$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: NPCqR8LRuZ1UydUQCYSB/unn11/mN7lJLh1QKkrBKRU= Subject key identifier: B6:A5:D1:79:8B:BC:9D:56:33:F0:DA:94:AE:76:4C:3D:1B:95:AD:6A Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 07:31:02 +0000 Manifest this update: Fri 17 Apr 2026 07:31:02 +0000 Manifest next update: Fri 24 Apr 2026 07:31:02 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: xTn1vDc37fNYKSv+uNz30pWeZuH7zQ+KF9eBJWgX3bo=) 2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI=) 3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: N6CBwqrOqMiPVhe2XON5ueLRVOAkc+Y5PryJUTw3C2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Apr 17 07:31:02 2026 GMT Not After : Apr 24 07:31:02 2026 GMT Subject: CN=69e1e1b6-65a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:74:ba:9f:89:32:9a:40:60:cb:73:e9:16: 14:06:30:71:49:84:8b:32:4c:51:16:1f:9c:37:7e: 23:43:a1:6e:c2:14:72:70:2e:d5:66:ae:91:86:cc: 45:12:7b:58:13:9e:67:1d:8a:71:a6:1d:7c:10:ec: 73:a3:de:a3:24:99:9c:6c:f3:79:a4:1c:32:e2:be: f2:c2:46:3b:43:0f:ca:65:28:99:a3:a3:19:b6:37: 67:d1:2a:7f:a0:d2:9a:9f:f9:11:de:76:9c:b4:a5: 57:3a:7f:23:cf:7c:58:e7:16:3f:0b:98:12:25:f1: 94:f7:e5:ec:dd:4a:89:b9:b5:2f:db:17:0d:b7:26: dc:e2:65:0a:64:ce:5e:7c:77:47:41:77:48:48:b5: d9:cf:31:a8:e5:cf:72:ab:45:a4:81:dd:b3:c9:4d: 19:20:1e:55:40:fe:30:88:e9:ad:88:6b:36:6d:26: 19:31:d2:d0:42:5d:01:09:88:64:ed:78:72:66:09: e1:00:d0:d3:f0:27:e3:a1:12:8a:a0:4e:20:f5:a8: f2:ad:14:e8:cd:34:fc:d6:11:28:af:d5:96:d7:4a: fb:6f:a4:b1:a0:e2:83:ca:6a:c5:be:15:5a:3f:2e: 65:e1:64:ab:da:a8:37:ba:fe:54:f7:27:d3:af:5e: 87:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A5:D1:79:8B:BC:9D:56:33:F0:DA:94:AE:76:4C:3D:1B:95:AD:6A X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0e:7c:b1:7a:38:ed:0a:97:cf:47:fb:6a:c3:a7:05:89:15: c2:bd:b3:04:c0:0e:6d:d3:5b:e7:cf:e4:cd:1e:67:65:79:b1: a7:f1:04:e7:f0:fc:a7:11:68:17:50:1c:a0:14:8c:06:b9:4f: 1f:ff:1b:12:4e:34:98:19:7a:e2:4c:8d:6d:67:18:c3:84:37: 3e:5a:a9:71:b5:37:99:dd:ec:40:b9:ee:a9:bf:b8:69:b0:37: 3a:46:37:60:d5:5d:fc:ea:f3:05:78:4a:28:81:a8:c7:7c:bc: 0f:35:99:4b:f0:90:48:c6:a6:07:45:82:3b:cc:01:91:9e:b0: 99:3c:23:4b:93:21:56:56:4f:7d:3a:d0:82:a2:96:01:6f:c0: e8:26:b1:bf:07:b1:d3:60:3d:07:60:61:ff:e6:80:05:51:2a: f8:ef:7c:0e:b4:f6:64:a0:18:67:28:09:fb:e2:b2:05:b4:eb: 84:09:2a:2d:36:82:be:bc:28:d9:5e:d0:8d:5d:0b:ef:23:16: 08:23:65:03:ba:af:da:af:52:e8:10:b9:c4:3e:fd:67:f8:4f: 27:70:4d:93:91:e7:d2:4c:29:b4:e1:f0:55:50:f5:67:cd:a6: f7:af:55:8a:37:d1:5a:9c:19:f0:a1:ee:99:78:54:d3:7c:89: 5f:d4:37:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4QTAxMTAvBgNVBAUTKEFGQkFBMTUxNkU5RTE3RjI0Q0Y5MTQ1QjhDN0NENEJB ODFBNTdBNDAwHhcNMjYwNDE3MDczMTAyWhcNMjYwNDI0MDczMTAyWjAYMRYwFAYD VQQDEw02OWUxZTFiNi02NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlA50up+JMppAYMtz6RYUBjBxSYSLMkxRFh+cN34jQ6FuwhRycC7VZq6RhsxF EntYE55nHYpxph18EOxzo96jJJmcbPN5pBwy4r7ywkY7Qw/KZSiZo6MZtjdn0Sp/ oNKan/kR3nactKVXOn8jz3xY5xY/C5gSJfGU9+Xs3UqJubUv2xcNtybc4mUKZM5e fHdHQXdISLXZzzGo5c9yq0Wkgd2zyU0ZIB5VQP4wiOmtiGs2bSYZMdLQQl0BCYhk 7XhyZgnhANDT8CfjoRKKoE4g9ajyrRTozTT81hEor9WW10r7b6SxoOKDymrFvhVa Py5l4WSr2qg3uv5U9yfTr16H6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLal0XmL vJ1WM/DalK52TD0bla1qMB8GA1UdIwQYMBaAFK+6oVFunhfyTPkUW4x81LqBpXpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhBMC9CMjA2OENGODhF MjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZfSk0tUlJiakh6VXVvR2xl a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi9yN3FoVVc2ZUZf Sk0tUlJiakh6VXVvR2xla0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMw58sXo47QqXz0f7asOnBYkVwr2zBMAObdNb58/kzR5nZXmxp/EE5/D8pxFo F1AcoBSMBrlPH/8bEk40mBl64kyNbWcYw4Q3PlqpcbU3md3sQLnuqb+4abA3OkY3 YNVd/OrzBXhKKIGox3y8DzWZS/CQSMamB0WCO8wBkZ6wmTwjS5MhVlZPfTrQgqKW AW/A6Caxvwex02A9B2Bh/+aABVEq+O98DrT2ZKAYZygJ++KyBbTrhAkqLTaCvrwo 2V7QjV0L7yMWCCNlA7qv2q9S6BC5xD79Z/hPJ3BNk5Hn0kwptOHwVVD1Z82m969V ijfRWpwZ8KHumXhU03yJX9Q3RQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:16:34 2026 by rpki-client