$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft File: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json) Hash identifier: f7IAUbKJg/zDUq3+PgYjszk7fGqWzj/M53ti28oWS9I= Subject key identifier: 63:F3:0D:A0:A7:28:50:DC:70:ED:3A:2D:A1:BC:4E:5F:8D:3E:5E:03 Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 Certificate issuer: /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft Manifest number: 019D Signing time: Fri 17 Apr 2026 03:59:02 +0000 Manifest this update: Fri 17 Apr 2026 03:59:01 +0000 Manifest next update: Fri 24 Apr 2026 03:59:01 +0000 Files and hashes: 1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: H+DX/K8wjRK9X3MB0aMpLReYsGD4TD4kWjKRvD3xnrY=) 2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: k3TfFva0pazkCIRXdBLI4mn/25rKAlL7flbXoW+92L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Validity Not Before: Apr 17 03:59:01 2026 GMT Not After : Apr 24 03:59:01 2026 GMT Subject: CN=69e1b006-4429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:55:05:31:85:a4:62:f6:db:06:46:a7:7f: b5:bf:09:b2:8e:69:22:9f:9b:94:3a:41:56:3a:c3: 5e:53:62:cd:d2:4d:32:4d:84:cd:0a:78:74:63:0e: 8d:7b:18:44:5e:9d:a1:ec:c9:fa:c8:11:1d:f5:ed: 84:ba:a9:99:8e:84:93:9a:a5:2d:fb:35:70:62:6d: 05:9d:b7:53:28:81:a0:9f:13:b8:46:fc:2b:b0:47: f8:e7:35:da:09:23:4f:cd:ce:d0:9b:ac:2a:33:7f: f3:37:9e:ea:17:d7:72:c9:06:3e:65:5e:9b:20:66: f5:a9:38:69:f8:25:82:f8:34:29:68:d9:06:21:e3: 04:26:8d:34:e5:5f:69:e1:09:cd:b2:63:b2:58:b7: fd:0b:2c:33:10:e0:a2:22:52:62:4d:dd:db:cc:02: 51:76:a5:77:d5:2f:d7:a3:4a:9e:52:b0:e8:5a:09: 2e:3a:9e:4b:40:cb:17:ec:f7:67:a5:73:dc:1b:68: e4:76:66:46:f9:6c:63:5f:1c:d3:27:08:dc:b0:74: ab:7e:85:6a:66:0c:dc:ea:02:2e:f4:cc:26:d4:47: bc:c2:b3:db:fe:2f:72:b6:5c:7a:25:9b:24:09:4e: 86:9b:ed:94:7d:27:f7:b8:18:de:77:b0:00:0e:01: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:0D:A0:A7:28:50:DC:70:ED:3A:2D:A1:BC:4E:5F:8D:3E:5E:03 X509v3 Authority Key Identifier: keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:33:97:e7:5f:ee:3f:70:c0:fe:2e:98:b1:50:43:da:d2:2f: 3a:49:28:11:b2:b0:aa:6c:61:99:41:70:ff:f8:54:c2:5b:ac: ba:c7:2e:e3:41:ff:d3:81:92:d2:9e:ec:32:b6:9b:a7:c1:a9: 9d:14:4f:6a:3d:e9:9d:11:98:79:41:68:31:35:b1:95:a6:ba: 7d:96:7d:a8:d0:e4:90:8c:ed:ef:50:a5:87:c2:ad:b4:50:b4: b4:c0:21:54:f4:ba:ec:38:01:0b:2e:c3:ee:e2:8c:b2:32:e1: 49:3b:53:94:c3:69:1b:aa:c7:99:89:15:2d:65:2e:95:65:6c: b3:b8:74:86:8d:5b:f7:1d:3d:e3:95:32:0b:3f:50:7d:c3:d1: 72:08:ba:ff:5b:7b:59:d0:11:01:f7:14:80:fc:2a:b6:27:13: f1:9a:cc:5d:80:6e:d1:77:75:d7:27:3d:a8:a9:b1:55:48:3f: b9:5b:ed:a7:9b:e0:ea:1a:b6:e0:fe:c7:59:96:69:e5:44:1b: 2a:39:ef:93:ee:86:d5:91:03:f2:9f:18:63:54:26:99:c8:ae: 9f:39:aa:96:8c:be:7a:a0:13:f5:2a:b8:b8:e2:61:37:66:a3: a5:59:4b:ac:8c:36:86:2a:b9:29:71:1a:7f:5d:e2:67:07:9c: 82:8a:75:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDcwRTg4NTU3QjBDMDgyQzlCMDZFQ0Y1OUI4RjI4QTc3 MDNBNjM4MDEwHhcNMjYwNDE3MDM1OTAxWhcNMjYwNDI0MDM1OTAxWjAYMRYwFAYD VQQDEw02OWUxYjAwNi00NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf1VBTGFpGL22wZGp3+1vwmyjmkin5uUOkFWOsNeU2LN0k0yTYTNCnh0Yw6N exhEXp2h7Mn6yBEd9e2EuqmZjoSTmqUt+zVwYm0FnbdTKIGgnxO4RvwrsEf45zXa CSNPzc7Qm6wqM3/zN57qF9dyyQY+ZV6bIGb1qThp+CWC+DQpaNkGIeMEJo005V9p 4QnNsmOyWLf9CywzEOCiIlJiTd3bzAJRdqV31S/Xo0qeUrDoWgkuOp5LQMsX7Pdn pXPcG2jkdmZG+WxjXxzTJwjcsHSrfoVqZgzc6gIu9Mwm1Ee8wrPb/i9ytlx6JZsk CU6Gm+2UfSf3uBjed7AADgGOWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPzDaCn KFDccO06LaG8Tl+NPl4DMB8GA1UdIwQYMBaAFHDohVewwILJsG7PWbjyincDpjgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82MjMxQTAyRUM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdzbXdiczladVBLS2R3T21P QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NPaUZWN0RBZ3Ntd2JzOVp1UEtLZHdPbU9BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82MjMxQTAyRUM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdz bXdiczladVBLS2R3T21PQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARTOX51/uP3DA/i6YsVBD2tIvOkkoEbKwqmxhmUFw//hUwlususcu40H/04GS 0p7sMrabp8GpnRRPaj3pnRGYeUFoMTWxlaa6fZZ9qNDkkIzt71Clh8KttFC0tMAh VPS67DgBCy7D7uKMsjLhSTtTlMNpG6rHmYkVLWUulWVss7h0ho1b9x0945UyCz9Q fcPRcgi6/1t7WdARAfcUgPwqticT8ZrMXYBu0Xd11yc9qKmxVUg/uVvtp5vg6hq2 4P7HWZZp5UQbKjnvk+6G1ZED8p8YY1Qmmciunzmqloy+eqAT9Sq4uOJhN2ajpVlL rIw2hiq5KXEaf13iZwecgop18Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:42:53 2026 by rpki-client