$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: aiJJTTDXIzYgrft8TFt4gGRTqv6PiPX330grxMewYh8= Subject key identifier: F6:E7:5E:1E:6D:9C:63:FA:BB:67:28:23:6F:1F:F8:E0:4D:94:C7:23 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0B6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0B60 Signing time: Sat 04 Apr 2026 19:00:52 +0000 Manifest this update: Sat 04 Apr 2026 19:00:51 +0000 Manifest next update: Sat 11 Apr 2026 19:00:51 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: PbeUC6/9aA9bXhAs0h8aBUXhcPMoSWbilhOhGO9HDKg=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: +aYHCdKpTUqPrKwnjjH4Hbnxa+6NoXo2+s7Ijz7iypQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2926 (0xb6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Apr 4 19:00:51 2026 GMT Not After : Apr 11 19:00:51 2026 GMT Subject: CN=69d15fe4-b06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:71:93:b8:e5:13:ec:d2:5a:34:54:b3:c2: 9a:e5:e3:90:38:19:88:68:e8:90:57:3e:49:47:42: f2:be:9c:72:98:e6:53:44:b5:f9:91:2f:34:8e:23: a8:d0:0d:94:5c:b2:68:79:e3:23:f4:ed:0a:44:be: 57:a3:a5:c7:4c:7e:5c:bc:b7:7e:fb:af:bb:7d:44: 05:46:0c:a3:05:52:d7:0a:44:18:26:9c:02:d3:48: 31:32:47:14:fe:59:d5:b0:26:b2:5a:89:be:44:00: dc:c7:84:96:ac:29:71:41:a9:26:b6:92:f3:a6:00: ed:fa:7d:8b:8d:14:41:ec:34:fb:f6:73:ec:88:be: 39:6a:87:73:9b:1c:d2:9a:3d:91:17:02:a5:56:63: 0c:bc:66:84:33:55:b0:bd:12:47:bc:1c:e4:86:b4: ba:72:56:d7:43:b6:91:c4:52:14:38:90:7e:c5:73: fa:3d:8f:5d:a6:af:43:f7:16:39:99:09:6f:62:81: 5f:32:f9:7c:7f:89:c2:5b:50:ba:aa:4c:5b:30:99: 93:b7:10:e8:ea:e6:03:35:58:07:bd:8a:f1:b0:ff: 6d:f5:e8:cd:ad:7a:18:6f:50:0a:61:5f:13:5b:6d: 8d:9b:64:89:59:ee:8e:00:ea:11:29:80:b2:04:45: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E7:5E:1E:6D:9C:63:FA:BB:67:28:23:6F:1F:F8:E0:4D:94:C7:23 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:75:62:36:04:ac:53:24:ea:3c:40:ec:98:cb:8a:08:82:90: e8:7a:89:7b:2c:3d:27:a0:0a:2f:84:e4:62:92:72:ee:2f:08: 60:1b:f4:ee:45:c7:55:70:3c:61:a8:38:e6:d9:d5:e4:1c:d9: c9:6e:c5:9d:51:eb:02:ca:b4:f0:87:19:d7:51:76:6a:fa:f4: b1:af:7b:96:ec:b0:95:2c:af:e0:df:7e:ad:92:f1:d5:7a:7c: d9:84:73:11:25:7d:de:46:20:ad:b5:f4:86:69:f9:7c:88:87: d0:78:c3:bf:26:ff:ec:99:77:c9:c2:9a:90:be:c4:49:59:35: 36:9c:bc:07:68:5e:e3:5c:52:cf:4f:cb:31:e3:2d:1b:0e:8a: 70:95:db:3b:db:8d:ba:c8:fc:1c:4a:d9:ca:d1:8e:a2:54:4a: a1:c5:f2:71:6b:ae:0a:46:91:ad:c4:0c:26:84:21:f5:2a:12: b1:7d:7a:34:11:4b:a3:16:4f:29:19:67:ae:ca:ba:b4:79:21: 2c:ef:42:df:d2:d6:d5:57:ed:5f:fc:63:30:25:fa:72:40:82: 5c:75:54:69:e8:e6:54:26:37:af:7b:38:42:52:d6:62:67:a8: 62:55:69:ab:b2:c6:73:b5:1c:d1:43:f7:5c:b4:58:e3:1d:77: 46:f5:22:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjYwNDA0MTkwMDUxWhcNMjYwNDExMTkwMDUxWjAYMRYwFAYD VQQDEw02OWQxNWZlNC1iMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmddxk7jlE+zSWjRUs8Ka5eOQOBmIaOiQVz5JR0LyvpxymOZTRLX5kS80jiOo 0A2UXLJoeeMj9O0KRL5Xo6XHTH5cvLd++6+7fUQFRgyjBVLXCkQYJpwC00gxMkcU /lnVsCayWom+RADcx4SWrClxQakmtpLzpgDt+n2LjRRB7DT79nPsiL45aodzmxzS mj2RFwKlVmMMvGaEM1WwvRJHvBzkhrS6clbXQ7aRxFIUOJB+xXP6PY9dpq9D9xY5 mQlvYoFfMvl8f4nCW1C6qkxbMJmTtxDo6uYDNVgHvYrxsP9t9ejNrXoYb1AKYV8T W22Nm2SJWe6OAOoRKYCyBEUI9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbnXh5t nGP6u2coI28f+OBNlMcjMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHnViNgSsUyTqPEDsmMuKCIKQ6HqJeyw9J6AKL4TkYpJy7i8IYBv07kXHVXA8 Yag45tnV5BzZyW7FnVHrAsq08IcZ11F2avr0sa97luywlSyv4N9+rZLx1Xp82YRz ESV93kYgrbX0hmn5fIiH0HjDvyb/7Jl3ycKakL7ESVk1Npy8B2he41xSz0/LMeMt Gw6KcJXbO9uNusj8HErZytGOolRKocXycWuuCkaRrcQMJoQh9SoSsX16NBFLoxZP KRlnrsq6tHkhLO9C39LW1VftX/xjMCX6ckCCXHVUaejmVCY3r3s4QlLWYmeoYlVp q7LGc7Uc0UP3XLRY4x13RvUiQw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:00:27 2026 by rpki-client