$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: 4kN2cJMeO0QZHRod6R1H2KWL20tc8BVirhJpNLfNrTc= Subject key identifier: 4A:21:6B:66:AF:DD:79:6C:64:E2:A4:EA:0A:9D:F7:D6:36:FF:30:32 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 3540 Signing time: Thu 16 Apr 2026 14:44:04 +0000 Manifest this update: Thu 16 Apr 2026 14:44:03 +0000 Manifest next update: Thu 23 Apr 2026 14:44:03 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: MkrqF1tL5Gqzx+u+YoPPGrZb2MkogTOheu4ec6YFVhM=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: 13OFQ4+DXlBY64hL4vDY3u0qJPTe15xHqCHPoGlCW1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13649 (0x3551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Apr 16 14:44:03 2026 GMT Not After : Apr 23 14:44:03 2026 GMT Subject: CN=69e0f5b4-5cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:11:4a:61:e3:e2:02:8a:f7:fc:c9:94:6f: 4e:83:47:2b:bc:71:77:a3:e3:e6:8a:cf:11:62:e9: 51:e0:54:97:4a:28:d1:b6:55:8c:62:b4:89:16:ff: d3:c1:55:42:f5:29:20:08:9d:27:67:e6:b0:c8:f9: 48:8d:3d:07:6c:8a:ef:c3:6d:24:83:c2:76:e9:13: 1a:df:6c:d4:af:91:6c:84:81:c3:ec:3c:a2:b2:17: c3:42:31:a6:d5:3d:69:2f:9a:2f:86:a4:c0:94:cd: c3:53:42:db:54:ad:aa:92:61:4d:5e:3c:1c:f3:25: 69:fe:20:45:2c:5b:e1:58:1a:1b:9c:25:48:34:e5: 7d:99:c3:a2:d0:60:87:7f:cf:5b:5f:7a:d9:cb:99: e8:b4:d9:e7:2a:ad:5e:38:67:16:e1:59:6d:06:bb: 81:db:7e:7a:00:bf:ec:ba:37:15:ba:39:e5:ba:e9: 99:2c:9d:d0:9f:00:49:5e:be:2a:a4:d6:c3:15:9a: e1:b5:67:a5:2f:0e:3f:9c:13:62:0a:11:67:4a:70: be:2e:f8:60:c0:25:e1:59:38:6e:3e:a2:98:8a:e1: 36:40:ae:ef:25:2c:d0:e2:27:19:07:a8:3b:ee:bd: a4:94:b9:36:0f:99:25:4d:05:f0:76:b8:2d:01:22: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:6B:66:AF:DD:79:6C:64:E2:A4:EA:0A:9D:F7:D6:36:FF:30:32 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d8:81:2d:99:3b:10:d4:f5:77:99:a1:14:a1:55:5b:5a:d6: a6:22:df:9a:ea:5f:31:6c:23:09:90:62:51:af:8c:b0:08:3c: 64:9b:a1:04:6e:2d:c9:15:f5:5b:ca:c7:e8:93:bb:d3:9c:25: 4c:ea:12:e3:52:f4:bb:64:96:7e:ec:d0:b8:05:ae:bd:cf:9b: 1d:84:5c:86:7a:ad:f0:ce:1d:ba:d3:41:5a:b1:30:26:69:d2: 1d:88:b3:54:4e:6a:ec:ae:96:e9:3f:24:fc:8d:b6:20:7d:5a: 0b:d4:f8:b0:bb:8e:56:83:1d:dc:d0:70:44:fa:12:90:90:e3: 01:84:83:d7:20:6b:f2:80:3e:c2:80:57:55:64:6d:04:b8:20: 19:bd:37:3e:10:a4:8a:36:95:39:b7:b5:fd:2c:57:fb:f9:07: 76:38:ff:16:4e:b6:c1:3c:b9:6f:01:4d:f8:0c:bc:de:ef:d1: f1:5b:b6:14:cb:b6:35:97:3b:7b:83:50:1c:e0:6c:98:d5:b1: 4b:c3:18:57:dd:c5:47:f6:49:2e:4c:57:4a:5f:50:f6:ab:4c: ea:07:6f:96:f8:50:73:ae:2c:59:77:8c:ff:ae:e8:5a:13:80: 37:85:72:5b:b6:0c:64:cb:c9:0b:a1:0e:45:e0:b0:6e:7b:aa: 53:8a:1d:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjYwNDE2MTQ0NDAzWhcNMjYwNDIzMTQ0NDAzWjAYMRYwFAYD VQQDEw02OWUwZjViNC01Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7wRSmHj4gKK9/zJlG9Og0crvHF3o+Pmis8RYulR4FSXSijRtlWMYrSJFv/T wVVC9SkgCJ0nZ+awyPlIjT0HbIrvw20kg8J26RMa32zUr5FshIHD7DyishfDQjGm 1T1pL5ovhqTAlM3DU0LbVK2qkmFNXjwc8yVp/iBFLFvhWBobnCVINOV9mcOi0GCH f89bX3rZy5notNnnKq1eOGcW4VltBruB2356AL/sujcVujnluumZLJ3QnwBJXr4q pNbDFZrhtWelLw4/nBNiChFnSnC+LvhgwCXhWThuPqKYiuE2QK7vJSzQ4icZB6g7 7r2klLk2D5klTQXwdrgtASInGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoha2av 3XlsZOKk6gqd99Y2/zAyMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9iBLZk7ENT1d5mhFKFVW1rWpiLfmupfMWwjCZBiUa+MsAg8ZJuhBG4tyRX1 W8rH6JO705wlTOoS41L0u2SWfuzQuAWuvc+bHYRchnqt8M4dutNBWrEwJmnSHYiz VE5q7K6W6T8k/I22IH1aC9T4sLuOVoMd3NBwRPoSkJDjAYSD1yBr8oA+woBXVWRt BLggGb03PhCkijaVObe1/SxX+/kHdjj/Fk62wTy5bwFN+Ay83u/R8Vu2FMu2NZc7 e4NQHOBsmNWxS8MYV93FR/ZJLkxXSl9Q9qtM6gdvlvhQc64sWXeM/67oWhOAN4Vy W7YMZMvJC6EOReCwbnuqU4od4w== -----END CERTIFICATE-----Generated at Fri Apr 17 08:08:17 2026 by rpki-client