$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: z1TNQ+ZlcbQRnO6EYfWPVEUNCEh5gNcpy3ljjX329ZI= Subject key identifier: D3:B2:C2:78:96:47:96:09:10:E9:67:0C:AF:FB:96:CA:0D:91:D4:47 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 01A7 Signing time: Fri 17 Apr 2026 03:52:19 +0000 Manifest this update: Fri 17 Apr 2026 03:52:19 +0000 Manifest next update: Fri 24 Apr 2026 03:52:19 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: uUojQpW7J+zRhRACPt1GieFCqURkOB7WPlbv6L3NNn8=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Apr 17 03:52:19 2026 GMT Not After : Apr 24 03:52:19 2026 GMT Subject: CN=69e1ae73-4065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:c5:e6:82:e3:61:ad:0b:d1:28:3f:62:a6: 01:84:41:d2:cc:34:88:4d:80:b5:96:d4:9b:9c:2d: 19:b4:79:65:09:42:ae:af:24:3e:8d:80:74:8a:8b: 41:22:55:f6:b7:cd:55:bc:73:07:73:a0:b3:23:9d: a1:57:af:5c:0d:94:34:12:25:b8:a9:c9:9f:e1:9b: bc:b8:e9:ea:45:76:ca:69:ea:79:92:19:70:14:0e: 8f:26:c0:7d:d2:4d:90:e5:f3:34:40:8d:50:94:99: 51:00:52:c2:93:86:89:dd:4c:a6:f5:37:bb:67:e0: e8:3a:b5:6e:79:b5:e0:42:fe:58:e4:6f:8b:15:c1: 24:8e:03:7c:4b:af:8f:ea:35:f0:19:e8:c8:10:b4: d0:0b:59:74:ac:28:53:ea:9e:be:f2:1d:59:43:27: 15:26:c4:c6:45:a1:60:d6:57:2e:2e:b3:07:8c:47: 6c:a2:2d:78:c8:92:6b:bf:17:9e:3d:4b:82:0f:5d: 86:5f:be:a4:8d:88:4e:c9:6a:18:2a:e1:39:43:95: 66:84:34:28:02:64:ac:45:ce:5b:4b:99:2a:c0:cf: 63:0b:d5:40:b2:27:40:91:42:7b:9d:75:22:62:3a: 73:c8:11:1b:a4:9e:c5:48:c2:62:d3:3c:20:c3:94: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B2:C2:78:96:47:96:09:10:E9:67:0C:AF:FB:96:CA:0D:91:D4:47 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8c:e5:6a:2d:df:d4:26:59:8e:52:bf:7e:d2:9f:dd:43:8c: bd:f4:86:28:08:01:66:24:7e:a9:81:4d:fe:14:bc:21:de:ba: 31:17:2a:e3:3a:90:8a:0a:e5:e8:66:20:d7:75:f9:f3:eb:7a: 7d:44:3f:4f:1c:bd:86:00:1f:11:bc:3b:09:9a:55:e5:55:04: 1d:1d:4e:ac:43:5d:b2:e8:84:be:cd:57:6f:30:65:f7:a1:e3: 99:f2:46:5d:07:87:ba:56:e1:da:d5:33:59:4f:3d:c8:f4:03: 88:f8:81:c2:c6:81:6d:5d:a8:37:43:f3:9f:35:d9:f8:dc:fa: 7f:e0:90:c7:fb:81:4d:6a:ff:f3:b4:1f:73:1a:2f:4a:05:b1: 77:8d:91:09:a8:31:c2:1b:0b:33:bf:36:4a:5a:a3:7d:fd:0e: ae:98:04:fd:9a:d8:f2:64:a6:38:91:83:a5:c3:b7:ed:2d:b0: b8:73:a3:28:28:0c:4f:fb:5f:8a:c9:f0:a9:d1:43:04:7c:32: 5c:28:e8:e1:9b:30:6b:83:73:7a:3d:2e:a6:2d:62:4b:9d:30: c5:82:81:1f:65:92:5e:36:8c:89:9e:61:b2:2c:93:75:51:8d: f0:32:33:34:b6:93:c9:89:9e:cc:11:b8:fe:75:7b:31:6e:3e: b9:75:0c:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjYwNDE3MDM1MjE5WhcNMjYwNDI0MDM1MjE5WjAYMRYwFAYD VQQDEw02OWUxYWU3My00MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzszF5oLjYa0L0Sg/YqYBhEHSzDSITYC1ltSbnC0ZtHllCUKuryQ+jYB0iotB IlX2t81VvHMHc6CzI52hV69cDZQ0EiW4qcmf4Zu8uOnqRXbKaep5khlwFA6PJsB9 0k2Q5fM0QI1QlJlRAFLCk4aJ3Uym9Te7Z+DoOrVuebXgQv5Y5G+LFcEkjgN8S6+P 6jXwGejIELTQC1l0rChT6p6+8h1ZQycVJsTGRaFg1lcuLrMHjEdsoi14yJJrvxee PUuCD12GX76kjYhOyWoYKuE5Q5VmhDQoAmSsRc5bS5kqwM9jC9VAsidAkUJ7nXUi YjpzyBEbpJ7FSMJi0zwgw5QRkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOywniW R5YJEOlnDK/7lsoNkdRHMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJIzlai3f1CZZjlK/ftKf3UOMvfSGKAgBZiR+qYFN/hS8Id66MRcq4zqQigrl 6GYg13X58+t6fUQ/Txy9hgAfEbw7CZpV5VUEHR1OrENdsuiEvs1XbzBl96HjmfJG XQeHulbh2tUzWU89yPQDiPiBwsaBbV2oN0PznzXZ+Nz6f+CQx/uBTWr/87Qfcxov SgWxd42RCagxwhsLM782Slqjff0OrpgE/ZrY8mSmOJGDpcO37S2wuHOjKCgMT/tf isnwqdFDBHwyXCjo4Zswa4Nzej0upi1iS50wxYKBH2WSXjaMiZ5hsiyTdVGN8DIz NLaTyYmezBG4/nV7MW4+uXUMew== -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:11 2026 by rpki-client