$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: VrTebkkd77TPNAyjNsboh7xXEwjMylo8dS4HHfVBJak= Subject key identifier: AB:5D:5C:9E:26:37:AB:BE:10:09:9D:EF:63:D4:2B:DE:13:11:B7:7D Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 0854 Signing time: Mon 20 Apr 2026 20:43:57 +0000 Manifest this update: Mon 20 Apr 2026 20:43:56 +0000 Manifest next update: Mon 27 Apr 2026 20:43:56 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: FjbwiuhLjoMg2mPCQxafBrgpoO7Sm4KuAfW28LzQTIo=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Apr 20 20:43:56 2026 GMT Not After : Apr 27 20:43:56 2026 GMT Subject: CN=69e6900d-86e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:15:46:51:37:90:1b:62:e3:ac:6d:d3:8f: c7:95:9d:f6:1e:3f:8f:d3:83:ff:31:08:58:79:c3: 1f:bb:a5:2b:75:1c:9a:88:99:c7:09:56:2d:ca:a7: cf:38:6f:cc:86:30:17:85:c4:75:b8:ab:54:59:e7: 62:07:53:6b:29:cf:e7:16:5a:e6:f3:b1:cb:98:41: 46:7a:7d:86:d7:24:8e:09:ff:fc:7a:ff:e8:3e:d8: 74:00:a6:e8:94:80:dc:26:91:57:25:f6:28:29:54: c3:47:09:73:b9:a4:4f:7c:fd:a8:07:61:99:2e:90: 6b:ec:4e:f9:fb:bd:69:f1:93:9d:24:1d:1b:0b:09: c6:94:71:f4:8d:45:a5:03:d6:f1:45:d4:8c:3e:9c: f1:e1:62:ac:02:5c:64:04:4f:96:97:07:b9:5a:6a: 6c:13:1f:04:1a:cc:98:71:40:0a:93:d1:09:28:f1: 06:58:61:3d:c7:78:91:6e:ee:d5:e0:6f:c0:8d:ff: 1e:f4:c0:3f:77:79:09:eb:ac:1f:d7:de:6a:94:ec: 35:5a:c4:3a:9b:e3:98:57:dc:22:7a:6e:fc:f8:65: 01:b2:5a:79:a7:8c:98:fd:e6:4b:26:0b:da:71:d3: 08:ed:1e:f7:a5:17:f6:48:bb:14:9c:78:e6:a1:5c: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:5C:9E:26:37:AB:BE:10:09:9D:EF:63:D4:2B:DE:13:11:B7:7D X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3e:dc:bd:ab:52:37:a0:da:ea:4b:b2:b7:49:37:eb:cb:75: b9:58:90:2f:95:ff:1c:88:0c:f7:6d:86:cd:a4:80:35:e9:09: 70:17:67:1d:b2:b8:39:50:e7:44:83:1a:bc:25:50:39:9b:cb: 0e:d5:08:72:ce:2d:51:02:c5:e2:45:d1:0a:8c:04:23:df:f1: a0:4b:eb:fe:06:94:bf:52:b6:9a:95:63:f2:24:cd:95:e8:c9: 92:93:bf:50:29:8c:97:5c:b5:dc:52:96:9e:0f:57:4d:e7:e5: 2d:3f:f0:ac:b4:1c:3c:2e:37:f3:13:1e:f2:41:68:40:de:95: e1:45:34:c0:b6:17:95:6d:16:ca:19:85:be:04:3b:1e:52:85: da:4e:17:b9:f3:5f:39:a0:5e:3c:0d:77:bc:36:85:62:2b:67: bd:ab:75:2c:34:61:46:97:28:d0:40:a9:d1:f4:4a:36:fc:30: 77:c5:10:b7:d7:b1:f7:d3:71:78:de:92:95:47:09:cf:cf:3d: 0e:ef:8e:a4:2a:2b:af:ee:15:3d:4c:2c:4b:6b:43:b2:18:ff: 32:62:8e:e0:d3:92:a5:d0:ab:d8:d7:26:02:4e:d6:9d:3f:7c: 46:0c:eb:cd:b5:fc:4c:0b:61:d4:b6:43:3e:2d:c3:b3:d6:75: f7:95:3f:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjYwNDIwMjA0MzU2WhcNMjYwNDI3MjA0MzU2WjAYMRYwFAYD VQQDEw02OWU2OTAwZC04NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3MVRlE3kBti46xt04/HlZ32Hj+P04P/MQhYecMfu6UrdRyaiJnHCVYtyqfP OG/MhjAXhcR1uKtUWediB1NrKc/nFlrm87HLmEFGen2G1ySOCf/8ev/oPth0AKbo lIDcJpFXJfYoKVTDRwlzuaRPfP2oB2GZLpBr7E75+71p8ZOdJB0bCwnGlHH0jUWl A9bxRdSMPpzx4WKsAlxkBE+Wlwe5WmpsEx8EGsyYcUAKk9EJKPEGWGE9x3iRbu7V 4G/Ajf8e9MA/d3kJ66wf195qlOw1WsQ6m+OYV9wiem78+GUBslp5p4yY/eZLJgva cdMI7R73pRf2SLsUnHjmoVzTVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtdXJ4m N6u+EAmd72PUK94TEbd9MB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZD7cvatSN6Da6kuyt0k368t1uViQL5X/HIgM922GzaSANekJcBdnHbK4OVDn RIMavCVQOZvLDtUIcs4tUQLF4kXRCowEI9/xoEvr/gaUv1K2mpVj8iTNlejJkpO/ UCmMl1y13FKWng9XTeflLT/wrLQcPC438xMe8kFoQN6V4UU0wLYXlW0WyhmFvgQ7 HlKF2k4XufNfOaBePA13vDaFYitnvat1LDRhRpco0ECp0fRKNvwwd8UQt9ex99Nx eN6SlUcJz889Du+OpCorr+4VPUwsS2tDshj/MmKO4NOSpdCr2NcmAk7WnT98Rgzr zbX8TAth1LZDPi3Ds9Z195U/pg== -----END CERTIFICATE-----Generated at Wed Apr 22 00:10:30 2026 by rpki-client