$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: KpXVTSVoC1ZZpaTkODC6Fyet+qGErddFgfpsAXBIsrU= Subject key identifier: E0:F9:F5:F5:6F:79:BF:84:B2:07:B2:28:E2:94:A4:5B:60:EE:90:31 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 0921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 0917 Signing time: Thu 16 Apr 2026 20:10:50 +0000 Manifest this update: Thu 16 Apr 2026 20:10:50 +0000 Manifest next update: Thu 23 Apr 2026 20:10:50 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: Wu5/A72t7kUnQjIWm+/1AQbbTJ+tlDFhndFdG+woAGo=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: A+vGSKzHOEr6WQMmXCqrBXQC5qCQ1zLl1m8jTRo1SXQ=) 3: 1FB57044282911F18EC27654C4833773.roa (hash: cIC3mh9+HScM982pQxZELzTgJLhXi90s7mwohLJpYHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Apr 16 20:10:50 2026 GMT Not After : Apr 23 20:10:50 2026 GMT Subject: CN=69e1424a-6be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:c7:d9:ba:9f:f6:06:21:3f:be:54:96:7a: 6d:42:e6:5e:d5:46:9b:63:49:1c:2d:58:62:8a:8f: 79:88:a8:91:a6:fd:ed:63:35:c7:8a:e0:68:36:5f: d1:6c:a0:05:b9:8f:c2:2c:83:7a:74:da:76:a6:5f: ee:9f:e4:2f:d9:31:fa:e2:5e:07:f7:09:f8:5c:fc: be:6a:89:14:49:45:67:b7:3b:4e:a1:66:9a:a0:c4: 0e:7b:9f:a2:75:a9:98:6b:e1:f8:6e:8e:a3:8b:6d: ce:73:b5:60:93:0e:be:95:b7:4f:c5:75:02:e0:3c: ed:ba:2b:c5:be:73:03:74:42:01:90:99:f5:33:e0: a1:9a:8b:62:be:4e:e6:98:4d:5c:a7:ab:72:63:6f: 25:d6:30:45:29:8d:f2:c4:86:4b:f3:87:43:cb:db: 74:e7:c1:25:cb:17:74:68:82:c9:df:37:32:2d:02: 37:9c:2c:77:1e:e5:4f:8f:b1:38:33:5f:ea:22:c7: 55:3f:b6:ba:08:ab:f8:dc:d5:c1:80:5c:88:19:b7: 29:cc:b2:d6:e4:67:33:47:44:55:59:b6:a8:48:34: 47:55:e9:a1:bd:67:75:c6:a4:f9:2b:01:9f:f8:64: db:3c:88:74:88:05:7d:8f:fd:16:9a:5a:ab:33:46: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F9:F5:F5:6F:79:BF:84:B2:07:B2:28:E2:94:A4:5B:60:EE:90:31 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:65:73:49:c9:28:3c:79:ed:2c:75:48:70:d4:eb:41:0e:f1: f0:80:67:25:e7:9f:f7:53:03:c4:c7:b3:b7:bb:45:47:1f:ef: 4f:dc:75:6d:fa:60:c4:ba:dd:64:92:d9:1c:15:0d:c5:b9:91: d4:5a:57:d4:33:ce:32:42:06:cd:7a:63:69:51:2e:51:5b:1d: aa:69:e0:56:0e:25:50:7a:6a:bc:bd:d9:16:cc:17:a1:8a:72: 1d:d3:00:5d:5a:9a:1e:ac:94:58:fd:45:05:3f:da:5c:31:48: e3:9a:78:52:c3:0f:f2:a3:2f:ad:ca:52:c0:45:1f:ff:4a:69: 66:dc:d9:1e:1f:c9:67:e5:e6:67:f0:76:45:41:b7:66:d5:df: 23:5a:34:37:e2:8f:fe:97:85:cd:82:59:0c:1a:1a:1b:cf:88: 4c:a7:ca:b9:ea:c2:50:d7:b9:ff:1c:3c:b3:45:18:11:8f:80: 65:02:e4:f5:b9:1a:5b:fd:e5:a8:bb:1d:30:3e:ae:ab:f1:ec: c5:53:b4:84:ea:c8:6a:0b:b5:56:d8:44:3c:75:b8:cd:8c:88: 97:cf:70:28:df:42:e4:d9:92:89:3b:21:71:00:05:39:0f:d4: 8c:8f:64:ec:a3:a5:2a:91:4d:6e:c8:13:c0:8f:0d:0d:2e:6a: 8d:35:c8:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjYwNDE2MjAxMDUwWhcNMjYwNDIzMjAxMDUwWjAYMRYwFAYD VQQDEw02OWUxNDI0YS02YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G3H2bqf9gYhP75UlnptQuZe1UabY0kcLVhiio95iKiRpv3tYzXHiuBoNl/R bKAFuY/CLIN6dNp2pl/un+Qv2TH64l4H9wn4XPy+aokUSUVntztOoWaaoMQOe5+i damYa+H4bo6ji23Oc7Vgkw6+lbdPxXUC4DztuivFvnMDdEIBkJn1M+Chmotivk7m mE1cp6tyY28l1jBFKY3yxIZL84dDy9t058Elyxd0aILJ3zcyLQI3nCx3HuVPj7E4 M1/qIsdVP7a6CKv43NXBgFyIGbcpzLLW5GczR0RVWbaoSDRHVemhvWd1xqT5KwGf +GTbPIh0iAV9j/0WmlqrM0YaSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOD59fVv eb+EsgeyKOKUpFtg7pAxMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArWVzSckoPHntLHVIcNTrQQ7x8IBnJeef91MDxMezt7tFRx/vT9x1bfpgxLrd ZJLZHBUNxbmR1FpX1DPOMkIGzXpjaVEuUVsdqmngVg4lUHpqvL3ZFswXoYpyHdMA XVqaHqyUWP1FBT/aXDFI45p4UsMP8qMvrcpSwEUf/0ppZtzZHh/JZ+XmZ/B2RUG3 ZtXfI1o0N+KP/peFzYJZDBoaG8+ITKfKuerCUNe5/xw8s0UYEY+AZQLk9bkaW/3l qLsdMD6uq/HsxVO0hOrIagu1VthEPHW4zYyIl89wKN9C5NmSiTshcQAFOQ/UjI9k 7KOlKpFNbsgTwI8NDS5qjTXIDQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:31:27 2026 by rpki-client