$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft File: _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json) Hash identifier: YYUtCI/UuaTY2YT5JHV7Ax4S8cwvhKMzBFRAPdf7MVE= Subject key identifier: 55:E0:07:B5:CD:46:3B:73:CD:72:48:54:A4:9D:C8:7C:09:64:4D:38 Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30 Certificate issuer: /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft Manifest number: 15 Signing time: Fri 17 Apr 2026 08:42:36 +0000 Manifest this update: Fri 17 Apr 2026 08:42:36 +0000 Manifest next update: Fri 24 Apr 2026 08:42:36 +0000 Files and hashes: 1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: 4nGxMU7hFwttKZnDrT4aF6uanDqj0ZoIimhI33oyBlo=) 2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30 Validity Not Before: Apr 17 08:42:36 2026 GMT Not After : Apr 24 08:42:36 2026 GMT Subject: CN=69e1f27c-83d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:f5:5c:c7:18:2a:cc:cb:ba:cb:39:25:e6: f5:82:02:1a:85:d1:f7:f5:ae:e6:6e:70:a9:3a:85: 86:7f:d8:30:d9:0b:b1:18:2e:e5:82:c3:5c:f9:02: 0e:fa:57:e7:a4:11:cd:4a:04:f7:79:2c:80:7c:f6: 8c:4f:9b:88:e4:1b:9f:e8:ce:2d:d8:ba:37:67:13: 3c:5f:5f:42:98:6e:29:34:73:0f:09:b9:34:51:45: c6:48:c1:88:43:12:7a:ed:e2:5b:20:df:df:f3:2d: a0:79:77:56:1e:0e:4c:17:89:85:93:72:b6:2b:bd: ee:01:0e:4e:72:b2:47:51:24:31:e6:d2:66:35:23: 57:36:52:08:67:6a:07:da:9a:7b:5a:3d:d2:bd:32: 92:2e:52:42:ee:72:10:a3:29:75:9a:83:f7:89:9d: ff:9e:5e:4b:d7:ea:df:6f:e7:46:ae:02:3a:e6:67: 14:e3:cc:05:c0:d3:9e:e8:eb:04:52:6d:90:05:28: f3:78:16:61:07:4d:63:1c:71:47:2e:28:5a:4f:d7: 66:68:3a:69:a8:a8:ed:dd:2f:9c:54:b6:88:1c:93: b2:cc:83:37:7e:9f:fa:46:e7:ad:9c:86:6a:e7:9d: 4d:73:5d:dd:fc:0d:e9:28:35:c5:d7:89:66:32:e2: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E0:07:B5:CD:46:3B:73:CD:72:48:54:A4:9D:C8:7C:09:64:4D:38 X509v3 Authority Key Identifier: keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6b:d1:e3:8e:fe:32:cb:62:3e:76:08:24:d1:52:a5:02:ca: 4e:ed:e7:e2:fb:3c:96:23:94:79:0b:90:25:46:f9:f0:90:90: 72:03:97:b4:dd:09:bb:8b:4a:a4:f7:4a:e9:7a:f4:af:a6:16: 96:89:75:63:8b:a9:eb:38:91:10:0d:59:47:ed:ed:ec:73:7d: b3:d0:25:89:49:30:8b:b4:1c:f0:78:55:da:8f:8a:82:9b:a2: cf:fe:8f:4c:e6:ae:59:6f:2c:2b:54:8e:8c:3f:e5:35:95:b3: 0d:8a:be:cf:02:94:0a:e2:94:f5:af:75:99:2b:4f:a7:3f:74: 06:17:05:e8:8e:47:2f:6b:83:15:e4:26:7c:c1:3a:e1:99:68: 87:37:b3:8a:3c:8d:23:c0:0a:b6:b0:ef:df:3a:ab:e2:b5:9d: 88:55:78:f1:76:89:c1:b6:28:fd:96:22:7a:ad:c4:5d:9b:1e: de:64:5b:77:45:30:bc:f0:a4:cf:c7:3c:42:2c:4c:9d:0e:c9: 9c:a6:e5:01:03:ef:49:55:43:ef:22:48:e4:f0:4a:c3:b5:5d: d1:11:e8:fe:58:bb:61:0d:4a:fd:db:35:e2:00:a6:55:45:0f: 98:ea:08:be:9e:77:c4:c5:e2:79:6c:f9:bf:b0:a2:86:34:7c: ce:59:50:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzNERTExMC8GA1UEBRMoRkMwNTVEQTkyMTU0MThDMkExNDU2NkVGNTY3NkI4QTRG NEQyMEIzMDAeFw0yNjA0MTcwODQyMzZaFw0yNjA0MjQwODQyMzZaMBgxFjAUBgNV BAMTDTY5ZTFmMjdjLTgzZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0cPVcxxgqzMu6yzkl5vWCAhqF0ff1ruZucKk6hYZ/2DDZC7EYLuWCw1z5Ag76 V+ekEc1KBPd5LIB89oxPm4jkG5/ozi3YujdnEzxfX0KYbik0cw8JuTRRRcZIwYhD Enrt4lsg39/zLaB5d1YeDkwXiYWTcrYrve4BDk5yskdRJDHm0mY1I1c2Ughnagfa mntaPdK9MpIuUkLuchCjKXWag/eJnf+eXkvX6t9v50auAjrmZxTjzAXA057o6wRS bZAFKPN4FmEHTWMccUcuKFpP12ZoOmmoqO3dL5xUtogck7LMgzd+n/pG562chmrn nU1zXd38DekoNcXXiWYy4iEnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVeAHtc1G O3PNckhUpJ3IfAlkTTgwHwYDVR0jBBgwFoAU/AVdqSFUGMKhRWbvVna4pPTSCzAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzM0RFLzIxNjBDOTIwMUQw MjExRjE5QkYwOTM2MTAzM0Q4QzY3L19BVmRxU0ZVR01LaFJXYnZWbmE0cFBUU0N6 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0FWZHFTRlVHTUtoUldidlZuYTRwUFRTQ3pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz M0RFLzIxNjBDOTIwMUQwMjExRjE5QkYwOTM2MTAzM0Q4QzY3L19BVmRxU0ZVR01L aFJXYnZWbmE0cFBUU0N6QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQARa9Hjjv4yy2I+dggk0VKlAspO7efi+zyWI5R5C5AlRvnwkJByA5e03Qm7i0qk 90rpevSvphaWiXVji6nrOJEQDVlH7e3sc32z0CWJSTCLtBzweFXaj4qCm6LP/o9M 5q5ZbywrVI6MP+U1lbMNir7PApQK4pT1r3WZK0+nP3QGFwXojkcva4MV5CZ8wTrh mWiHN7OKPI0jwAq2sO/fOqvitZ2IVXjxdonBtij9liJ6rcRdmx7eZFt3RTC88KTP xzxCLEydDsmcpuUBA+9JVUPvIkjk8ErDtV3REej+WLthDUr92zXiAKZVRQ+Y6gi+ nnfExeJ5bPm/sKKGNHzOWVCM -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:00 2026 by rpki-client