$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: hFBaxYuSCC64hOdznVsRbrEUUChzOFd4oaj6HtVmtCQ= Subject key identifier: 06:2C:6D:79:D9:C3:5F:B3:2E:B5:09:C8:8C:C3:18:7A:A6:E2:57:88 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 0148 Signing time: Sun 05 Apr 2026 04:39:43 +0000 Manifest this update: Sun 05 Apr 2026 04:39:42 +0000 Manifest next update: Sun 12 Apr 2026 04:39:42 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: PReyfHNr+X/GHUOzdjvz2eJumhy/iclyY/PTNsJBcfI=) 2: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=) 3: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Apr 5 04:39:42 2026 GMT Not After : Apr 12 04:39:42 2026 GMT Subject: CN=69d1e78f-d3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:c7:61:93:dc:cc:8e:02:3a:71:9d:2b:2e: d1:e3:43:00:aa:13:ee:0f:1d:89:b1:2e:d5:91:06: 88:cc:9c:c8:ba:5c:de:cb:52:31:dd:51:78:11:ba: 30:c7:c7:f0:c8:08:05:dc:00:b1:dd:1f:af:1b:7f: 36:b9:6f:da:4b:39:ce:42:22:8b:0e:c3:04:b0:aa: 4a:b4:5d:d8:e9:33:84:19:97:ba:a6:c2:82:ea:9b: 91:a6:34:65:d8:03:e0:43:e5:f1:27:a3:c8:b7:f2: c3:52:a5:fc:06:e5:f5:05:30:38:07:a5:79:04:e2: bd:0f:b3:9f:3b:62:b8:ac:23:8f:35:f5:b5:42:b1: 39:5d:45:4e:f6:fe:a0:16:ad:41:12:d7:89:c3:ed: a2:d9:fa:6a:d3:00:7b:75:4a:c6:c0:ee:ff:78:8f: f7:52:6b:d0:25:7d:54:cc:68:65:20:6a:01:36:98: 8b:53:89:b4:d9:32:90:cb:ad:68:15:f1:76:79:08: 73:a7:41:bc:2b:5c:f3:74:35:65:fc:89:cc:76:3e: bb:e5:df:fc:84:cc:aa:e4:91:e8:5f:ee:64:58:5a: 7f:2d:81:99:dc:51:20:0c:f2:db:eb:65:a1:d2:f7: ff:47:f1:13:c2:c8:15:7a:ee:33:1c:da:9c:ca:e3: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2C:6D:79:D9:C3:5F:B3:2E:B5:09:C8:8C:C3:18:7A:A6:E2:57:88 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d2:18:ce:6a:60:f4:4b:58:ac:4e:d6:8c:17:b3:99:4f:31: 75:1a:01:88:59:07:8a:bc:92:25:8a:52:02:a7:eb:b0:c8:fb: 2b:bb:f2:70:c8:89:61:80:58:10:40:05:d7:a0:bc:71:72:bb: 59:40:be:9b:52:24:77:c6:7f:31:10:b8:b6:20:fe:f1:9d:c4: 5e:5b:ff:9f:db:a4:09:ff:f0:b2:c0:11:c2:4e:c8:e8:fa:73: f9:fb:a0:21:a1:fe:70:34:f5:bf:2c:21:c0:ab:ea:49:0a:16: 5a:26:28:75:41:e3:df:01:16:47:3c:30:cc:82:f5:01:2a:eb: 66:f6:43:e2:cb:f6:f6:ec:62:4a:24:84:bd:54:f8:9d:6d:71: ef:dc:e7:dd:32:81:7a:6c:20:e3:60:b2:d5:3d:7d:9a:0a:91: bf:48:9c:35:43:4b:23:f2:8e:fd:46:ae:1d:ca:d3:57:e3:2b: 99:c9:94:55:8e:84:de:4e:9a:ac:bd:45:7a:4b:f5:58:a9:6c: 8b:d4:58:d4:87:43:47:06:89:cb:b5:66:00:6c:ba:8e:b9:03: c7:71:c8:f0:e7:9b:e0:57:d2:93:e5:c7:6d:1b:3b:b0:15:68: 61:5a:88:8f:ea:dd:8c:41:7a:54:ab:27:29:95:5a:46:86:54: ac:78:5a:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjYwNDA1MDQzOTQyWhcNMjYwNDEyMDQzOTQyWjAYMRYwFAYD VQQDEw02OWQxZTc4Zi1kM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssnHYZPczI4COnGdKy7R40MAqhPuDx2JsS7VkQaIzJzIulzey1Ix3VF4Ebow x8fwyAgF3ACx3R+vG382uW/aSznOQiKLDsMEsKpKtF3Y6TOEGZe6psKC6puRpjRl 2APgQ+XxJ6PIt/LDUqX8BuX1BTA4B6V5BOK9D7OfO2K4rCOPNfW1QrE5XUVO9v6g Fq1BEteJw+2i2fpq0wB7dUrGwO7/eI/3UmvQJX1UzGhlIGoBNpiLU4m02TKQy61o FfF2eQhzp0G8K1zzdDVl/InMdj675d/8hMyq5JHoX+5kWFp/LYGZ3FEgDPLb62Wh 0vf/R/ETwsgVeu4zHNqcyuNuHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYsbXnZ w1+zLrUJyIzDGHqm4leIMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn9IYzmpg9EtYrE7WjBezmU8xdRoBiFkHirySJYpSAqfrsMj7K7vycMiJYYBY EEAF16C8cXK7WUC+m1Ikd8Z/MRC4tiD+8Z3EXlv/n9ukCf/wssARwk7I6Ppz+fug IaH+cDT1vywhwKvqSQoWWiYodUHj3wEWRzwwzIL1ASrrZvZD4sv29uxiSiSEvVT4 nW1x79zn3TKBemwg42Cy1T19mgqRv0icNUNLI/KO/UauHcrTV+MrmcmUVY6E3k6a rL1Fekv1WKlsi9RY1IdDRwaJy7VmAGy6jrkDx3HI8Oeb4FfSk+XHbRs7sBVoYVqI j+rdjEF6VKsnKZVaRoZUrHhazA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:03 2026 by rpki-client