$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft File: mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json) Hash identifier: 45Tpj0+pSy9yVmFvg+t50CbBR7Qbj8n6oHGypELHklA= Subject key identifier: 23:7F:E6:3A:B3:E4:A4:1F:80:3D:A4:B5:4E:FD:B5:B3:BE:51:D6:4C Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF Certificate issuer: /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft Manifest number: 2B Signing time: Tue 21 Apr 2026 08:37:46 +0000 Manifest this update: Tue 21 Apr 2026 08:37:46 +0000 Manifest next update: Tue 28 Apr 2026 08:37:46 +0000 Files and hashes: 1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: xmhYrKK++t3r4iS06qR/hQumybtWBcntNNrfk4hIw7E=) 2: 198EDB1034E511F1828F838E91833773.roa (hash: vfUkhhZvC+GnQyu1JxTO9mkMqnpFyY7JrCSKN7gLZzM=) 3: 4CCA7C1E34E511F1AF14078F91833773.roa (hash: IjUm+BH6SUivx0UO20wJhS2k8Pz3XHEgptYkjotxwWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF Validity Not Before: Apr 21 08:37:46 2026 GMT Not After : Apr 28 08:37:46 2026 GMT Subject: CN=69e7375a-c47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3c:57:f1:88:54:90:28:1b:f0:21:93:d8:2f: 58:a2:5a:12:7e:d7:c0:dc:4f:6f:07:fa:cb:8c:65: 6a:cd:20:d7:ef:29:be:db:ec:ed:cd:69:f0:a0:f6: cb:30:2e:32:c6:c6:ec:02:e5:e1:e3:02:7a:de:7f: 38:0f:b4:21:81:83:08:7c:e3:b6:ec:ce:7b:31:25: 1f:10:8a:8a:7b:8c:12:47:a5:52:41:80:92:3c:ae: f0:2c:64:46:72:6e:a8:0b:85:e8:fe:b3:8c:19:d2: 1c:21:b0:47:11:dd:51:db:b9:c0:bc:9e:8f:b7:2c: 66:3e:74:3e:7e:46:87:84:40:bb:98:e9:00:68:22: b0:a3:ad:3e:48:58:0f:b5:f4:f2:f9:f6:51:90:cf: cf:40:63:b9:5a:42:4c:45:be:07:a6:0a:9d:12:77: a4:71:95:1a:1d:3a:6b:57:cd:44:34:86:59:2e:3f: 8e:c4:9f:a6:43:f7:b1:d9:21:e3:14:17:3e:91:9d: 32:90:d3:67:ef:1a:ee:dd:e1:e6:b1:00:7b:a4:4e: fd:8d:41:bc:51:1d:97:d6:8c:3e:6d:fb:ab:90:64: 61:5a:87:2a:93:18:5d:e5:cb:87:0e:b1:0a:1e:da: f7:5e:40:4c:76:9f:85:09:24:0e:db:76:0d:6e:77: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:E6:3A:B3:E4:A4:1F:80:3D:A4:B5:4E:FD:B5:B3:BE:51:D6:4C X509v3 Authority Key Identifier: keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:4f:36:52:68:db:cc:e2:97:4b:39:70:06:37:4a:eb:86:85: ed:d8:9a:ba:d8:94:97:21:41:d4:37:98:8f:17:85:42:35:21: 4c:af:49:dc:03:c7:b7:89:25:47:8e:bd:8f:87:cc:45:87:4c: 81:be:8c:6d:29:ff:78:27:36:43:fd:64:b2:67:9b:35:27:c0: cb:79:67:6b:37:51:6c:80:2b:bf:cd:f5:6c:d9:b4:24:61:f1: 7e:42:8a:24:fa:5a:42:98:20:dd:95:82:f3:e1:b0:a2:60:ee: f6:37:0d:48:f0:b3:db:b3:09:63:47:e5:94:00:41:28:65:d5: 68:8c:ea:00:7b:45:af:09:d3:3a:23:29:9c:9a:b7:fe:3f:c8: 84:fe:1a:6a:d9:cf:2d:7a:f1:c5:e5:1d:cb:9b:c5:a0:d6:63: 9d:94:3f:34:e5:ab:d0:f5:fd:65:1b:ad:74:4d:24:44:08:83: 3a:e1:f8:39:28:f8:13:0c:f2:df:42:21:35:f2:9f:da:90:3c: 6c:7c:7d:90:d6:7a:7c:fe:a7:90:39:0c:23:6c:e8:a5:fd:9e: cf:f3:71:77:17:5e:5d:8f:90:8a:c5:8d:0d:3e:f3:5c:ba:10: d2:f2:d1:c9:b8:d6:9e:38:38:0c:49:f1:12:22:a8:87:17:7f: de:7c:6d:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkM5RjExMC8GA1UEBRMoOUE5MjVFODY4QzI2QUUzQ0U3RTA4Q0VENkZDMzExMkY2 NDBGMkNDRjAeFw0yNjA0MjEwODM3NDZaFw0yNjA0MjgwODM3NDZaMBgxFjAUBgNV BAMTDTY5ZTczNzVhLWM0N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqPFfxiFSQKBvwIZPYL1iiWhJ+18DcT28H+suMZWrNINfvKb7b7O3NafCg9ssw LjLGxuwC5eHjAnrefzgPtCGBgwh847bsznsxJR8Qiop7jBJHpVJBgJI8rvAsZEZy bqgLhej+s4wZ0hwhsEcR3VHbucC8no+3LGY+dD5+RoeEQLuY6QBoIrCjrT5IWA+1 9PL59lGQz89AY7laQkxFvgemCp0Sd6RxlRodOmtXzUQ0hlkuP47En6ZD97HZIeMU Fz6RnTKQ02fvGu7d4eaxAHukTv2NQbxRHZfWjD5t+6uQZGFahyqTGF3ly4cOsQoe 2vdeQEx2n4UJJA7bdg1ud7XfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI3/mOrPk pB+APaS1Tv21s75R1kwwHwYDVR0jBBgwFoAUmpJehowmrjzn4Iztb8MRL2QPLM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzlGLzdGRDk2QkY2MEQ4 MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6bjRJenRiOE1STDJRUExN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbXBKZWhvd21yanpuNEl6dGI4TVJMMlFQTE04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC QzlGLzdGRDk2QkY2MEQ4MDExRjE5MjBCM0EwRTI0M0Q4QzY3L21wSmVob3dtcmp6 bjRJenRiOE1STDJRUExNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBETzZSaNvM4pdLOXAGN0rrhoXt2Jq62JSXIUHUN5iPF4VCNSFMr0ncA8e3iSVH jr2Ph8xFh0yBvoxtKf94JzZD/WSyZ5s1J8DLeWdrN1FsgCu/zfVs2bQkYfF+Qook +lpCmCDdlYLz4bCiYO72Nw1I8LPbswljR+WUAEEoZdVojOoAe0WvCdM6Iymcmrf+ P8iE/hpq2c8tevHF5R3Lm8Wg1mOdlD805avQ9f1lG610TSRECIM64fg5KPgTDPLf QiE18p/akDxsfH2Q1np8/qeQOQwjbOil/Z7P83F3F15dj5CKxY0NPvNcuhDS8tHJ uNaeODgMSfESIqiHF3/efG3T -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:13 2026 by rpki-client