$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json) Hash identifier: ZVSSYvSrl2FFOE/iGEbZACOjpfgbhWlokHXv689WVZs= Subject key identifier: F8:AE:8E:D9:B1:41:EE:B1:56:8E:D4:95:48:7B:9E:E9:68:91:87:E8 Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft Manifest number: 32 Signing time: Tue 21 Apr 2026 08:37:25 +0000 Manifest this update: Tue 21 Apr 2026 08:37:25 +0000 Manifest next update: Tue 28 Apr 2026 08:37:25 +0000 Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: rgS0kFYiubczv0D8EnvQjG12k/E31t8ZGpf4iHFk68o=) 2: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=) 3: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Validity Not Before: Apr 21 08:37:25 2026 GMT Not After : Apr 28 08:37:25 2026 GMT Subject: CN=69e73745-6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:bb:e1:b5:6b:24:8d:35:e0:3d:52:39:93: 48:47:38:0e:36:8d:ee:19:cd:4b:9a:0c:e3:52:1c: ea:df:f9:2d:2e:79:5a:54:dd:9b:de:6e:fb:f1:9c: ad:54:20:b2:e8:9a:a4:fb:8c:e7:14:8c:d8:f4:70: 91:32:0d:61:0f:bc:cb:37:4f:9c:00:c2:00:f9:ed: 2e:79:a9:48:d2:a6:e5:52:fe:21:84:c2:b1:49:07: 57:b3:77:06:24:02:d0:f0:dd:0c:c7:f0:df:82:88: 02:63:d5:fe:d9:78:bb:47:6d:f9:bc:58:b9:20:f2: 5f:59:5c:19:1f:58:61:67:35:fc:7f:c9:77:70:84: 16:c0:8e:f1:a8:3a:15:01:8f:12:ab:34:dd:af:bf: 53:da:1e:8e:a8:34:5b:3f:33:e5:f2:8f:22:d8:e6: c0:ea:74:47:56:73:bf:53:0f:bd:76:a7:c9:84:82: 3b:2f:89:40:55:d0:c3:1b:2a:38:85:b3:70:a3:52: c5:69:7f:09:c7:10:19:90:ca:ca:7b:be:bd:6f:72: ad:64:01:06:16:b5:b0:28:19:5c:fb:3e:7a:ff:54: ca:1d:6b:5c:e9:12:27:1b:59:2a:f6:5e:2e:09:c1: 10:5d:e0:be:9a:24:fc:57:47:7f:9b:a1:73:51:91: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AE:8E:D9:B1:41:EE:B1:56:8E:D4:95:48:7B:9E:E9:68:91:87:E8 X509v3 Authority Key Identifier: keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:79:0d:9c:7d:ad:50:83:bf:4c:fb:41:80:11:00:2a:ae:c5: f6:0a:a6:94:ec:be:1f:3d:ca:4c:d5:28:f2:57:d5:7a:9c:ed: 98:d4:14:67:8a:6c:46:7b:e6:74:65:77:02:72:8b:82:5c:9d: 39:7a:d2:a1:72:e6:77:b2:71:2f:43:ff:b8:c9:4b:28:a3:89: 56:9d:bc:0e:67:d4:1e:a5:ae:07:9e:93:7b:70:6f:4f:60:9d: ed:2b:0b:a9:34:28:ba:06:9d:a5:b1:d3:3c:5d:9d:d0:06:6b: 3a:ec:9c:4e:c9:6d:b8:5d:ed:52:d6:2f:c2:4c:51:3d:50:50: 2e:76:f9:a3:54:59:96:58:02:56:21:75:9d:de:67:5f:3f:c5: 46:93:8b:35:fa:21:75:df:b9:6c:70:e5:8e:c5:60:61:09:99: 1d:c1:1b:80:b2:13:8a:3a:56:40:5b:80:ac:17:25:eb:83:d2: de:17:83:a7:4c:68:b6:c0:50:41:17:15:b1:16:07:8a:b4:9b: d8:7d:db:dc:56:9f:5b:94:9a:cd:57:bf:89:c7:18:74:0c:3f: 23:89:ae:58:bd:5f:75:fb:f9:ff:cf:c5:1a:c8:40:2a:fa:e7: c9:40:3c:b1:6d:06:59:17:ee:76:0b:05:a9:c0:d4:cc:45:56: e3:4b:d3:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM2OTExMC8GA1UEBRMoNDgzODQyODZBRUI5QjYwQkIzNDI4NDdGMkJBNzYxMkY4 NERCNDNCMjAeFw0yNjA0MjEwODM3MjVaFw0yNjA0MjgwODM3MjVaMBgxFjAUBgNV BAMTDTY5ZTczNzQ1LTZkMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoY7vhtWskjTXgPVI5k0hHOA42je4ZzUuaDONSHOrf+S0ueVpU3ZvebvvxnK1U ILLomqT7jOcUjNj0cJEyDWEPvMs3T5wAwgD57S55qUjSpuVS/iGEwrFJB1ezdwYk AtDw3QzH8N+CiAJj1f7ZeLtHbfm8WLkg8l9ZXBkfWGFnNfx/yXdwhBbAjvGoOhUB jxKrNN2vv1PaHo6oNFs/M+XyjyLY5sDqdEdWc79TD712p8mEgjsviUBV0MMbKjiF s3CjUsVpfwnHEBmQysp7vr1vcq1kAQYWtbAoGVz7Pnr/VModa1zpEicbWSr2Xi4J wRBd4L6aJPxXR3+boXNRkc93AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+K6O2bFB 7rFWjtSVSHue6WiRh+gwHwYDVR0jBBgwFoAUSDhChq65tguzQoR/K6dhL4TbQ7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzY5Lzc2N0E4RThBMEM3 OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1elFvUl9LNmRoTDRUYlE3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0RoQ2hxNjV0Z3V6UW9SX0s2ZGhMNFRiUTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzY5Lzc2N0E4RThBMEM3OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1 elFvUl9LNmRoTDRUYlE3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLeQ2cfa1Qg79M+0GAEQAqrsX2CqaU7L4fPcpM1SjyV9V6nO2Y1BRnimxGe+Z0 ZXcCcouCXJ05etKhcuZ3snEvQ/+4yUsoo4lWnbwOZ9Qepa4HnpN7cG9PYJ3tKwup NCi6Bp2lsdM8XZ3QBms67JxOyW24Xe1S1i/CTFE9UFAudvmjVFmWWAJWIXWd3mdf P8VGk4s1+iF137lscOWOxWBhCZkdwRuAshOKOlZAW4CsFyXrg9LeF4OnTGi2wFBB FxWxFgeKtJvYfdvcVp9blJrNV7+Jxxh0DD8jia5YvV91+/n/z8UayEAq+ufJQDyx bQZZF+52CwWpwNTMRVbjS9Nv -----END CERTIFICATE-----Generated at Wed Apr 22 00:13:27 2026 by rpki-client