$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: 7eJoD3SCkUkmiaRtV17114Ns4y4AOxLN2uShC10pS4U= Subject key identifier: EA:A4:9D:B1:0C:D5:DC:2C:0D:68:DD:9E:2C:46:24:24:F0:45:13:A8 Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 03A7 Signing time: Sun 19 Apr 2026 02:04:07 +0000 Manifest this update: Sun 19 Apr 2026 02:04:06 +0000 Manifest next update: Sun 26 Apr 2026 02:04:06 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: CAbvj+2T4w8SthRrFn/HL/UFMfzDfPi5PY9FhGpVcu4=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: BX1/cO9zvX79RzHkPoO/Bv1wfcEjsD1PNAuyBci9gOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Apr 19 02:04:06 2026 GMT Not After : Apr 26 02:04:06 2026 GMT Subject: CN=69e43817-3d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:83:b6:15:89:f8:6b:e9:f6:81:6e:25:df: c5:b5:e0:bd:18:b7:8c:f4:eb:85:e3:3f:22:b2:1f: d7:16:1f:3f:89:b0:b3:ee:fd:39:5e:53:a2:1a:be: ba:cc:4f:e1:82:7d:43:e8:b3:4b:2e:14:de:98:d8: f8:d8:2a:e3:06:7f:dc:2d:3a:63:24:b1:18:38:94: ae:aa:ff:2f:bd:96:d3:d2:f4:17:82:89:c5:a5:54: 4c:5c:94:b2:4e:a9:d4:8f:9d:1a:24:22:38:d2:71: a6:1c:7f:0a:54:87:ae:11:62:48:93:be:84:b9:2f: 4a:80:4c:19:b9:05:c6:80:c0:ed:53:08:16:bf:25: ab:9e:2c:bf:dc:38:d2:40:3a:96:83:92:43:be:40: 69:ce:8c:4a:65:28:d4:ac:9c:e3:f2:bf:5c:9d:6e: 99:7b:fa:73:d6:aa:0a:8c:58:fe:53:41:9c:d7:b2: be:12:9b:ad:3b:1a:71:b6:0f:e6:e4:ca:fd:74:76: 1a:26:ce:ca:bd:66:1a:be:71:39:76:7b:5a:8b:8a: 26:ba:89:a5:57:10:be:19:39:c6:f8:9c:a7:df:fb: 64:5a:34:d2:27:69:55:90:fe:dd:39:99:90:bc:8c: 25:e5:a9:40:02:f5:d6:e1:f1:e3:3c:c8:9f:0c:1d: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A4:9D:B1:0C:D5:DC:2C:0D:68:DD:9E:2C:46:24:24:F0:45:13:A8 X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1d:65:cc:74:f4:2b:c2:5e:d0:b4:18:9d:d2:50:53:28:ee: 58:ba:a4:7a:1e:47:40:3f:e2:9b:28:fa:32:2b:38:98:32:38: 58:c4:a3:d6:9d:f0:fc:b4:39:9d:c1:52:38:4b:0c:89:72:70: b9:13:12:e4:85:22:fa:ab:83:4b:38:e9:2e:c1:1b:fd:07:66: 4b:97:b2:ab:fe:a4:5f:e7:37:f2:b6:68:f4:2e:63:71:46:d8: 52:ff:af:2a:25:6d:07:90:81:97:5d:23:01:42:43:f5:e1:02: 84:9f:9a:6a:47:1e:5c:dc:a6:e6:29:21:ae:ae:2d:6c:51:5d: fe:8a:18:b5:2c:49:21:6c:18:ff:5b:3b:94:a8:77:12:f5:d3: db:e6:51:e9:a7:a4:bc:44:84:3c:fb:de:55:48:db:80:dc:86: b8:84:76:3d:b1:19:82:73:ce:ac:c2:51:f6:05:35:c8:6c:a7: 4b:d2:f2:b3:ea:7e:f1:6f:f0:ac:ee:4d:ab:e2:d1:81:ee:51: a5:06:ea:a2:ce:cf:6b:2b:b7:57:7a:39:43:32:fc:fe:a6:60: 51:fb:a1:cf:32:89:04:20:4d:d4:02:43:d7:a1:81:aa:3d:2a: c9:ab:d4:c6:e5:38:7c:e0:d4:38:88:2d:4d:5d:5b:ad:0d:c6: 92:69:cb:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjYwNDE5MDIwNDA2WhcNMjYwNDI2MDIwNDA2WjAYMRYwFAYD VQQDEw02OWU0MzgxNy0zZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt56DthWJ+Gvp9oFuJd/FteC9GLeM9OuF4z8ish/XFh8/ibCz7v05XlOiGr66 zE/hgn1D6LNLLhTemNj42CrjBn/cLTpjJLEYOJSuqv8vvZbT0vQXgonFpVRMXJSy TqnUj50aJCI40nGmHH8KVIeuEWJIk76EuS9KgEwZuQXGgMDtUwgWvyWrniy/3DjS QDqWg5JDvkBpzoxKZSjUrJzj8r9cnW6Ze/pz1qoKjFj+U0Gc17K+EputOxpxtg/m 5Mr9dHYaJs7KvWYavnE5dntai4omuomlVxC+GTnG+Jyn3/tkWjTSJ2lVkP7dOZmQ vIwl5alAAvXW4fHjPMifDB0PXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqknbEM 1dwsDWjdnixGJCTwRROoMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqB1lzHT0K8Je0LQYndJQUyjuWLqkeh5HQD/imyj6Mis4mDI4WMSj1p3w/LQ5 ncFSOEsMiXJwuRMS5IUi+quDSzjpLsEb/QdmS5eyq/6kX+c38rZo9C5jcUbYUv+v KiVtB5CBl10jAUJD9eEChJ+aakceXNym5ikhrq4tbFFd/ooYtSxJIWwY/1s7lKh3 EvXT2+ZR6aekvESEPPveVUjbgNyGuIR2PbEZgnPOrMJR9gU1yGynS9Lys+p+8W/w rO5Nq+LRge5RpQbqos7Payu3V3o5QzL8/qZgUfuhzzKJBCBN1AJD16GBqj0qyavU xuU4fODUOIgtTV1brQ3GkmnLmg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:19:19 2026 by rpki-client