$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: umOtn5ROwzSUVvvJystYzt/LsZ6HJU+n3EINhKLwkRw= Subject key identifier: 4C:27:D1:F9:1D:55:95:62:23:B7:66:36:D5:5B:A0:77:74:64:3E:32 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 0415 Signing time: Fri 17 Apr 2026 00:18:42 +0000 Manifest this update: Fri 17 Apr 2026 00:18:41 +0000 Manifest next update: Fri 24 Apr 2026 00:18:41 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: abja5ompbzEpMawru7ttQPULqJtlUxRkyjX+0Wl6p7I=) 2: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: IBw3K5oTaYkP1Lamfe7f4AbVCUVD2an81GV/CK0SpBk=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: yukIsGAb+vTypvuZwx1hx3ziu2U2pui3Ec+csD8aQRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Apr 17 00:18:41 2026 GMT Not After : Apr 24 00:18:41 2026 GMT Subject: CN=69e17c62-315d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:82:8b:ce:33:24:77:41:3c:8c:e3:63:11: bb:01:22:2c:65:57:54:ba:19:23:cc:b8:10:9a:61: 22:01:d4:06:96:0c:47:0e:d7:e6:23:10:38:65:55: 4c:6c:3b:07:9a:c2:c2:6c:c0:d7:b4:1a:bf:57:20: 93:54:18:8e:a0:f8:9b:ce:c2:d3:a3:10:ea:d4:7c: 67:29:e5:b4:d0:14:08:dc:0a:ca:3b:b4:84:de:aa: 0e:5d:df:0f:6f:3d:59:6d:0f:1e:5d:13:5e:ff:6c: ae:84:49:65:47:e8:9a:d1:ff:c7:3d:6e:48:9d:8d: 44:3e:e9:e2:eb:10:28:1e:b9:00:bb:4e:fb:25:89: cd:cb:a8:79:b9:f7:c1:85:4d:2a:87:ec:23:aa:01: 30:cb:a4:0f:c0:39:75:9d:f2:da:45:cd:27:12:65: b2:64:60:2f:30:15:61:9c:39:15:13:fd:2e:d3:43: 7d:7c:84:bc:e5:e2:e2:cc:c6:54:7e:07:25:56:86: a2:f4:09:2d:5b:04:a6:fc:12:58:86:80:f3:06:09: 8c:c0:41:ef:85:45:9a:8b:c6:46:6e:f8:b7:f5:63: 0b:01:ab:e6:b9:cd:a2:f6:95:4a:49:5f:f0:23:f0: 5b:cf:18:29:96:d2:c8:36:df:a3:b7:0b:a9:0a:2f: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:27:D1:F9:1D:55:95:62:23:B7:66:36:D5:5B:A0:77:74:64:3E:32 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1d:ae:0a:25:80:d4:ab:00:11:8e:80:3e:94:72:fb:3c:cd: 77:d1:ba:d2:26:d9:64:f0:3e:81:f1:fd:de:c9:db:40:e7:7c: d7:f4:38:8f:87:f7:d2:4a:01:8a:ff:2a:eb:98:b9:88:7c:27: f4:4a:f7:d4:75:44:fe:10:01:ff:cd:5b:47:7d:6b:f1:e9:9a: f5:10:cd:36:44:bb:b8:c4:02:42:5e:f4:ac:92:01:ba:9e:64: a5:fd:a9:3f:e7:46:d5:f7:4a:53:26:b9:88:6a:1a:08:32:eb: 7a:4c:73:55:c2:9b:0b:4d:4b:f8:b2:46:5e:19:52:ce:bf:f4: b6:04:4c:d8:eb:16:e1:20:a7:84:6f:e6:ae:9f:42:7c:1a:04: 61:d0:08:51:0d:3b:14:ab:6b:8c:60:74:42:b8:a6:3c:49:f0: 7c:5a:06:d4:33:df:6a:9d:e4:60:85:5e:3e:0b:cc:86:10:f2: 68:e0:e2:3c:68:68:85:3e:71:0d:af:b3:f7:9e:eb:78:76:d5: 4b:a1:89:81:c0:f4:25:1f:b5:a1:30:fd:da:2d:7e:48:cf:8c: dc:8a:e4:4f:71:bf:e3:49:7e:32:2c:ac:bc:92:f2:ae:c3:33: 76:b6:06:d4:5b:0d:dc:87:b9:de:d1:03:4f:0b:34:5c:1d:c6: 79:b0:16:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwNDE3MDAxODQxWhcNMjYwNDI0MDAxODQxWjAYMRYwFAYD VQQDEw02OWUxN2M2Mi0zMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUWCi84zJHdBPIzjYxG7ASIsZVdUuhkjzLgQmmEiAdQGlgxHDtfmIxA4ZVVM bDsHmsLCbMDXtBq/VyCTVBiOoPibzsLToxDq1HxnKeW00BQI3ArKO7SE3qoOXd8P bz1ZbQ8eXRNe/2yuhEllR+ia0f/HPW5InY1EPuni6xAoHrkAu077JYnNy6h5uffB hU0qh+wjqgEwy6QPwDl1nfLaRc0nEmWyZGAvMBVhnDkVE/0u00N9fIS85eLizMZU fgclVoai9AktWwSm/BJYhoDzBgmMwEHvhUWai8ZGbvi39WMLAavmuc2i9pVKSV/w I/BbzxgpltLINt+jtwupCi9JWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwn0fkd VZViI7dmNtVboHd0ZD4yMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATB2uCiWA1KsAEY6APpRy+zzNd9G60ibZZPA+gfH93snbQOd81/Q4j4f30koB iv8q65i5iHwn9Er31HVE/hAB/81bR31r8ema9RDNNkS7uMQCQl70rJIBup5kpf2p P+dG1fdKUya5iGoaCDLrekxzVcKbC01L+LJGXhlSzr/0tgRM2OsW4SCnhG/mrp9C fBoEYdAIUQ07FKtrjGB0QrimPEnwfFoG1DPfap3kYIVePgvMhhDyaODiPGhohT5x Da+z957reHbVS6GJgcD0JR+1oTD92i1+SM+M3IrkT3G/40l+MiysvJLyrsMzdrYG 1FsN3Ie53tEDTws0XB3GebAWHA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:59 2026 by rpki-client