$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft File: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft (raw, json) Hash identifier: eOivQgOYQTrszfiDDEkkmuu0yQ+FMvI1di8nabbNbqI= Subject key identifier: BC:01:65:E9:E5:D9:BF:BC:5A:E7:21:39:8A:24:31:23:BF:22:F8:17 Authority key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C Certificate issuer: /CN=A91BE8A9/serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft Manifest number: 2D Signing time: Fri 17 Apr 2026 08:24:47 +0000 Manifest this update: Fri 17 Apr 2026 08:24:46 +0000 Manifest next update: Fri 24 Apr 2026 08:24:46 +0000 Files and hashes: 1: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl (hash: 0dgcIyx2TAhY46n2jfJKco22rQ78g76z8l7n0anCYUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C Validity Not Before: Apr 17 08:24:46 2026 GMT Not After : Apr 24 08:24:46 2026 GMT Subject: CN=69e1ee4e-e3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:b5:3c:fd:02:08:e1:55:e4:6a:f6:89:e9: 84:b5:7f:91:62:aa:19:60:de:52:a1:9b:43:67:53: 5e:66:06:c3:e0:3d:8b:75:0f:1c:a5:86:f0:d8:d1: 36:84:ec:e5:21:4b:69:50:6f:00:61:ba:23:35:13: 45:79:90:60:30:cf:98:4e:a3:93:fb:a8:fc:ea:d1: 1d:c5:9e:6c:62:d9:3f:e6:5a:52:64:43:0a:1d:99: 34:88:6b:6c:4c:51:02:37:17:00:ee:42:84:f8:8a: b0:32:8e:c0:a0:ea:c7:c7:13:df:c0:f0:41:f7:0f: 5f:32:f5:ee:9e:57:83:55:b2:cf:21:f6:7e:6b:4c: 85:3a:fa:de:c8:a3:3a:94:4b:e6:35:ed:29:f0:47: 8a:62:06:ab:a8:db:f1:5f:7a:50:94:d5:61:c9:0e: 36:00:32:7d:d8:ec:a3:c7:77:a5:4e:8f:d7:48:fc: 0d:9e:de:b1:47:c2:6f:1b:28:5f:36:38:8e:ba:da: ba:d1:9a:f6:c5:c5:6e:42:9f:cd:7b:fd:68:0c:63: 16:8a:df:cc:48:67:e3:0c:dd:fe:29:6a:20:c5:82: bf:50:b6:ce:40:b4:0f:05:db:04:c6:d8:b8:4d:73: 17:90:c7:18:ad:de:d6:04:ed:49:4f:e9:69:66:00: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:01:65:E9:E5:D9:BF:BC:5A:E7:21:39:8A:24:31:23:BF:22:F8:17 X509v3 Authority Key Identifier: keyid:47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:3c:d9:4e:2b:8f:76:50:8c:e3:7d:11:7c:f3:2a:63:2c:fa: da:36:48:71:ca:80:0b:cd:ac:2b:75:23:cf:30:a5:f1:ce:bf: 9b:06:e2:60:76:48:c6:39:3b:31:fd:15:57:3e:f6:9d:2e:d1: 95:83:cb:ac:71:17:b4:3e:a5:81:e3:da:ca:b1:77:5d:ff:5d: 30:8a:f4:a6:ff:77:44:03:08:70:01:2d:34:8d:dd:c9:0a:f9: d8:4a:c0:a6:04:13:a2:1c:8f:63:e4:a9:8f:8c:25:1a:5b:cc: ff:4c:3d:11:54:ec:72:4d:6e:35:31:93:c7:30:30:c5:1a:04: 44:2e:c2:11:b0:11:51:1b:8e:f4:33:92:a0:cf:1b:dd:5b:ef: 9d:f6:d9:1c:ae:57:94:d8:eb:9d:39:44:26:f4:30:f4:1d:88: 5a:d2:a5:d5:67:ed:d6:72:66:ba:0b:ae:99:3f:41:6e:37:60: a7:f8:b1:c8:1b:14:f8:95:39:2e:c4:00:dc:7a:17:c7:1f:a6: 4c:46:9b:6e:d1:81:b5:47:79:66:20:b5:e1:ec:fe:70:4e:0b: 28:ca:32:0f:c9:8c:98:41:42:a4:61:35:7c:37:8f:d0:6f:d8: 85:e1:c1:97:c5:d6:66:41:bc:df:40:1e:ac:c5:58:e4:cf:15: 13:45:3d:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoNDc2M0FBREYwQUJBNzhFNEMwMjI0RDNFREEwNkM0NDAw RTk3MTk4QzAeFw0yNjA0MTcwODI0NDZaFw0yNjA0MjQwODI0NDZaMBgxFjAUBgNV BAMTDTY5ZTFlZTRlLWUzZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU6rU8/QII4VXkavaJ6YS1f5Fiqhlg3lKhm0NnU15mBsPgPYt1DxylhvDY0TaE 7OUhS2lQbwBhuiM1E0V5kGAwz5hOo5P7qPzq0R3Fnmxi2T/mWlJkQwodmTSIa2xM UQI3FwDuQoT4irAyjsCg6sfHE9/A8EH3D18y9e6eV4NVss8h9n5rTIU6+t7IozqU S+Y17SnwR4piBquo2/FfelCU1WHJDjYAMn3Y7KPHd6VOj9dI/A2e3rFHwm8bKF82 OI662rrRmvbFxW5Cn817/WgMYxaK38xIZ+MM3f4paiDFgr9Qts5AtA8F2wTG2LhN cxeQxxit3tYE7UlP6WlmAKRBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvAFl6eXZ v7xa5yE5iiQxI78i+BcwHwYDVR0jBBgwFoAUR2Oq3wq6eOTAIk0+2gbEQA6XGYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0NFREZGNTE2RkJG NzExRjA4REMxRDgxODcxNkY1NkJDL1IyT3Ezd3E2ZU9UQUlrMC0yZ2JFUUE2WEdZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvUjJPcTN3cTZlT1RBSWswLTJnYkVRQTZYR1l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0NFREZGNTE2RkJGNzExRjA4REMxRDgxODcxNkY1NkJDL1IyT3Ezd3E2ZU9U QUlrMC0yZ2JFUUE2WEdZdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDMPNlOK492UIzjfRF88ypjLPraNkhxyoALzawrdSPPMKXxzr+bBuJgdkjGOTsx /RVXPvadLtGVg8uscRe0PqWB49rKsXdd/10wivSm/3dEAwhwAS00jd3JCvnYSsCm BBOiHI9j5KmPjCUaW8z/TD0RVOxyTW41MZPHMDDFGgRELsIRsBFRG470M5Kgzxvd W++d9tkcrleU2OudOUQm9DD0HYha0qXVZ+3Wcma6C66ZP0FuN2Cn+LHIGxT4lTku xADcehfHH6ZMRptu0YG1R3lmILXh7P5wTgsoyjIPyYyYQUKkYTV8N4/Qb9iF4cGX xdZmQbzfQB6sxVjkzxUTRT0O -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:36 2026 by rpki-client