$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: /XOodFqlDOVX3BOWWUVlko06hassY5KzFVo1k8zGSrg= Subject key identifier: 07:A9:DB:97:B8:63:D9:2A:3B:57:54:CC:02:FD:45:93:3F:40:ED:82 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 093C Signing time: Thu 16 Apr 2026 20:05:51 +0000 Manifest this update: Thu 16 Apr 2026 20:05:50 +0000 Manifest next update: Thu 23 Apr 2026 20:05:50 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: 5ifGmVZRL+Ix/Y43FfFPfyeWo+rm6Ah/D5v9NT5KNJw=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: AJajG2Lmw5CKAEEdhqoEdtkkiOQieReMgo4pezqlWDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Apr 16 20:05:50 2026 GMT Not After : Apr 23 20:05:50 2026 GMT Subject: CN=69e1411f-1d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:09:d3:7a:e0:6d:4d:67:ae:fc:f3:f0:bd: df:b7:c8:0b:e4:26:29:c9:82:d9:49:0f:94:3b:9e: 47:6c:10:ac:7a:e3:78:92:22:89:c0:59:be:62:5d: 36:b2:78:3f:d6:e7:89:f6:ed:f7:b0:fe:11:cb:f8: 27:de:aa:94:ee:8e:40:47:b5:7f:43:72:80:d3:c2: 4b:a8:28:7a:c7:45:40:20:67:cd:52:14:9f:a0:05: 12:b7:d3:73:e0:f9:b7:34:66:ff:53:95:a6:ca:ab: 39:f5:98:73:3a:6d:4d:da:c4:4d:18:62:2b:e3:ea: f3:a7:c0:df:04:70:74:8d:53:aa:76:ca:f8:3e:00: af:98:c8:76:89:25:60:75:37:92:cf:af:5a:f3:82: e5:29:f1:6f:9e:3f:bf:e4:39:e3:bc:3e:53:1a:33: 07:b8:19:6c:4a:4f:b0:3c:cd:7f:b5:93:2a:23:34: c5:4e:f4:d8:94:6a:58:e8:d8:2c:6a:c0:73:41:0b: 32:cd:82:f6:15:45:e2:83:5e:8f:4a:a4:f2:b8:26: 7b:76:7b:84:73:c6:9b:cc:27:a1:de:26:8c:ff:e7: b3:18:86:f3:ce:b6:ea:5e:02:a4:ce:03:71:a0:eb: 35:78:21:3e:af:e3:7a:6f:89:10:32:23:fc:4e:92: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A9:DB:97:B8:63:D9:2A:3B:57:54:CC:02:FD:45:93:3F:40:ED:82 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:13:88:e8:d8:b7:8f:9d:a9:6d:50:20:a0:a1:69:8d:7e: 7f:e8:6e:e2:56:ec:d5:8f:f4:44:0b:0c:2b:3c:63:fe:67:4e: 00:71:06:ff:0c:ec:68:62:ae:7c:4c:42:fe:0b:92:e7:6c:be: 6c:51:55:da:cb:56:cb:fa:b5:ef:a5:70:8d:4d:33:2f:e4:ed: 7c:ac:cd:09:f5:96:14:29:cf:58:01:0e:b7:80:9d:e2:82:5d: ba:6b:e0:12:49:e0:9e:fd:58:97:99:e8:8b:bc:11:17:8e:e1: 3a:f4:d0:9b:3d:4c:5b:32:44:10:0f:16:c4:de:72:87:6f:c6: 6b:92:a1:7b:93:c4:de:35:4a:f9:50:fe:e7:0e:fd:5c:2a:d1: c5:a3:e1:d9:68:89:e2:cd:a0:c6:80:32:b2:33:31:56:d8:0e: 18:c1:56:f7:a3:2a:b9:9b:bb:75:c2:04:b5:2b:15:b4:4b:89: de:97:08:4b:22:b7:90:d8:a8:1e:db:5c:55:67:04:f3:4c:02: 54:dc:1c:f3:02:44:57:8f:ad:7b:7f:ee:8f:39:38:c7:8d:14: 01:c2:b6:fb:43:2f:7d:a8:6f:03:60:13:c1:af:e7:e6:ce:1c: 76:bf:c7:d7:fb:b9:95:00:b3:b0:f0:8e:c2:71:5e:b4:bb:6c: aa:08:42:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwNDE2MjAwNTUwWhcNMjYwNDIzMjAwNTUwWjAYMRYwFAYD VQQDEw02OWUxNDExZi0xZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3cJ03rgbU1nrvzz8L3ft8gL5CYpyYLZSQ+UO55HbBCseuN4kiKJwFm+Yl02 sng/1ueJ9u33sP4Ry/gn3qqU7o5AR7V/Q3KA08JLqCh6x0VAIGfNUhSfoAUSt9Nz 4Pm3NGb/U5Wmyqs59ZhzOm1N2sRNGGIr4+rzp8DfBHB0jVOqdsr4PgCvmMh2iSVg dTeSz69a84LlKfFvnj+/5DnjvD5TGjMHuBlsSk+wPM1/tZMqIzTFTvTYlGpY6Ngs asBzQQsyzYL2FUXig16PSqTyuCZ7dnuEc8abzCeh3iaM/+ezGIbzzrbqXgKkzgNx oOs1eCE+r+N6b4kQMiP8TpKe8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAep25e4 Y9kqO1dUzAL9RZM/QO2CMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhJkTiOjYt4+dqW1QIKChaY1+f+hu4lbs1Y/0RAsMKzxj/mdOAHEG/wzsaGKu fExC/guS52y+bFFV2stWy/q176VwjU0zL+TtfKzNCfWWFCnPWAEOt4Cd4oJdumvg Ekngnv1Yl5noi7wRF47hOvTQmz1MWzJEEA8WxN5yh2/Ga5Khe5PE3jVK+VD+5w79 XCrRxaPh2WiJ4s2gxoAysjMxVtgOGMFW96MquZu7dcIEtSsVtEuJ3pcISyK3kNio HttcVWcE80wCVNwc8wJEV4+te3/ujzk4x40UAcK2+0MvfahvA2ATwa/n5s4cdr/H 1/u5lQCzsPCOwnFetLtsqghCuA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:57 2026 by rpki-client