$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft File: 0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json) Hash identifier: DKA4O2zfkiFR61OFi5iyzTfX4PRXMIVTB2CmygEII8M= Subject key identifier: EE:A8:9E:F7:8A:28:3F:04:8D:96:62:5D:79:5D:D2:BE:CE:D1:CA:C1 Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft Manifest number: 0198 Signing time: Fri 17 Apr 2026 04:01:38 +0000 Manifest this update: Fri 17 Apr 2026 04:01:37 +0000 Manifest next update: Fri 24 Apr 2026 04:01:37 +0000 Files and hashes: 1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: HyKIuwaBZEN3xYSw7XmQVo2+2EhqblROFV+KaxDm61U=) 2: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (hash: CHmfasvIFMB8cvnVplF2VU1d1UcvTiGGkiQVF3TlMl8=) 3: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: tbhcExPyMdasBxcbE73h7b5HlPi0div8uaJX4sMb5Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Apr 17 04:01:37 2026 GMT Not After : Apr 24 04:01:37 2026 GMT Subject: CN=69e1b0a1-7e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:76:5f:ae:c6:5f:dd:c7:6e:1e:19:22:10: 01:9e:1a:5c:4d:2a:4c:49:d6:0d:03:59:4b:28:d0: 08:54:db:f0:fe:a5:51:5a:cf:45:55:2f:47:e5:a0: 38:5f:f8:71:8a:92:86:1d:2a:12:a6:8f:cc:76:56: c5:15:7d:07:2e:e9:db:9f:69:d9:56:59:9c:0a:66: a1:49:ac:6f:a1:56:74:e0:a3:f1:90:7f:b8:7b:6e: 33:87:dc:b1:9d:d0:b7:49:51:f5:9e:c9:f0:8f:7c: 10:c8:da:d0:0c:3c:35:c9:27:8d:f1:f0:b6:50:20: d5:c1:33:df:cb:65:e5:0a:65:e1:1d:69:1a:f5:e2: 58:82:26:41:76:30:77:d4:93:0a:5a:75:ce:3d:46: 0a:80:fc:75:97:00:fb:2d:27:a5:22:b3:20:e5:01: 7b:9f:8d:ce:68:72:eb:c3:ef:31:d2:af:cf:30:2d: 6a:1c:4c:11:c0:75:de:8c:05:e1:20:8b:bf:78:41: ce:1e:35:d5:bb:64:f4:df:db:03:8e:53:5d:7c:1f: b9:28:78:8a:22:ab:b6:08:87:03:13:f3:fe:c5:5d: d1:3f:8a:0f:0e:97:dd:6c:d8:e8:cc:98:ac:dc:0e: d2:4f:2e:94:ca:ed:2c:55:fd:b2:82:df:90:59:7e: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A8:9E:F7:8A:28:3F:04:8D:96:62:5D:79:5D:D2:BE:CE:D1:CA:C1 X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:3c:36:84:1a:04:ed:05:9f:00:ae:b9:b1:77:07:d0:cc:f2: 62:44:fa:9a:3b:83:d0:18:f7:e0:77:22:c8:71:aa:9d:27:84: 58:97:39:5e:b0:58:82:62:25:40:7a:62:e4:02:dc:e7:c0:68: 6d:23:b6:4c:25:20:1b:49:a1:4b:73:32:90:d7:12:1d:78:68: 1a:bf:09:12:cb:eb:bf:6a:6c:3c:c9:eb:b0:44:01:9a:b1:8e: bd:b6:69:40:80:0b:fc:b4:14:dc:1e:40:ac:7d:71:d1:72:41: 0f:70:40:26:a6:51:0f:86:cb:3c:86:cd:21:bf:84:90:b5:08: 38:b3:d7:16:74:e3:67:36:70:bd:38:02:00:87:94:81:ad:29: 01:90:68:8f:9c:7e:23:27:1e:1e:7c:94:88:26:41:6a:49:6a: c8:f4:64:b0:2a:4a:9a:c5:16:5f:33:8b:a9:ef:22:9a:eb:b7: 53:94:13:b6:fd:de:22:9a:cf:4d:d3:52:88:dd:ec:6e:ae:c6: a9:09:1e:4f:b1:2a:7a:53:b7:18:1b:78:2a:7f:3a:17:2c:a6: 5d:34:e1:1a:1c:4b:06:35:4d:25:9b:36:c8:b6:9a:d6:64:c0: 63:57:ca:68:10:53:37:07:c0:bb:6d:0e:c4:32:04:00:6b:01: a9:46:17:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw MDBBQUU4QTQwHhcNMjYwNDE3MDQwMTM3WhcNMjYwNDI0MDQwMTM3WjAYMRYwFAYD VQQDEw02OWUxYjBhMS03ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO12X67GX93Hbh4ZIhABnhpcTSpMSdYNA1lLKNAIVNvw/qVRWs9FVS9H5aA4 X/hxipKGHSoSpo/MdlbFFX0HLunbn2nZVlmcCmahSaxvoVZ04KPxkH+4e24zh9yx ndC3SVH1nsnwj3wQyNrQDDw1ySeN8fC2UCDVwTPfy2XlCmXhHWka9eJYgiZBdjB3 1JMKWnXOPUYKgPx1lwD7LSelIrMg5QF7n43OaHLrw+8x0q/PMC1qHEwRwHXejAXh IIu/eEHOHjXVu2T039sDjlNdfB+5KHiKIqu2CIcDE/P+xV3RP4oPDpfdbNjozJis 3A7STy6Uyu0sVf2ygt+QWX4HCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6onveK KD8EjZZiXXld0r7O0crBMB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZB Tjh0VWt3V3pscEFBQ3E2S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwjw2hBoE7QWfAK65sXcH0MzyYkT6mjuD0Bj34HciyHGqnSeEWJc5XrBYgmIl QHpi5ALc58BobSO2TCUgG0mhS3MykNcSHXhoGr8JEsvrv2psPMnrsEQBmrGOvbZp QIAL/LQU3B5ArH1x0XJBD3BAJqZRD4bLPIbNIb+EkLUIOLPXFnTjZzZwvTgCAIeU ga0pAZBoj5x+IyceHnyUiCZBaklqyPRksCpKmsUWXzOLqe8imuu3U5QTtv3eIprP TdNSiN3sbq7GqQkeT7EqelO3GBt4Kn86FyymXTThGhxLBjVNJZs2yLaa1mTAY1fK aBBTNwfAu20OxDIEAGsBqUYXGw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:18:27 2026 by rpki-client