$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: fgYZXeo8bIoxsWt84VGQhwxZ1vgflbYjDzI2EMdMt8s= Subject key identifier: 8E:61:F5:E2:20:94:62:C1:CF:4F:74:43:0D:A4:F6:90:EA:94:FA:FF Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 0700 Signing time: Sat 04 Apr 2026 21:47:40 +0000 Manifest this update: Sat 04 Apr 2026 21:47:39 +0000 Manifest next update: Sat 11 Apr 2026 21:47:39 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: 5t/Tr7LW5y+FYIhmrs7fsLNafjaSBZSSePvNMJFNo7E=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: FcPeshOBgwbO9rUWdVUpY9LSkh0o6hAVezvw+Vbo09o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Apr 4 21:47:39 2026 GMT Not After : Apr 11 21:47:39 2026 GMT Subject: CN=69d186fb-3853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:0a:17:e0:69:f4:64:e0:e4:1e:19:8b:75: 27:a1:c3:47:05:2d:fa:53:f5:0b:19:c6:e1:10:0a: eb:05:97:18:bc:52:b0:9f:b9:33:36:3f:cf:7e:1c: 11:e6:3f:97:b4:13:78:f4:9d:00:70:6c:8b:a0:b3: 40:ad:d9:72:ed:4f:85:81:d5:11:df:c4:b8:74:a3: 5a:26:0d:7a:05:15:d2:02:1e:77:4e:d2:0a:05:7f: 4e:a9:52:9e:d3:af:62:0b:37:ce:79:fc:05:e7:32: 06:1b:8b:e6:e7:f6:ea:53:83:b2:b2:53:ef:aa:b5: 23:06:2a:32:6c:59:57:b8:fa:9f:5c:1c:8c:e2:0f: 9c:9b:57:d0:4d:dd:f5:07:09:86:a6:87:8e:3c:79: e4:56:5f:c4:42:5b:53:8d:5c:e6:f5:38:64:24:28: bb:0d:d9:0e:cc:ba:16:49:cd:18:1c:99:3e:5e:4c: a3:01:3c:3f:23:6d:54:37:91:6d:31:c8:9e:3e:b1: 78:0e:2a:30:54:57:75:9e:ba:62:0c:43:0a:75:c8: 16:e5:fc:d4:82:3a:f3:49:d1:8e:97:25:27:3e:d0: 01:13:17:89:d4:6d:ad:64:9c:90:cc:0b:c2:56:f6: d4:1d:2f:f4:1e:70:7e:c0:85:81:de:25:0f:c9:86: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:61:F5:E2:20:94:62:C1:CF:4F:74:43:0D:A4:F6:90:EA:94:FA:FF X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8a:4e:3b:86:b2:f3:bf:da:58:54:2c:64:18:a8:ff:89:30: a2:ce:89:4c:a5:d8:aa:0d:ac:be:d9:e1:82:4f:02:2a:f2:62: e1:f7:56:b9:6d:c1:52:6f:b8:64:37:87:93:b7:1e:5b:ef:90: 6a:5e:ba:d3:5f:17:af:9b:87:0a:99:64:f3:bb:ba:a5:ba:e0: a6:fc:dc:21:d5:fe:37:9a:f7:d7:21:ed:3b:5c:3b:62:8c:eb: db:ce:99:a8:e7:d0:e3:0e:e4:ba:4d:3c:47:54:f9:5f:c2:a5: f8:25:df:14:6d:43:b9:9c:9b:2c:33:ab:01:56:46:4b:93:65: 87:20:e3:0c:b0:ea:36:d4:cc:a2:22:28:00:59:13:b9:14:fa: b2:ed:3b:28:60:24:ae:35:8f:57:1a:8e:b7:6e:03:3d:6c:44: b0:7f:a8:4b:81:5f:47:0c:f8:d3:a3:fe:b8:6e:35:52:e3:97: 13:b8:5f:9d:b2:7c:61:3c:b6:c7:07:73:1d:f2:f4:6c:59:96: d2:7d:cc:4d:90:6b:5f:7c:fd:23:e7:fb:32:2a:cd:99:51:ea: 7d:f9:07:26:8d:f8:b7:51:ce:04:a9:c8:08:e2:44:43:87:04: 92:9a:c2:61:c4:ac:c6:8a:75:cf:99:be:ae:42:75:9e:e2:e0: 6a:ea:a5:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjYwNDA0MjE0NzM5WhcNMjYwNDExMjE0NzM5WjAYMRYwFAYD VQQDEw02OWQxODZmYi0zODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZEKF+Bp9GTg5B4Zi3UnocNHBS36U/ULGcbhEArrBZcYvFKwn7kzNj/PfhwR 5j+XtBN49J0AcGyLoLNArdly7U+FgdUR38S4dKNaJg16BRXSAh53TtIKBX9OqVKe 069iCzfOefwF5zIGG4vm5/bqU4OyslPvqrUjBioybFlXuPqfXByM4g+cm1fQTd31 BwmGpoeOPHnkVl/EQltTjVzm9ThkJCi7DdkOzLoWSc0YHJk+XkyjATw/I21UN5Ft MciePrF4DiowVFd1nrpiDEMKdcgW5fzUgjrzSdGOlyUnPtABExeJ1G2tZJyQzAvC VvbUHS/0HnB+wIWB3iUPyYYwtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5h9eIg lGLBz090Qw2k9pDqlPr/MB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu4pOO4ay87/aWFQsZBio/4kwos6JTKXYqg2svtnhgk8CKvJi4fdWuW3BUm+4 ZDeHk7ceW++Qal66018Xr5uHCplk87u6pbrgpvzcIdX+N5r31yHtO1w7Yozr286Z qOfQ4w7kuk08R1T5X8Kl+CXfFG1DuZybLDOrAVZGS5NlhyDjDLDqNtTMoiIoAFkT uRT6su07KGAkrjWPVxqOt24DPWxEsH+oS4FfRwz406P+uG41UuOXE7hfnbJ8YTy2 xwdzHfL0bFmW0n3MTZBrX3z9I+f7MirNmVHqffkHJo34t1HOBKnICOJEQ4cEkprC YcSsxop1z5m+rkJ1nuLgauqlkQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:59 2026 by rpki-client