$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: bV6IUVGT/QjmRucoO6nWmd5Nbfw4IsMPISeprzocpW4= Subject key identifier: D7:8E:6A:1E:F9:EF:53:ED:05:46:BC:84:5D:4B:A4:E9:D3:41:97:CC Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 0674 Signing time: Thu 16 Apr 2026 22:32:49 +0000 Manifest this update: Thu 16 Apr 2026 22:32:48 +0000 Manifest next update: Thu 23 Apr 2026 22:32:48 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: ssPxKzzTzr+SxrKcqhdAEdcT8531/TTxZ8LPO3169Ag=) 2: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: pdws3t0lZJ1KRtlaVi7T3cqSeY6vMdRKeuikmdwYWhg=) 3: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: vr8P+P39aT/1jKl6iJb1sUFbpi5nliJVWaBLeOW46aY=) 4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: AcX/Q7kCXs6/lVr70u8Z/hkgVWbgvWKfVvGr/7kslLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Apr 16 22:32:48 2026 GMT Not After : Apr 23 22:32:48 2026 GMT Subject: CN=69e16390-54c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:7e:57:8d:0a:b1:43:a5:94:c7:c0:4c:07: 11:70:ea:17:e4:0b:f2:bf:10:0c:f5:2e:9e:48:aa: 6a:e2:ac:b2:fd:c1:63:d8:85:71:39:cf:5a:17:49: db:fb:eb:9b:c8:35:fe:e6:3a:67:d4:79:1c:a0:a0: c2:30:ad:95:16:08:6d:e2:ca:a4:89:15:ff:5f:4e: ee:41:f4:62:49:ab:60:cb:d4:10:9f:9d:e8:be:08: c0:2f:98:eb:f6:c0:db:06:58:28:af:18:b6:41:c5: e1:05:b8:8a:9f:1b:7b:bb:fb:40:c0:69:49:16:1d: 2f:f2:60:34:82:a7:49:be:0f:f8:1f:25:b2:f1:a1: 5b:60:92:ca:f9:22:4a:45:c1:d6:03:30:a0:a6:a7: 9e:e8:89:1b:e4:02:f0:e8:08:78:29:45:d5:36:6d: 61:5e:89:65:c2:69:18:8e:e3:17:79:72:ad:f4:b8: c7:c8:72:15:2b:91:26:3c:2b:c9:2e:fd:3a:71:20: 64:f4:9b:32:2b:85:e0:a2:d8:73:02:02:0d:54:f0: 2d:14:f7:f4:3f:bd:06:5d:9e:03:e7:d4:c9:e7:2b: 82:b3:0d:bb:79:d4:db:5b:f3:42:d7:99:b8:0f:4c: b1:26:bd:8a:c4:77:47:a3:42:e9:72:d2:cb:8a:ba: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8E:6A:1E:F9:EF:53:ED:05:46:BC:84:5D:4B:A4:E9:D3:41:97:CC X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:ac:22:5b:e8:fe:22:4b:74:6f:f1:30:19:dc:d1:d3:a8: a8:f9:68:1d:f1:30:ef:9b:d2:bd:6c:a7:c7:c1:69:f7:37:b9: 62:8a:4e:bf:c8:5e:59:b7:73:74:d5:48:c0:60:7b:56:da:71: ed:35:37:86:2a:cc:f2:70:0b:be:a8:5c:71:62:00:cd:c3:ee: 9e:ac:4d:19:32:9a:18:81:81:0f:5d:ea:be:55:78:60:85:bd: 9b:51:5e:0d:04:65:b8:3b:37:2f:8b:a5:37:8a:3e:e7:1c:cb: 66:60:8c:89:bc:76:8f:a4:a1:0e:f7:70:30:cc:b4:4c:be:b9: bc:28:91:09:40:d0:ed:26:17:4f:a4:e1:96:90:19:d6:2d:a9: be:62:65:72:8a:1d:c1:18:0f:74:d1:a0:c4:98:dd:cb:0f:15: ef:03:c9:7f:86:28:aa:d2:8e:b9:65:34:77:7a:eb:90:08:f6: e0:42:02:a7:69:15:31:3f:0b:ab:ff:e1:d1:44:01:69:83:81: df:23:46:7c:25:d6:3a:23:41:4d:81:e0:47:58:de:6a:69:48: 3b:c1:0a:8a:35:26:01:79:26:53:f7:30:71:c5:65:3e:ea:90: c9:69:34:90:ba:9b:19:32:b0:c3:65:26:ce:74:dd:41:4b:9e: a4:9c:d3:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwNDE2MjIzMjQ4WhcNMjYwNDIzMjIzMjQ4WjAYMRYwFAYD VQQDEw02OWUxNjM5MC01NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBt+V40KsUOllMfATAcRcOoX5AvyvxAM9S6eSKpq4qyy/cFj2IVxOc9aF0nb ++ubyDX+5jpn1HkcoKDCMK2VFght4sqkiRX/X07uQfRiSatgy9QQn53ovgjAL5jr 9sDbBlgorxi2QcXhBbiKnxt7u/tAwGlJFh0v8mA0gqdJvg/4HyWy8aFbYJLK+SJK RcHWAzCgpqee6Ikb5ALw6Ah4KUXVNm1hXollwmkYjuMXeXKt9LjHyHIVK5EmPCvJ Lv06cSBk9JsyK4XgothzAgINVPAtFPf0P70GXZ4D59TJ5yuCsw27edTbW/NC15m4 D0yxJr2KxHdHo0LpctLLirpEIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeOah75 71PtBUa8hF1LpOnTQZfMMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmm2sIlvo/iJLdG/xMBnc0dOoqPloHfEw75vSvWynx8Fp9ze5YopOv8heWbdz dNVIwGB7Vtpx7TU3hirM8nALvqhccWIAzcPunqxNGTKaGIGBD13qvlV4YIW9m1Fe DQRluDs3L4ulN4o+5xzLZmCMibx2j6ShDvdwMMy0TL65vCiRCUDQ7SYXT6ThlpAZ 1i2pvmJlcoodwRgPdNGgxJjdyw8V7wPJf4YoqtKOuWU0d3rrkAj24EICp2kVMT8L q//h0UQBaYOB3yNGfCXWOiNBTYHgR1jeamlIO8EKijUmAXkmU/cwccVlPuqQyWk0 kLqbGTKww2UmznTdQUuepJzTTQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:12:59 2026 by rpki-client