$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: cG8o1zM3PE/VoEuQUpmjgP7GzxODfmiz6UXeW91UHqw= Subject key identifier: C7:0A:65:7E:4F:11:5D:1A:E8:D1:93:38:D4:EE:64:C9:BD:5D:28:70 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 021F Signing time: Fri 17 Apr 2026 02:30:59 +0000 Manifest this update: Fri 17 Apr 2026 02:30:59 +0000 Manifest next update: Fri 24 Apr 2026 02:30:59 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: pUhaJs8UHCpI/2o+QUjrgvplWfUhhpiZ4IECqqzoRoI=) 2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=) 4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Apr 17 02:30:59 2026 GMT Not After : Apr 24 02:30:59 2026 GMT Subject: CN=69e19b63-723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:ce:fc:af:3a:83:78:c8:47:1d:55:64:a8: 17:d2:61:4b:c0:d1:01:4e:52:9b:a0:ff:6c:40:53: b4:ad:ad:2e:4a:0b:b8:e9:13:74:f7:6c:f5:c5:cb: 25:28:50:53:c7:9c:0e:1e:b0:5a:f7:89:ba:b5:59: 17:b5:77:3e:54:14:6b:c1:a7:f4:57:7b:47:29:4f: 79:6b:48:39:a6:d5:e4:fc:68:8b:02:5a:a1:b5:81: 83:34:60:7b:27:4b:d9:c3:ad:19:a7:96:56:3a:6d: 74:b6:47:31:b1:4f:0b:54:6c:b5:96:0f:a7:dc:3c: 8b:98:e8:d8:34:ea:f4:58:bc:0d:cf:28:72:bf:d7: 5c:13:4a:11:9d:32:21:3e:df:4c:c1:8a:ba:ad:aa: c6:f3:3d:6b:3c:8c:7c:dc:94:b5:e4:3b:a4:12:cf: b1:47:fd:35:9a:e7:23:29:83:00:87:20:40:c7:d9: e8:7d:41:17:35:b8:76:ec:a0:3c:c3:a7:54:52:31: 88:5c:cd:16:4c:ea:a1:e4:71:d0:76:e2:f2:54:f1: 05:71:2e:1e:da:64:45:93:cf:21:8c:ad:41:8e:53: 06:1b:c9:dd:dc:ce:48:84:d8:c3:22:45:da:55:19: 55:ba:cc:d1:e7:df:e9:72:89:98:f6:c2:cc:e8:e3: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:65:7E:4F:11:5D:1A:E8:D1:93:38:D4:EE:64:C9:BD:5D:28:70 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4b:c9:19:3f:6b:30:bd:75:20:28:55:cb:54:1a:d1:dc:83: 0f:b3:fa:8b:45:bf:35:39:22:c9:cb:dc:8d:f1:99:fe:f6:34: 26:a7:ac:50:d5:31:1f:27:56:ab:3b:d7:a0:20:6c:90:6c:cb: 92:c3:b6:6d:46:ed:1c:65:21:35:07:57:a3:ce:8f:80:9a:fe: 45:28:8b:aa:7b:0a:a1:91:33:62:32:78:2d:25:13:30:72:cd: 58:b0:de:11:6d:46:15:18:f5:cc:7a:49:c0:95:b7:da:89:3f: d2:38:af:c1:f2:16:e3:61:70:b1:94:93:02:fa:52:5c:46:37: 74:e1:4b:87:fc:8c:cc:7a:1f:e3:0d:60:d8:b9:db:f5:38:0f: c2:96:87:7d:2c:12:9d:87:e9:75:66:ed:4b:6a:9b:3c:ec:08: 3f:64:b0:83:bd:71:46:fd:0f:87:4b:4f:bb:cd:aa:b4:c1:6d: 99:76:28:fa:ed:a5:dd:59:7a:dd:49:24:6d:29:4e:ba:03:4f: a4:87:d8:a2:29:6f:23:95:3e:03:a8:dc:ea:f8:68:ad:8d:a4: 30:f4:dc:a0:dd:03:39:a1:72:e5:73:1a:41:25:e9:61:22:05: 07:dc:de:1d:83:18:75:46:4f:e6:69:f2:58:8e:84:5d:a1:01: 2f:0d:6b:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNDE3MDIzMDU5WhcNMjYwNDI0MDIzMDU5WjAYMRYwFAYD VQQDEw02OWUxOWI2My03MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgvDO/K86g3jIRx1VZKgX0mFLwNEBTlKboP9sQFO0ra0uSgu46RN092z1xcsl KFBTx5wOHrBa94m6tVkXtXc+VBRrwaf0V3tHKU95a0g5ptXk/GiLAlqhtYGDNGB7 J0vZw60Zp5ZWOm10tkcxsU8LVGy1lg+n3DyLmOjYNOr0WLwNzyhyv9dcE0oRnTIh Pt9MwYq6rarG8z1rPIx83JS15DukEs+xR/01mucjKYMAhyBAx9nofUEXNbh27KA8 w6dUUjGIXM0WTOqh5HHQduLyVPEFcS4e2mRFk88hjK1BjlMGG8nd3M5IhNjDIkXa VRlVuszR59/pcomY9sLM6OOT4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcKZX5P EV0a6NGTONTuZMm9XShwMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoEvJGT9rML11IChVy1Qa0dyDD7P6i0W/NTkiycvcjfGZ/vY0JqesUNUxHydW qzvXoCBskGzLksO2bUbtHGUhNQdXo86PgJr+RSiLqnsKoZEzYjJ4LSUTMHLNWLDe EW1GFRj1zHpJwJW32ok/0jivwfIW42FwsZSTAvpSXEY3dOFLh/yMzHof4w1g2Lnb 9TgPwpaHfSwSnYfpdWbtS2qbPOwIP2Swg71xRv0Ph0tPu82qtMFtmXYo+u2l3Vl6 3UkkbSlOugNPpIfYoilvI5U+A6jc6vhorY2kMPTcoN0DOaFy5XMaQSXpYSIFB9ze HYMYdUZP5mnyWI6EXaEBLw1r0w== -----END CERTIFICATE-----Generated at Fri Apr 17 15:43:57 2026 by rpki-client