$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: oRhphvzi+Wc8zRWnXEpUvbBCTNTsoGI4Gnl5/pqjL+M= Subject key identifier: A2:06:7D:A0:C7:5F:34:86:F4:D1:60:03:DD:F0:70:E0:C1:1B:74:B1 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 0777 Signing time: Sat 04 Apr 2026 21:24:20 +0000 Manifest this update: Sat 04 Apr 2026 21:24:19 +0000 Manifest next update: Sat 11 Apr 2026 21:24:19 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: qZuBwzN4uxWE4/8xn/9xS+dtJvT5WKuloT4F5N6QACQ=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Apr 4 21:24:19 2026 GMT Not After : Apr 11 21:24:19 2026 GMT Subject: CN=69d18183-dd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:2e:a6:1b:d7:46:a9:13:dd:e2:d9:4b:1f: 33:24:3e:f1:d7:8d:b2:5e:01:8a:95:f9:2c:7a:8d: ce:ea:21:8d:97:1f:cb:59:47:62:af:d6:6d:fe:04: f6:a8:a7:e0:c8:08:f8:5b:f3:e7:cf:a9:44:f0:23: 4b:af:fc:de:14:26:04:00:2f:b1:55:9b:66:13:14: 49:b1:e5:dd:39:ac:81:8a:f1:fd:8b:a8:1b:e3:fd: c2:48:ca:1e:91:57:0e:a0:50:ec:00:91:4a:fd:ad: 2c:45:a9:3b:58:46:36:f6:e8:4b:b3:c1:11:2f:64: ab:c9:bd:0a:c3:32:e6:81:07:55:9c:3b:c1:27:6d: 1a:50:39:cb:dd:28:b8:0d:bc:3c:9c:cc:84:c5:b2: bd:c4:fe:67:41:fd:a4:00:a5:62:9d:9e:a8:a7:b6: e0:22:a2:c7:81:de:49:8e:8b:6f:0c:3e:8d:5b:4c: 21:8f:df:79:15:c7:5a:bd:45:68:39:9a:56:88:9e: c3:ae:80:8e:e0:0a:eb:f9:25:fb:46:bd:5b:86:94: 88:39:3b:35:24:93:37:41:4f:2a:5e:22:b2:b3:ed: 54:3a:ec:e8:0e:63:59:3d:dc:70:3f:e6:cd:23:f3: c1:be:b9:7b:6f:b4:f2:c2:9b:26:7c:77:4b:d3:21: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:7D:A0:C7:5F:34:86:F4:D1:60:03:DD:F0:70:E0:C1:1B:74:B1 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b0:5d:0d:d8:f3:48:0c:e0:dc:40:bc:65:14:72:14:55:38: 28:69:9d:b6:bc:d4:a4:6e:fd:28:b0:81:03:f3:8d:38:f9:14: b7:9d:4f:4b:ec:dd:be:dc:66:d1:ac:4a:ed:d6:0e:91:d6:6f: a3:84:c5:ba:94:b3:b3:96:5c:56:9a:1b:4e:d5:4f:c9:8e:92: 7d:a5:80:88:92:90:50:9c:5b:6d:9c:c0:3f:75:df:57:d3:37: 07:49:47:e6:42:61:61:03:07:f2:84:39:49:97:55:04:a8:96: 13:27:93:69:75:a8:be:f4:2d:73:06:fe:b8:0a:5a:56:fd:45: 0a:23:1b:30:f7:76:46:c8:c7:12:2d:d7:11:47:b8:6f:ab:96: c8:0f:f3:a0:18:d9:dd:d7:17:8f:6b:69:86:54:13:50:a8:91: e7:70:9c:ba:1d:61:ac:cb:5b:07:93:b1:db:d2:71:f5:2a:f2: 34:b4:e1:91:88:cf:d9:dd:79:2b:2f:26:02:78:a2:ff:48:4b: 2e:b8:e7:49:27:67:37:5e:1c:b6:a5:9d:cc:24:4a:46:87:a1: f4:ee:e8:e7:cf:6e:3f:00:52:a7:25:2c:7f:89:4c:70:41:f3: 76:8f:72:83:b7:6e:1f:c3:6f:12:a2:a4:4f:b4:33:3d:17:cf: 66:95:bb:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjYwNDA0MjEyNDE5WhcNMjYwNDExMjEyNDE5WjAYMRYwFAYD VQQDEw02OWQxODE4My1kZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zguphvXRqkT3eLZSx8zJD7x142yXgGKlfkseo3O6iGNlx/LWUdir9Zt/gT2 qKfgyAj4W/Pnz6lE8CNLr/zeFCYEAC+xVZtmExRJseXdOayBivH9i6gb4/3CSMoe kVcOoFDsAJFK/a0sRak7WEY29uhLs8ERL2Sryb0KwzLmgQdVnDvBJ20aUDnL3Si4 Dbw8nMyExbK9xP5nQf2kAKVinZ6op7bgIqLHgd5JjotvDD6NW0whj995FcdavUVo OZpWiJ7DroCO4Arr+SX7Rr1bhpSIOTs1JJM3QU8qXiKys+1UOuzoDmNZPdxwP+bN I/PBvrl7b7TywpsmfHdL0yEM4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIGfaDH XzSG9NFgA93wcODBG3SxMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbBdDdjzSAzg3EC8ZRRyFFU4KGmdtrzUpG79KLCBA/ONOPkUt51PS+zdvtxm 0axK7dYOkdZvo4TFupSzs5ZcVpobTtVPyY6SfaWAiJKQUJxbbZzAP3XfV9M3B0lH 5kJhYQMH8oQ5SZdVBKiWEyeTaXWovvQtcwb+uApaVv1FCiMbMPd2RsjHEi3XEUe4 b6uWyA/zoBjZ3dcXj2tphlQTUKiR53Ccuh1hrMtbB5Ox29Jx9SryNLThkYjP2d15 Ky8mAnii/0hLLrjnSSdnN14ctqWdzCRKRoeh9O7o589uPwBSpyUsf4lMcEHzdo9y g7duH8NvEqKkT7QzPRfPZpW7pA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:47 2026 by rpki-client