$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: 1OiZVdyRAnlYCSRIZw2gchNnDP5zSNC1kaRjZh4r9jM= Subject key identifier: B3:5C:FC:BB:CC:AD:13:2E:4B:2B:CA:9A:02:C8:80:D4:5D:17:29:87 Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 07B6 Signing time: Thu 16 Apr 2026 21:20:45 +0000 Manifest this update: Thu 16 Apr 2026 21:20:44 +0000 Manifest next update: Thu 23 Apr 2026 21:20:44 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: vAOdfW5zZlCzj5igzTaqzSZbzqvWHcp3Q01Wbgt4yis=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: l3JeAQ3S0YOaZPvLg1VADUfgUPauzx1iQ/ocLZ5FTmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: Apr 16 21:20:44 2026 GMT Not After : Apr 23 21:20:44 2026 GMT Subject: CN=69e152ad-2203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:50:c0:b0:1d:1c:75:55:be:0a:98:e0:5a: d8:1b:79:9a:bf:fd:93:d0:91:0f:73:54:f5:ab:a9: e7:de:47:ac:2e:b5:dc:f7:a1:5e:49:ff:63:09:ee: 30:40:89:dd:6b:8f:8a:25:c3:5b:d6:8c:d2:f1:f5: fe:d3:bc:6c:5c:23:ee:98:68:37:e5:4a:77:4b:6f: a5:ba:b6:5d:4e:80:ab:6c:fa:5d:4b:68:20:7b:0e: 09:2f:f8:14:76:38:09:61:19:15:92:ab:fa:1b:f7: 96:47:4a:e7:74:24:f4:3d:d2:eb:33:7a:b8:5a:c2: a9:82:d3:f2:bb:b7:f9:d9:8d:98:9c:c1:b8:95:42: fc:da:29:6e:b0:5c:95:be:b0:37:9b:b2:13:f4:9a: 2a:b8:44:d0:5d:5f:f2:09:a2:4e:fd:35:d9:c3:5c: 7e:7f:c7:1b:d7:d3:40:65:8f:72:bb:2c:0e:f2:65: c0:c0:30:21:0b:3e:13:08:39:e7:44:77:f9:2d:f5: 51:a5:c3:1f:97:3c:0d:fc:82:23:c0:c4:ca:e5:bb: 31:3e:0a:59:a3:a3:3f:5d:8d:b0:f9:67:e4:2e:23: 23:6d:da:6b:fe:ff:0d:0d:52:d3:e3:ed:9d:cc:ae: a6:44:60:27:70:6a:97:2a:75:6b:c9:80:67:4a:5b: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:FC:BB:CC:AD:13:2E:4B:2B:CA:9A:02:C8:80:D4:5D:17:29:87 X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:24:12:4c:e4:d1:76:2b:23:f3:35:2b:d0:2b:b2:be:db:39: 35:75:49:21:37:b8:db:1b:58:c8:30:7f:77:20:01:94:37:24: 2c:3d:60:d4:7c:cc:7f:a0:09:40:15:c6:c2:0e:20:75:1e:ca: 2f:0b:63:9c:63:89:ef:ee:f0:e3:e8:17:62:24:02:fb:4c:75: 0b:ea:38:ca:75:18:c9:59:19:5a:9e:34:17:f2:61:2c:7a:20: 32:b9:fb:27:ac:b0:a8:eb:eb:82:79:90:04:14:e2:ca:69:01: 4b:12:31:0a:1d:91:e7:09:08:ca:d9:b4:e6:60:43:48:6c:25: 3c:55:9b:5f:26:36:99:38:37:07:25:8f:ef:9c:50:d7:8b:ee: e3:4f:e3:57:f9:a6:32:9e:cd:67:f3:a7:62:a7:b6:ff:45:a9: f4:9c:1f:5d:5e:5b:62:f7:b8:63:e2:8d:d5:49:cf:b3:89:b4: 61:52:ec:6c:55:05:c9:2e:af:7b:ae:85:2b:a3:e0:58:b1:ba: 92:57:27:ac:4f:75:13:44:dc:87:76:5b:98:66:ad:e9:e7:38: 0b:9f:b1:b9:be:2d:1d:15:9e:0c:76:3b:3c:bc:75:d1:91:79: f0:58:37:f6:e7:48:ce:16:52:71:ca:6f:3f:fb:3b:ae:78:7e: 36:4b:b5:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjYwNDE2MjEyMDQ0WhcNMjYwNDIzMjEyMDQ0WjAYMRYwFAYD VQQDEw02OWUxNTJhZC0yMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpVQwLAdHHVVvgqY4FrYG3mav/2T0JEPc1T1q6nn3kesLrXc96FeSf9jCe4w QInda4+KJcNb1ozS8fX+07xsXCPumGg35Up3S2+lurZdToCrbPpdS2ggew4JL/gU djgJYRkVkqv6G/eWR0rndCT0PdLrM3q4WsKpgtPyu7f52Y2YnMG4lUL82ilusFyV vrA3m7IT9JoquETQXV/yCaJO/TXZw1x+f8cb19NAZY9yuywO8mXAwDAhCz4TCDnn RHf5LfVRpcMflzwN/IIjwMTK5bsxPgpZo6M/XY2w+WfkLiMjbdpr/v8NDVLT4+2d zK6mRGAncGqXKnVryYBnSlu3aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNc/LvM rRMuSyvKmgLIgNRdFymHMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfSQSTOTRdisj8zUr0Cuyvts5NXVJITe42xtYyDB/dyABlDckLD1g1HzMf6AJ QBXGwg4gdR7KLwtjnGOJ7+7w4+gXYiQC+0x1C+o4ynUYyVkZWp40F/JhLHogMrn7 J6ywqOvrgnmQBBTiymkBSxIxCh2R5wkIytm05mBDSGwlPFWbXyY2mTg3ByWP75xQ 14vu40/jV/mmMp7NZ/OnYqe2/0Wp9JwfXV5bYve4Y+KN1UnPs4m0YVLsbFUFyS6v e66FK6PgWLG6klcnrE91E0Tch3ZbmGat6ec4C5+xub4tHRWeDHY7PLx10ZF58Fg3 9udIzhZSccpvP/s7rnh+Nku1JA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:30:42 2026 by rpki-client