$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: 8MuNniEFbxRiIFxdyUnTPwKnZUrrBBtDvWe+IhOi4P4= Subject key identifier: 98:6E:0E:1E:44:1E:4F:EC:5B:FC:19:A6:47:8E:F5:D5:60:0F:05:8C Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0D1A Signing time: Thu 16 Apr 2026 18:06:52 +0000 Manifest this update: Thu 16 Apr 2026 18:06:51 +0000 Manifest next update: Thu 23 Apr 2026 18:06:51 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: NkfUOtjy/GcygzVLbzRQbCsOSp3vHAerZkLG8lbtIIw=) 2: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: i9uCa/jnhktxFdjqViYAybuthNUR7oD6rAf8exjN1kI=) 3: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=) 4: 5DB19F74332511F19B77F41AB8833773.roa (hash: eS81eZ4BRnB1S8RBeTEIim17x0/NA9jClADK3JWCczs=) 5: 4DC07014161411F1B995070A2E3D8C67.roa (hash: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU=) 6: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=) 7: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Apr 16 18:06:51 2026 GMT Not After : Apr 23 18:06:51 2026 GMT Subject: CN=69e1253c-15b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:0f:dc:b8:bf:76:ec:a5:32:cf:00:25:3d: d1:78:79:8f:a6:73:09:07:dc:05:f3:0a:8a:60:b1: 27:67:57:47:f3:a4:93:b6:b2:e3:0f:be:6f:fe:9f: 4f:7a:46:f1:77:a2:cf:d4:26:93:49:f5:f9:fc:b1: 51:db:51:12:ea:e9:d8:3c:73:cc:18:ca:4c:0a:9c: 25:6c:17:73:2b:49:f6:f2:4f:48:5f:72:41:a6:04: f1:10:29:83:6e:73:e3:84:ac:b5:ed:7a:7c:95:01: 65:d0:1c:8b:26:26:fe:7f:96:ab:be:af:13:e3:27: df:c0:27:58:70:d0:4d:46:87:80:d3:9c:dd:73:95: 20:e2:64:a2:79:f8:3a:39:86:99:f6:3b:1b:5c:35: 0a:bd:a2:59:72:8e:4e:a0:d9:5c:6d:75:78:4c:00: 52:e0:16:e5:55:7d:90:9e:29:5a:d0:fc:f1:24:2e: de:b0:6b:44:5e:88:c4:5f:5a:00:a4:d9:10:2d:56: 28:34:38:65:2e:fd:37:80:3c:9e:84:9e:93:a8:9c: 04:f2:ce:4c:04:ed:2c:30:4b:ad:8a:78:36:00:ef: aa:64:0c:98:a3:96:64:31:89:8a:ce:a1:44:b0:de: 9c:11:55:63:e7:32:c9:42:83:45:54:7f:95:f7:31: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6E:0E:1E:44:1E:4F:EC:5B:FC:19:A6:47:8E:F5:D5:60:0F:05:8C X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d9:70:75:02:42:76:65:89:4f:76:41:f4:0c:f5:19:a8:5c: 7c:36:40:17:17:01:f1:d6:ab:b4:85:9d:1b:72:94:77:eb:87: f9:62:db:2d:e9:26:2e:a0:27:42:8a:cd:a8:33:e5:b5:7d:40: c9:a3:6f:2f:07:72:90:94:bd:26:72:5f:49:ee:79:f0:26:f6: 9b:20:1d:30:68:69:8b:f9:c8:2f:02:3a:90:40:c0:d3:f8:fd: 8f:fb:53:27:bb:4c:4b:96:fc:f9:66:7c:31:8b:6d:2b:25:ff: 66:e9:ae:9c:67:a3:e2:e5:ff:75:1b:e6:26:97:65:46:56:c5: ff:89:9e:57:0a:27:04:00:09:05:38:ca:7b:52:1e:bb:2d:3d: 82:dd:67:d9:c3:16:19:fb:a2:ac:a9:19:60:62:4b:e6:c9:5f: a6:b4:73:1d:26:76:8a:92:a3:3b:86:7b:60:01:b3:7c:a1:50: 54:8b:cd:29:26:f4:64:98:12:c7:64:6b:eb:c7:8f:26:53:f5: d5:31:a8:a5:27:30:36:bc:96:32:df:9f:db:cd:87:de:ca:28: 42:78:a0:31:62:3a:d5:8b:ec:9e:d7:b4:33:dd:6d:35:80:1e: 6f:22:37:f3:59:79:98:f7:aa:61:f4:f1:13:4b:d7:c5:1e:8f: 29:0a:bf:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjYwNDE2MTgwNjUxWhcNMjYwNDIzMTgwNjUxWjAYMRYwFAYD VQQDEw02OWUxMjUzYy0xNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCkP3Li/duylMs8AJT3ReHmPpnMJB9wF8wqKYLEnZ1dH86STtrLjD75v/p9P ekbxd6LP1CaTSfX5/LFR21ES6unYPHPMGMpMCpwlbBdzK0n28k9IX3JBpgTxECmD bnPjhKy17Xp8lQFl0ByLJib+f5arvq8T4yffwCdYcNBNRoeA05zdc5Ug4mSiefg6 OYaZ9jsbXDUKvaJZco5OoNlcbXV4TABS4BblVX2Qnila0PzxJC7esGtEXojEX1oA pNkQLVYoNDhlLv03gDyehJ6TqJwE8s5MBO0sMEuting2AO+qZAyYo5ZkMYmKzqFE sN6cEVVj5zLJQoNFVH+V9zHVxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhuDh5E Hk/sW/wZpkeO9dVgDwWMMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARdlwdQJCdmWJT3ZB9Az1GahcfDZAFxcB8dartIWdG3KUd+uH+WLbLekmLqAn QorNqDPltX1AyaNvLwdykJS9JnJfSe558Cb2myAdMGhpi/nILwI6kEDA0/j9j/tT J7tMS5b8+WZ8MYttKyX/ZumunGej4uX/dRvmJpdlRlbF/4meVwonBAAJBTjKe1Ie uy09gt1n2cMWGfuirKkZYGJL5slfprRzHSZ2ipKjO4Z7YAGzfKFQVIvNKSb0ZJgS x2Rr68ePJlP11TGopScwNryWMt+f282H3sooQnigMWI61Yvsnte0M91tNYAebyI3 81l5mPeqYfTxE0vXxR6PKQq/Bw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:53:43 2026 by rpki-client