$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: EUuz8bE36o4jeXHnpQeYL83KEssIVpbgfIqHt+fhYQA= Subject key identifier: 6F:01:AE:E8:8F:1B:11:21:AB:B8:A6:E0:E4:2B:87:23:F0:E9:5A:22 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0AAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 0A7F Signing time: Sat 04 Apr 2026 19:24:24 +0000 Manifest this update: Sat 04 Apr 2026 19:24:24 +0000 Manifest next update: Sat 11 Apr 2026 19:24:24 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: UWtS745yAxranA4y/k3OY0aaBqqcQ89Vl9gNFtlV0zU=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 2i8qGpQRreTsgSwr4uVW47W52ezT0jaL1HVor/4n178=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: OH/GXZ1q60s4R0UMX3ULerkxFMV9QJvIeVjbm9pioBQ=) 4: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Ftvy/rpA0Vj85hMaB0gzuwhB0x0hLyn+6aJiSOLoMmo=) 5: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: rwF3ZHk/RVRSDVzAmZzOpcusN8aav7XVfExqPCMX7pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Apr 4 19:24:24 2026 GMT Not After : Apr 11 19:24:24 2026 GMT Subject: CN=69d16568-a3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:15:1e:13:15:07:76:b0:37:23:ab:a8:e0: 68:98:11:b8:2f:0a:7e:76:f0:3a:e1:f8:fd:51:e8: f4:af:63:09:3d:50:80:d2:ab:98:37:65:c5:fc:24: 34:20:c9:a8:10:1c:1a:cb:91:72:b1:13:89:92:60: d1:d6:cb:32:07:38:73:9a:17:3d:f1:98:fc:a0:30: ca:ed:17:8c:1b:58:12:9f:4d:53:07:0f:28:74:a3: b8:2a:40:ac:f2:de:bf:e1:7c:63:e4:0d:7a:3d:1b: a5:e9:d5:1c:bd:8b:d9:ec:2e:77:18:f5:31:23:0a: b6:d4:d7:54:e3:f5:47:eb:49:f2:46:4f:d3:99:b6: 12:30:cf:e4:92:9b:bb:98:4f:1e:b4:43:e3:92:c7: 12:80:f3:87:0e:c4:52:e9:5b:bd:94:23:da:79:c8: 41:94:34:43:a4:c5:e7:09:c8:3b:58:2f:6c:0c:55: 15:bd:34:75:af:58:21:7a:64:1f:77:63:b7:c4:a1: a7:ed:e8:47:ad:32:0e:b1:ef:55:15:ea:20:55:46: 29:7c:d8:1a:fb:17:91:84:62:9c:ff:81:f6:bb:66: b1:42:9e:d2:1c:87:28:31:24:a4:0e:48:d1:5c:49: 46:0b:8f:d0:36:ee:35:f4:5f:60:e4:e9:f2:d1:20: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:01:AE:E8:8F:1B:11:21:AB:B8:A6:E0:E4:2B:87:23:F0:E9:5A:22 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f7:d5:80:b2:e3:82:c8:b3:8a:31:e6:02:31:28:bd:b4:63: bc:50:ef:f0:fd:68:66:f6:10:b0:fd:9d:bb:e3:c5:f2:54:01: b5:ac:68:da:c5:d7:76:da:3d:b3:c4:b8:e9:f4:0d:e4:48:53: 62:9f:65:0a:e6:13:66:f5:ae:7f:22:c1:09:ad:23:e2:4e:d0: 80:a2:61:31:ac:e6:1c:77:a2:9d:08:a5:de:fe:d3:42:53:65: 93:9a:98:79:a3:07:19:39:97:a7:f8:89:93:6c:cc:19:46:a6: 75:ff:fb:ce:ae:90:43:75:f6:f2:ac:72:d4:29:fd:e0:5d:40: 24:6b:39:73:28:e2:d6:fe:dc:01:d4:b1:6c:5c:be:7f:2f:c8: 75:55:b7:1a:f2:32:4c:05:15:d3:43:32:5f:61:45:c9:73:7d: 50:5a:8f:2b:71:da:24:dd:2e:80:42:33:d9:7f:ac:27:4f:bf: 6a:e8:13:8b:35:2a:6a:97:19:ef:38:37:75:60:b6:c1:3b:98: 60:1e:df:ad:d0:a6:ee:96:09:40:1d:30:be:42:8f:11:32:34: 25:3f:d5:38:59:89:44:c8:53:9f:fd:f1:4c:aa:74:f3:77:06: 1c:fb:0c:6e:15:e7:a5:ee:77:27:7d:7a:22:5f:79:1e:34:56: 24:16:97:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjYwNDA0MTkyNDI0WhcNMjYwNDExMTkyNDI0WjAYMRYwFAYD VQQDEw02OWQxNjU2OC1hM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXUVHhMVB3awNyOrqOBomBG4Lwp+dvA64fj9Uej0r2MJPVCA0quYN2XF/CQ0 IMmoEBway5FysROJkmDR1ssyBzhzmhc98Zj8oDDK7ReMG1gSn01TBw8odKO4KkCs 8t6/4Xxj5A16PRul6dUcvYvZ7C53GPUxIwq21NdU4/VH60nyRk/TmbYSMM/kkpu7 mE8etEPjkscSgPOHDsRS6Vu9lCPaechBlDRDpMXnCcg7WC9sDFUVvTR1r1ghemQf d2O3xKGn7ehHrTIOse9VFeogVUYpfNga+xeRhGKc/4H2u2axQp7SHIcoMSSkDkjR XElGC4/QNu419F9g5Ony0SBpxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8BruiP GxEhq7im4OQrhyPw6VoiMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABffVgLLjgsizijHmAjEovbRjvFDv8P1oZvYQsP2du+PF8lQBtaxo2sXXdto9 s8S46fQN5EhTYp9lCuYTZvWufyLBCa0j4k7QgKJhMazmHHeinQil3v7TQlNlk5qY eaMHGTmXp/iJk2zMGUamdf/7zq6QQ3X28qxy1Cn94F1AJGs5cyji1v7cAdSxbFy+ fy/IdVW3GvIyTAUV00MyX2FFyXN9UFqPK3HaJN0ugEIz2X+sJ0+/augTizUqapcZ 7zg3dWC2wTuYYB7frdCm7pYJQB0wvkKPETI0JT/VOFmJRMhTn/3xTKp083cGHPsM bhXnpe53J316Il95HjRWJBaXNg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:35:14 2026 by rpki-client