$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: Y1A0K+TwAjn8cBnLkdrVJkZz5mUrmS8knX7rKqEMuIc= Subject key identifier: 19:FF:F8:28:C8:3A:03:E6:5A:79:F0:13:9D:9D:E4:43:49:8F:EC:EC Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 06D4 Signing time: Sat 04 Apr 2026 22:01:58 +0000 Manifest this update: Sat 04 Apr 2026 22:01:57 +0000 Manifest next update: Sat 11 Apr 2026 22:01:57 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: 2hS/52JAE7aeR9W12+bsnw3SgiU9rVPauBbrPhsPKxQ=) 2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Apr 4 22:01:57 2026 GMT Not After : Apr 11 22:01:57 2026 GMT Subject: CN=69d18a55-6648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:aa:d6:82:6b:90:91:88:f3:fb:01:c1:83: bf:0e:14:f8:75:d8:51:98:6b:31:8d:45:d8:21:3f: a4:0c:88:60:19:af:65:e6:67:e9:ec:31:29:fb:97: cc:1b:fb:f0:24:fa:eb:a2:db:6c:f9:6a:bc:08:18: c9:fd:bc:b8:02:d2:37:bd:84:c6:46:cf:9e:98:24: 10:1f:d0:42:4a:db:01:17:b3:f0:a4:83:21:09:69: a7:77:a7:c2:bc:df:02:5e:fe:b4:cf:7b:b0:c2:7f: c4:38:2a:8a:d2:ab:0e:ed:59:b8:72:f9:c0:f6:31: d4:91:9f:cb:e5:ce:3d:ba:a0:63:fa:f1:a4:d5:9b: 4c:03:4c:5a:1b:a6:46:6a:81:5c:b6:b8:21:5f:c4: 43:45:d0:3c:82:60:db:71:00:2c:e9:49:19:f3:c5: cc:49:c6:f6:eb:08:59:f0:fe:aa:a2:70:1a:54:8d: cf:d0:f5:46:19:af:c1:ed:57:9a:08:b8:42:1d:3d: 4c:40:c4:91:11:f9:d1:c1:54:9d:e2:63:43:c1:02: 3f:4c:f7:63:2c:a0:c3:e2:5d:45:7f:7e:b1:83:5b: ea:80:16:bb:b3:92:23:1b:e4:3d:ad:c8:83:0f:32: 33:8d:c6:6d:28:57:ef:3f:fd:fb:ac:a7:d6:64:87: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:F8:28:C8:3A:03:E6:5A:79:F0:13:9D:9D:E4:43:49:8F:EC:EC X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e4:79:22:1f:5d:21:27:81:47:96:cb:82:00:11:25:ee:02: da:73:60:92:32:34:77:07:65:fc:77:a4:c4:5f:93:f5:8c:36: 28:ca:5e:1b:b4:07:f9:b0:44:77:28:30:2d:3f:4d:00:ba:ef: 13:1f:0a:ac:98:41:a0:0d:dc:6c:10:87:8f:f0:02:de:b3:a1: 97:3d:a7:b2:0f:3f:4b:bd:09:02:e3:b4:99:ab:56:5d:1b:3f: 35:40:5d:c2:09:eb:cb:f9:03:c9:31:46:b5:e3:81:13:9d:42: ea:54:e8:f6:ff:9d:7a:2a:8c:14:df:68:59:40:55:3d:be:27: bf:7e:a3:a1:93:99:d0:c7:ff:1b:62:a1:5e:db:1c:e0:eb:b7: 1c:29:9e:90:0a:7f:3c:9c:75:aa:67:b8:8b:ec:97:d6:d3:cf: e1:f5:25:3d:85:9f:e8:ff:2f:22:2f:b9:63:55:51:46:1e:d6: 95:2c:0e:2e:92:5c:b2:94:33:76:74:2c:c1:50:51:8c:eb:8a: 8c:a6:d6:33:49:83:54:3d:f8:90:33:a5:43:e9:59:f3:a6:c1: 95:69:41:07:13:38:9b:2b:00:74:bb:8d:b0:e7:51:86:f4:bf: 80:03:dd:db:60:55:df:04:3b:74:c2:58:dc:f9:bb:03:ba:c2: f3:49:3d:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjYwNDA0MjIwMTU3WhcNMjYwNDExMjIwMTU3WjAYMRYwFAYD VQQDEw02OWQxOGE1NS02NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzraq1oJrkJGI8/sBwYO/DhT4ddhRmGsxjUXYIT+kDIhgGa9l5mfp7DEp+5fM G/vwJPrrotts+Wq8CBjJ/by4AtI3vYTGRs+emCQQH9BCStsBF7PwpIMhCWmnd6fC vN8CXv60z3uwwn/EOCqK0qsO7Vm4cvnA9jHUkZ/L5c49uqBj+vGk1ZtMA0xaG6ZG aoFctrghX8RDRdA8gmDbcQAs6UkZ88XMScb26whZ8P6qonAaVI3P0PVGGa/B7Vea CLhCHT1MQMSREfnRwVSd4mNDwQI/TPdjLKDD4l1Ff36xg1vqgBa7s5IjG+Q9rciD DzIzjcZtKFfvP/37rKfWZIeO7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBn/+CjI OgPmWnnwE52d5ENJj+zsMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm+R5Ih9dISeBR5bLggARJe4C2nNgkjI0dwdl/HekxF+T9Yw2KMpeG7QH+bBE dygwLT9NALrvEx8KrJhBoA3cbBCHj/AC3rOhlz2nsg8/S70JAuO0matWXRs/NUBd wgnry/kDyTFGteOBE51C6lTo9v+deiqMFN9oWUBVPb4nv36joZOZ0Mf/G2KhXtsc 4Ou3HCmekAp/PJx1qme4i+yX1tPP4fUlPYWf6P8vIi+5Y1VRRh7WlSwOLpJcspQz dnQswVBRjOuKjKbWM0mDVD34kDOlQ+lZ86bBlWlBBxM4mysAdLuNsOdRhvS/gAPd 22BV3wQ7dMJY3Pm7A7rC80k9Ow== -----END CERTIFICATE-----Generated at Mon Apr 6 10:09:34 2026 by rpki-client