d:78:c5:2c:2b:a2:9a:42:e9:eb:d6:f0:55: 57:ba:58:c2:c0:65:2d:01:8a:a8:94:87:17:90:95: 39:09:1d:a9:d1:0e:e9:44:5b:2a:76:87:02:5e:c4: 7b:2a:a8:15:c3:a7:d0:41:15:18:3a:43:19:df:a9: 30:b9:40:ac:b8:ed:9b:27:29:19:7a:c9:66:12:76: 0e:17:db:4b:c0:6d:72:97:e8:8d:60:be:28:24:35: 63:82:f6:56:ab:d2:c4:3d:bc:d5:8e:de:62:10:bc: 07:c9:79:2c:df:ee:ff:b2:f3:8a:b0:b2:49:59:5a: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:23:0B:A3:29:97:AF:76:99:01:DB:DA:13:35:BA:5F:86:4F:65 X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:00:4b:fb:4f:d7:a0:cf:40:c1:6e:75:3c:ed:49:02:85:74: a5:1d:80:e2:8f:c1:b2:73:82:d3:03:42:2b:63:9b:ce:34:25: 10:f7:a2:ed:79:5e:88:34:03:e8:cf:2c:64:ac:86:31:f3:07: 09:fd:d1:69:e4:ca:cc:d2:86:c0:9e:03:99:c4:7e:be:b3:c8: 8d:a0:1e:34:71:94:54:08:7a:96:0a:7d:59:80:62:14:e5:a1: 71:5b:74:04:6a:7e:81:ef:1d:b1:02:d2:ef:32:f5:fe:31:12: 86:88:66:78:5d:74:bc:47:06:f5:26:df:ae:19:fe:b7:64:8a: 6e:b5:5a:22:e3:6c:ed:79:83:b1:43:66:b2:2c:2f:ff:03:a3: d1:8d:ac:22:ec:43:ba:e7:95:7e:be:04:3b:de:2d:88:61:7b: 01:44:b6:a1:99:3f:09:a0:96:fc:34:00:7a:a7:84:33:e4:52: a3:80:96:28:c1:73:cb:63:a1:bf:23:4b:e9:a9:46:f8:9f:75: 43:6e:95:59:45:ac:87:05:24:f3:6f:dc:63:11:1c:86:c9:4e: ba:a0:10:4e:be:78:12:09:b1:77:92:7d:85:94:db:a2:b3:ec: bd:d7:32:6a:de:26:69:81:17:56:d1:62:8a:64:a5:3e:31:52: 59:87:60:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4QzIxMTAvBgNVBAUTKEQyNEZDQ0FEM0FDRTdGRkU1QkYwMkE2QThGNjhDMDYw MkUxQzFCNTEwHhcNMjYwNDA1MDYxNTEwWhcNMjYwNDEyMDYxNTEwWjAYMRYwFAYD VQQDEw02OWQxZmRlZi01YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmft6yRh3txEImW+xpf3w60LEJ/EmRGSTCR2TVK4OzFU4HqZe30ln27xcKzm0 SYbjFjmq59TR3zIPtsiRrAI+Znrlz+4r9h6Zg+ZHzv36M7UGrhntKUxD9q8sFn71 n9wjK5EYmYT+9tQ5XA5wa99wA7TmqELgHU0fIftpLbs0day+ndDjvwAkhJ14xSwr oppC6evW8FVXuljCwGUtAYqolIcXkJU5CR2p0Q7pRFsqdocCXsR7KqgVw6fQQRUY OkMZ36kwuUCsuO2bJykZeslmEnYOF9tLwG1yl+iNYL4oJDVjgvZWq9LEPbzVjt5i ELwHyXks3+7/svOKsLJJWVq28QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEt5Iwuj KZevdpkB29oTNbpfhk9lMB8GA1UdIwQYMBaAFNJPzK06zn/+W/Aqao9owGAuHBtR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQThDMi85NUE2OUJFMjAw NTMxMUYwOEU3M0UxNEFDNEY5QUUwMi8wa19NclRyT2ZfNWI4Q3BxajJqQVlDNGNH MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QThDMi85NUE2OUJFMjAwNTMxMUYwOEU3M0UxNEFDNEY5QUUwMi8wa19NclRyT2Zf NWI4Q3BxajJqQVlDNGNHMUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaQBL+0/XoM9AwW51PO1JAoV0pR2A4o/BsnOC0wNCK2ObzjQlEPei7XleiDQD 6M8sZKyGMfMHCf3RaeTKzNKGwJ4DmcR+vrPIjaAeNHGUVAh6lgp9WYBiFOWhcVt0 BGp+ge8dsQLS7zL1/jEShohmeF10vEcG9Sbfrhn+t2SKbrVaIuNs7XmDsUNmsiwv /wOj0Y2sIuxDuueVfr4EO94tiGF7AUS2oZk/CaCW/DQAeqeEM+RSo4CWKMFzy2Oh vyNL6alG+J91Q26VWUWshwUk82/cYxEchslOuqAQTr54Egmxd5J9hZTborPsvdcy at4maYEXVtFiimSlPjFSWYdgJg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:36 2026 by rpki-client