$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: XHusp8uOnjsqJOSnC0DTZrLIQNvMsdvbOHXApt1bAQU= Subject key identifier: C0:AB:66:F8:35:89:DA:1A:F2:61:8C:8C:AF:09:DC:0E:81:B9:AD:ED Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 0243 Signing time: Sun 05 Apr 2026 02:01:31 +0000 Manifest this update: Sun 05 Apr 2026 02:01:30 +0000 Manifest next update: Sun 12 Apr 2026 02:01:30 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: 7IuZTt/D1jw82BHkz7piVk7sAh/7YC19dAA/jzHqZsA=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: zxKqdb0zMWCK7O7b2gTDy0Tlsn+WOImUW+TSuWVYasI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Apr 5 02:01:30 2026 GMT Not After : Apr 12 02:01:30 2026 GMT Subject: CN=69d1c27a-11ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:3e:c1:0f:1b:2e:b0:ba:1f:11:cd:34:55: f8:91:c3:4f:48:21:03:0f:30:74:1d:0c:f0:85:6b: 09:68:04:68:94:c3:c6:f4:19:0c:8d:36:5d:69:2a: f3:25:b6:dc:d5:49:93:6e:7d:45:19:ca:5f:54:51: 28:b5:1e:0a:6e:2e:3c:d7:15:de:e4:54:8d:31:77: 84:02:79:f8:cd:49:49:27:d0:38:4f:28:08:5a:00: 37:fb:bb:77:b1:23:5a:de:5c:4f:81:ea:e0:e5:be: 72:62:94:92:d4:56:25:77:42:78:06:d2:c3:87:4f: d0:90:40:38:f4:10:c8:1c:66:a2:66:05:b4:50:ea: 31:aa:8d:d1:cd:dc:ed:f9:fd:79:2b:27:79:a1:89: 4c:1a:42:1e:cd:78:08:08:5c:3b:b1:e7:29:32:9f: f6:aa:03:0d:73:45:02:94:69:e0:59:a9:84:56:06: 89:27:94:7c:8e:12:c4:6b:aa:c3:f2:24:6c:c2:42: 09:e8:c1:bb:4d:a3:3e:a6:a7:1e:b5:09:a0:43:72: cb:6c:b2:fa:c8:ff:7a:4f:bf:81:70:3a:90:4f:9c: 1e:e5:32:14:61:68:95:76:41:86:21:1e:09:fa:d4: d1:a0:e7:13:fa:70:39:b7:50:b3:ca:07:e0:bb:17: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AB:66:F8:35:89:DA:1A:F2:61:8C:8C:AF:09:DC:0E:81:B9:AD:ED X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ca:1b:f4:2b:c2:23:c9:2d:e8:6f:5e:a6:0e:3a:b3:67:88: 97:1f:01:d1:fe:a0:57:33:b1:22:7f:c4:74:5f:4c:8b:05:d4: f8:c4:0a:d9:e0:f8:c5:11:0d:23:b1:b4:65:c6:88:77:01:40: c2:45:9d:0d:c1:4b:56:1e:21:3b:ec:5e:3f:9a:6f:d1:1b:9e: 46:e3:4e:35:f2:16:fd:ce:22:36:5c:20:5c:1a:3b:ab:55:7b: 40:7b:be:cc:78:9d:ee:c7:6d:6c:76:0f:c4:ec:f4:ad:4c:1a: db:4c:c2:c1:8c:cc:89:b5:74:1e:66:2c:12:b1:47:27:99:66: 2e:c7:f5:b8:8f:ac:33:5d:46:ba:1a:34:9c:51:f7:4f:00:29: 95:08:2f:ca:5c:48:05:99:cb:95:38:65:62:4f:c1:82:af:ec: 2f:d0:da:4f:7c:ab:3b:27:b7:79:a7:b5:53:11:fb:81:94:6e: 98:4f:2b:61:ba:14:a3:5f:6a:4a:28:b5:64:52:d9:02:5d:ae: 69:37:0a:2a:e4:c0:96:2f:64:fa:7c:0e:df:d9:c9:ee:bf:2b: f4:67:33:e3:e4:77:25:e6:16:4a:c5:36:64:cf:0f:e8:8a:9e: 21:4b:dd:c4:2e:42:bb:22:bf:3f:84:d9:74:d8:43:a8:cd:e8: 06:f6:5f:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjYwNDA1MDIwMTMwWhcNMjYwNDEyMDIwMTMwWjAYMRYwFAYD VQQDEw02OWQxYzI3YS0xMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q8+wQ8bLrC6HxHNNFX4kcNPSCEDDzB0HQzwhWsJaARolMPG9BkMjTZdaSrz Jbbc1UmTbn1FGcpfVFEotR4Kbi481xXe5FSNMXeEAnn4zUlJJ9A4TygIWgA3+7t3 sSNa3lxPgerg5b5yYpSS1FYld0J4BtLDh0/QkEA49BDIHGaiZgW0UOoxqo3Rzdzt +f15Kyd5oYlMGkIezXgICFw7secpMp/2qgMNc0UClGngWamEVgaJJ5R8jhLEa6rD 8iRswkIJ6MG7TaM+pqcetQmgQ3LLbLL6yP96T7+BcDqQT5we5TIUYWiVdkGGIR4J +tTRoOcT+nA5t1CzygfguxdbxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCrZvg1 idoa8mGMjK8J3A6Bua3tMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPMob9CvCI8kt6G9epg46s2eIlx8B0f6gVzOxIn/EdF9MiwXU+MQK2eD4xREN I7G0ZcaIdwFAwkWdDcFLVh4hO+xeP5pv0RueRuNONfIW/c4iNlwgXBo7q1V7QHu+ zHid7sdtbHYPxOz0rUwa20zCwYzMibV0HmYsErFHJ5lmLsf1uI+sM11Guho0nFH3 TwAplQgvylxIBZnLlThlYk/Bgq/sL9DaT3yrOye3eae1UxH7gZRumE8rYboUo19q Sii1ZFLZAl2uaTcKKuTAli9k+nwO39nJ7r8r9Gcz4+R3JeYWSsU2ZM8P6IqeIUvd xC5CuyK/P4TZdNhDqM3oBvZfYA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:17 2026 by rpki-client