$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json) Hash identifier: SZj1iIItk9/OCy9MGJGGWd8mltYDQ7yIqCBZAdluYY8= Subject key identifier: B4:41:0C:86:5F:9A:11:A9:0D:C2:7E:91:04:D3:55:08:E5:B5:42:04 Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft Manifest number: 031E Signing time: Fri 17 Apr 2026 01:03:50 +0000 Manifest this update: Fri 17 Apr 2026 01:03:50 +0000 Manifest next update: Fri 24 Apr 2026 01:03:50 +0000 Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: BtTsGHk4L0py7YAP7X9TWTC63mLrIlIdwGw65rFsJ3U=) 2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Apr 17 01:03:50 2026 GMT Not After : Apr 24 01:03:50 2026 GMT Subject: CN=69e186f6-3abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:83:ce:7a:58:31:1e:b1:e4:7d:a2:e0:3e: 74:ce:88:2e:28:c6:10:4b:7a:65:3f:67:64:3c:10: 73:a8:69:e0:0d:ce:d6:35:3a:91:c9:69:09:11:fa: ad:d6:4c:af:90:b2:d8:93:1d:04:e9:fd:30:fd:0e: 33:92:c4:b6:5d:b5:ed:75:f3:68:13:9a:c6:06:58: f9:f9:19:f1:ea:ca:b3:a3:39:fd:3a:07:ca:4f:32: 25:3b:29:f7:6a:84:eb:e5:6a:02:9c:27:7f:4b:05: 31:94:c5:02:e6:93:93:d1:9b:c5:00:ca:f9:a7:b5: c7:91:56:a7:96:7b:61:46:7e:c8:34:f3:f7:e1:6b: b9:4c:fe:2a:ef:a8:4a:bd:6a:ad:dc:b3:31:33:f5: 19:3f:93:8d:76:82:dd:82:cb:44:7d:9b:5e:0e:34: d9:3d:da:32:6a:d0:1d:50:76:98:e9:50:76:39:00: 87:79:2c:6b:a7:7b:1b:03:51:7c:2f:13:61:41:22: 4d:dc:a7:84:56:4d:1f:df:7f:aa:cd:c2:a2:5a:97: 52:ae:ad:fe:6d:3d:dc:be:e1:b4:13:b2:2c:0f:99: b2:59:ea:c8:e0:f5:db:58:4b:bc:d6:38:d8:e8:d8: 0f:ee:6c:73:fa:0a:ef:45:34:54:b2:5c:9b:7f:33: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:0C:86:5F:9A:11:A9:0D:C2:7E:91:04:D3:55:08:E5:B5:42:04 X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:42:0f:f7:47:eb:57:70:0f:70:1f:27:5c:97:82:57:1d:f6: 7d:2b:03:54:51:04:fb:5d:aa:aa:3a:51:e2:19:3d:a1:d6:c3: 5d:d4:b0:cc:ee:a0:96:aa:f0:d8:01:e6:3d:e9:85:a0:2d:d0: 9b:8d:b4:78:dc:3c:bb:94:d2:8c:a7:12:86:42:51:54:b9:43: a8:e9:16:fc:2e:13:87:ff:1a:c4:15:0e:e2:f3:ec:34:c5:78: a1:d8:e5:fa:74:59:de:09:44:0b:a6:57:34:58:00:40:6c:26: f2:78:f8:23:c3:60:e4:0e:cf:31:5a:02:e6:cb:79:b7:c2:62: 98:dd:6c:15:44:eb:72:b2:94:f9:0a:4b:4a:8d:e9:a7:23:98: 5c:d7:22:39:c2:f4:83:2d:85:37:2f:39:4a:36:76:b2:a2:d7: 2c:0d:38:8f:6c:88:d9:24:03:f0:12:a1:62:25:73:bd:15:eb: 33:10:c3:a7:75:6b:81:f6:5c:67:9f:b8:d1:3e:7b:df:fd:da: e0:a6:fe:a9:e2:70:83:8c:50:de:bc:15:ef:42:78:99:89:50: 1e:57:54:ac:f8:10:81:74:9f:45:c9:5e:3d:6b:74:3d:2c:bb: a8:f0:0a:bd:e6:9a:43:49:9f:d5:d9:ad:3d:22:36:11:b7:a2: 2f:ab:a1:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjYwNDE3MDEwMzUwWhcNMjYwNDI0MDEwMzUwWjAYMRYwFAYD VQQDEw02OWUxODZmNi0zYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UeDznpYMR6x5H2i4D50zoguKMYQS3plP2dkPBBzqGngDc7WNTqRyWkJEfqt 1kyvkLLYkx0E6f0w/Q4zksS2XbXtdfNoE5rGBlj5+Rnx6sqzozn9OgfKTzIlOyn3 aoTr5WoCnCd/SwUxlMUC5pOT0ZvFAMr5p7XHkVanlnthRn7INPP34Wu5TP4q76hK vWqt3LMxM/UZP5ONdoLdgstEfZteDjTZPdoyatAdUHaY6VB2OQCHeSxrp3sbA1F8 LxNhQSJN3KeEVk0f33+qzcKiWpdSrq3+bT3cvuG0E7IsD5myWerI4PXbWEu81jjY 6NgP7mxz+grvRTRUslybfzN4HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRBDIZf mhGpDcJ+kQTTVQjltUIEMB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVDMS9DQkU2QkM3NDBGMDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYz bU1uT1FjSEY1MG9jaURlc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALEIP90frV3APcB8nXJeCVx32fSsDVFEE+12qqjpR4hk9odbDXdSwzO6glqrw 2AHmPemFoC3Qm420eNw8u5TSjKcShkJRVLlDqOkW/C4Th/8axBUO4vPsNMV4odjl +nRZ3glEC6ZXNFgAQGwm8nj4I8Ng5A7PMVoC5st5t8JimN1sFUTrcrKU+QpLSo3p pyOYXNciOcL0gy2FNy85SjZ2sqLXLA04j2yI2SQD8BKhYiVzvRXrMxDDp3VrgfZc Z5+40T573/3a4Kb+qeJwg4xQ3rwV70J4mYlQHldUrPgQgXSfRclePWt0PSy7qPAK veaaQ0mf1dmtPSI2EbeiL6uh+Q== -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:48 2026 by rpki-client