$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: 8EeYhF+uiDexfGVHW2INYwFeIfiVN39BVt68qCuDfdQ= Subject key identifier: 41:EE:A6:6F:AB:72:F0:32:EE:E7:D5:37:D3:27:84:9E:5E:C2:70:58 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 0286 Signing time: Fri 17 Apr 2026 01:50:57 +0000 Manifest this update: Fri 17 Apr 2026 01:50:56 +0000 Manifest next update: Fri 24 Apr 2026 01:50:56 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: ICU18wMiqIzjKbDqLG9E1xvlb/Cv89oErCDRc+lYS94=) 2: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=) 3: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI=) 4: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: bXMhRP5t5yXxZ38+U5zANdmRNyogxO2UTQiQkXvbZD8=) 5: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=) 6: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: D3QE+K/fDpz/3eSAi1rPfAFHFlOdI3dak+hzzYghHZo=) 7: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: jj9Anb+YltSNZ7XXzklotQBXr3n/2KBa9WPb7jR7Hmc=) 8: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Apr 17 01:50:56 2026 GMT Not After : Apr 24 01:50:56 2026 GMT Subject: CN=69e19200-2683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:74:11:dd:84:ee:9f:17:ec:5a:e5:04:e0: ad:9f:36:bb:33:a8:18:02:b3:2c:44:6f:9b:3d:ab: 6b:98:9a:90:5c:85:ce:4e:07:5c:c4:e6:e5:c9:06: ff:4f:94:9e:00:c6:58:e1:2d:0d:47:7a:ca:6a:7e: 7a:df:3a:61:9d:21:35:e2:37:65:15:5b:66:23:43: 76:ba:0b:0d:11:6f:6a:63:bc:27:8d:00:1e:93:20: 8d:b2:1f:35:c9:7e:36:a9:2b:6e:6f:74:77:12:22: 42:ba:60:d3:43:d8:89:5e:c6:ba:4a:8d:aa:6d:d7: 29:96:79:70:5e:33:bb:2f:1c:4c:7b:ea:b5:aa:79: 44:3d:00:26:f5:13:28:c8:46:5e:b3:77:dd:57:0c: d5:2f:7f:45:f0:02:e0:92:45:b5:97:39:d2:61:9c: 6f:a3:a4:b5:7f:90:b6:4c:f6:3d:5d:8a:ab:b3:d0: 1c:23:f2:78:12:79:ab:7c:6f:d5:e5:c4:38:cf:0b: a4:7d:1a:40:a9:e0:a1:94:f5:0d:5d:a4:d6:27:f1: 0e:06:32:ba:55:95:91:d9:45:48:2f:29:8e:b5:fa: 5d:96:1c:ad:bc:d9:64:0a:be:78:7a:d1:0b:ea:a7: a5:1c:35:78:b2:27:93:79:41:f9:4a:bd:21:8d:0f: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EE:A6:6F:AB:72:F0:32:EE:E7:D5:37:D3:27:84:9E:5E:C2:70:58 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:60:7e:63:94:ba:30:b8:bb:62:bc:f5:b8:d1:c7:1e:8d: 4a:54:f4:63:ec:22:03:80:ad:5a:5c:e8:fd:4e:ff:a9:d1:84: f5:f7:c6:f5:50:85:50:02:8d:43:2a:f6:e3:09:df:a2:38:b0: c3:e9:78:58:0f:91:c7:7b:86:c2:75:48:df:a8:80:c8:96:93: a3:bf:ea:a5:fe:c6:d2:44:b5:80:2a:00:12:9e:c8:cf:16:d2: 0a:a7:20:bd:36:6a:51:f9:5a:53:c4:03:85:3b:9e:62:6d:98: ca:7d:8a:3a:17:3e:a1:36:34:d3:5a:7c:04:82:19:71:32:f4: 06:59:31:36:44:68:0a:6a:8e:16:29:94:99:ac:7e:98:a1:36: ca:a2:71:1b:e3:a3:8a:7f:7d:4f:e3:91:e2:f2:e0:32:db:30: 8d:57:17:31:e7:35:2c:d0:44:be:12:75:c1:e0:1d:eb:70:ca: 3b:65:12:0e:07:a5:54:be:e8:23:20:0c:61:1b:3b:45:85:aa: b4:db:f6:0f:7c:53:12:00:d4:d1:11:8f:26:74:2c:d2:09:11: ca:a6:59:76:8a:39:45:09:40:a8:0c:6f:2c:fb:b9:55:85:63: e2:c8:3e:d5:fc:b0:93:3e:f9:b4:09:dd:ee:17:b5:f6:20:39: 7e:22:03:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjYwNDE3MDE1MDU2WhcNMjYwNDI0MDE1MDU2WjAYMRYwFAYD VQQDEw02OWUxOTIwMC0yNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQN0Ed2E7p8X7FrlBOCtnza7M6gYArMsRG+bPatrmJqQXIXOTgdcxOblyQb/ T5SeAMZY4S0NR3rKan563zphnSE14jdlFVtmI0N2ugsNEW9qY7wnjQAekyCNsh81 yX42qStub3R3EiJCumDTQ9iJXsa6So2qbdcplnlwXjO7LxxMe+q1qnlEPQAm9RMo yEZes3fdVwzVL39F8ALgkkW1lznSYZxvo6S1f5C2TPY9XYqrs9AcI/J4EnmrfG/V 5cQ4zwukfRpAqeChlPUNXaTWJ/EOBjK6VZWR2UVILymOtfpdlhytvNlkCr54etEL 6qelHDV4sieTeUH5Sr0hjQ/7FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHupm+r cvAy7ufVN9MnhJ5ewnBYMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkvVgfmOUujC4u2K89bjRxx6NSlT0Y+wiA4CtWlzo/U7/qdGE9ffG9VCFUAKN Qyr24wnfojiww+l4WA+Rx3uGwnVI36iAyJaTo7/qpf7G0kS1gCoAEp7IzxbSCqcg vTZqUflaU8QDhTueYm2Yyn2KOhc+oTY001p8BIIZcTL0BlkxNkRoCmqOFimUmax+ mKE2yqJxG+Ojin99T+OR4vLgMtswjVcXMec1LNBEvhJ1weAd63DKO2USDgelVL7o IyAMYRs7RYWqtNv2D3xTEgDU0RGPJnQs0gkRyqZZdoo5RQlAqAxvLPu5VYVj4sg+ 1fywkz75tAnd7he19iA5fiIDvg== -----END CERTIFICATE-----Generated at Sat Apr 18 00:31:15 2026 by rpki-client