$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: p41rNEY6CbDibRhRYwaisEaDKcezCs74d8Mrpw1ZHIs= Subject key identifier: F3:F7:04:DF:B8:CA:6A:85:E6:1C:34:3F:C9:DA:2B:DA:EE:E9:4F:98 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0D1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0D0E Signing time: Sat 18 Apr 2026 18:00:23 +0000 Manifest this update: Sat 18 Apr 2026 18:00:22 +0000 Manifest next update: Sat 25 Apr 2026 18:00:22 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: vohxAXbPamunZgyuFfjXGYMFIbtp8bshbhmCfSj6qec=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: M8VzcHzGGFzODlt0s8FMTbdg4bvEqOp4tLkXsR05vew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3355 (0xd1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Apr 18 18:00:22 2026 GMT Not After : Apr 25 18:00:22 2026 GMT Subject: CN=69e3c6b6-8f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:6b:5f:93:d6:d0:72:fa:94:96:d8:77:88: 23:9b:ac:28:bc:4e:76:0a:20:ad:22:72:8b:be:6a: 93:5e:dd:b3:c8:64:01:b8:02:4d:b4:f4:3a:e9:c4: ef:d1:e3:23:0b:d6:b0:04:be:d7:09:b7:e8:5f:92: 1a:d9:23:8e:16:4e:9d:65:13:ca:04:86:3f:83:f0: f0:98:70:0f:34:f6:e1:6e:68:74:ce:e7:9e:ee:09: 0d:72:56:dd:bc:61:f4:85:f7:cb:8f:c1:21:a5:a1: c5:38:22:3e:08:fa:ec:48:6a:a4:9e:8d:fd:fe:34: 90:a1:da:1f:48:a7:19:bf:7a:4a:f6:5b:f9:1d:fb: bd:97:2f:d7:64:40:56:c2:96:7d:b8:d4:b2:cd:b0: 7b:39:b2:65:c8:dd:a8:b3:f8:4d:e4:42:28:44:73: 5d:39:7f:e1:33:18:88:e0:3a:44:b6:f7:38:be:50: 7b:4e:05:fe:1f:dd:e3:5b:36:f9:d1:ce:05:c4:87: 30:21:e4:10:d4:56:8b:7a:b7:c6:36:84:47:f8:ec: b9:26:fe:fe:58:b1:a3:81:b1:5d:99:40:f5:62:c3: e0:2b:6c:fb:71:dd:c9:21:4a:7b:57:65:64:e6:a5: c9:98:c4:2f:ea:de:67:0c:12:b6:eb:a8:a0:74:66: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F7:04:DF:B8:CA:6A:85:E6:1C:34:3F:C9:DA:2B:DA:EE:E9:4F:98 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:77:60:ff:8b:54:c8:0c:37:b6:12:f8:a4:e9:49:d4:40:ab: 29:4c:6b:a3:bc:9e:8f:70:ac:61:09:b1:45:14:a3:f5:98:7f: 4a:28:10:5d:cb:db:bb:32:f7:27:f6:34:01:8e:21:59:fc:a4: 81:b1:a3:04:2b:11:d8:50:d0:98:4c:48:72:de:a8:20:68:de: 7e:b1:5b:e9:e0:47:58:9d:b5:a2:6c:e1:1b:45:27:39:48:23: 83:80:e7:b5:d9:2f:54:e5:6d:e0:27:d7:3e:ad:3e:92:60:8d: f7:aa:cd:ba:b2:e6:45:64:c6:86:c8:b4:d4:a4:d5:9f:c6:47: 5f:d2:8d:f2:78:10:70:7f:47:f8:0a:e5:89:22:03:cb:7f:07: cf:75:66:af:f3:5c:db:8a:31:99:4c:1e:d2:70:6f:4e:45:08: 24:b6:ec:f7:c5:13:1f:28:1e:89:ec:fa:03:3c:d9:27:05:c8: 7c:0b:14:f3:50:dd:42:a4:33:9a:d5:53:17:61:09:c1:4d:cd: 64:05:6b:2c:fc:09:28:1e:41:c9:11:52:cc:fa:0b:b1:52:f8: 19:aa:13:8d:9d:bf:16:c9:9c:cc:18:7a:45:5a:e1:06:1b:07: e9:51:17:8e:fe:60:18:2c:5f:8b:87:6c:56:1f:a3:00:e4:d2: b8:88:a5:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjYwNDE4MTgwMDIyWhcNMjYwNDI1MTgwMDIyWjAYMRYwFAYD VQQDEw02OWUzYzZiNi04ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA199rX5PW0HL6lJbYd4gjm6wovE52CiCtInKLvmqTXt2zyGQBuAJNtPQ66cTv 0eMjC9awBL7XCbfoX5Ia2SOOFk6dZRPKBIY/g/DwmHAPNPbhbmh0zuee7gkNclbd vGH0hffLj8EhpaHFOCI+CPrsSGqkno39/jSQodofSKcZv3pK9lv5Hfu9ly/XZEBW wpZ9uNSyzbB7ObJlyN2os/hN5EIoRHNdOX/hMxiI4DpEtvc4vlB7TgX+H93jWzb5 0c4FxIcwIeQQ1FaLerfGNoRH+Oy5Jv7+WLGjgbFdmUD1YsPgK2z7cd3JIUp7V2Vk 5qXJmMQv6t5nDBK266igdGY9OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP3BN+4 ymqF5hw0P8naK9ru6U+YMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALHdg/4tUyAw3thL4pOlJ1ECrKUxro7yej3CsYQmxRRSj9Zh/SigQXcvbuzL3 J/Y0AY4hWfykgbGjBCsR2FDQmExIct6oIGjefrFb6eBHWJ21omzhG0UnOUgjg4Dn tdkvVOVt4CfXPq0+kmCN96rNurLmRWTGhsi01KTVn8ZHX9KN8ngQcH9H+ArliSID y38Hz3Vmr/Nc24oxmUwe0nBvTkUIJLbs98UTHygeiez6AzzZJwXIfAsU81DdQqQz mtVTF2EJwU3NZAVrLPwJKB5ByRFSzPoLsVL4GaoTjZ2/FsmczBh6RVrhBhsH6VEX jv5gGCxfi4dsVh+jAOTSuIilGg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:03:15 2026 by rpki-client