$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json) Hash identifier: NNeK16VMaBq7woqtSp9q8YRqtmYCS++jx1qUaMCmKA8= Subject key identifier: 7F:69:57:33:EF:A9:B6:47:F3:ED:57:A6:08:24:8D:5E:5C:13:97:14 Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft Manifest number: 01A2 Signing time: Thu 16 Apr 2026 19:50:39 +0000 Manifest this update: Thu 16 Apr 2026 19:50:39 +0000 Manifest next update: Thu 23 Apr 2026 19:50:39 +0000 Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: q+XYiwKaQFWT/59qUN36YNA6L77vw4qfkekgf21pH9s=) 2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: lwkdt0p18j+EGoMj/NlkIlwaZeWIUPoZjTEhgtn7WSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Apr 16 19:50:39 2026 GMT Not After : Apr 23 19:50:39 2026 GMT Subject: CN=69e13d8f-2c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:92:51:55:0e:82:e4:75:df:db:4b:47:d9: 2d:1b:35:6c:40:16:b2:db:f8:36:90:67:37:74:d3: 96:d3:5e:06:6d:0c:3e:5f:07:9f:31:12:51:cb:00: 6e:7e:b5:83:db:32:97:94:46:98:a6:71:fc:15:97: 77:e4:63:0c:c2:29:b9:75:fe:43:80:16:d8:1b:d9: c1:ce:d7:f7:72:4d:6e:77:58:52:a0:73:e1:e9:06: b7:79:bf:f8:85:ec:b6:76:6d:69:6b:33:f5:b1:7c: 82:34:c0:e4:24:a1:d3:82:36:21:d7:83:7d:79:65: 56:5b:f6:a3:28:23:ee:b9:c0:54:ec:2c:05:cb:1d: ad:1f:41:5f:05:41:87:71:21:cd:54:06:75:c7:84: 4a:dd:8d:7e:87:78:38:39:e4:34:bf:8c:01:9f:3a: 46:20:b5:94:96:1e:a4:57:96:3d:c7:0a:44:78:3e: 27:ff:5c:d1:7d:a3:71:06:32:e4:ea:78:14:46:b9: 5b:11:5a:7b:f2:cf:81:60:ad:27:9e:c5:3b:2f:91: 74:8f:ac:92:26:b8:e8:5b:6a:0e:62:67:ec:0d:28: ad:85:4b:71:3d:7a:d8:1b:c4:31:6a:63:ba:d0:ba: 1d:cf:88:ad:22:f4:82:e0:86:32:25:23:0d:2c:a7: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:57:33:EF:A9:B6:47:F3:ED:57:A6:08:24:8D:5E:5C:13:97:14 X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:59:05:6b:ec:d1:ee:ee:eb:9b:ae:44:08:6e:32:57:fc:a2: a2:60:c5:b8:9f:57:ff:f6:14:a6:85:da:cb:31:d6:b3:36:3d: 9d:18:49:21:86:f2:a4:40:a1:62:65:c2:11:97:61:09:83:9f: f9:8a:7f:71:31:42:aa:e9:22:0c:33:5f:9a:2d:8d:5a:34:d3: 65:be:d5:b1:4b:5a:b7:34:91:c0:9b:43:39:d8:da:86:ec:6c: 93:34:1f:d2:6a:1c:6b:3d:ca:15:f9:5e:fa:70:d7:0e:be:19: c0:4a:96:a9:a6:11:85:39:b1:f4:fa:94:85:1a:60:a7:94:07: 29:e8:27:02:79:02:af:51:46:d7:92:58:82:b9:37:5e:c0:20: 53:8f:af:d5:3f:29:22:ee:8e:6a:7d:85:83:13:d5:38:cd:81: 27:12:7a:6a:a6:d4:5b:f3:88:bc:60:01:33:f3:b8:4b:0d:1a: fc:54:0a:7b:11:a9:b9:7a:25:c3:3d:1c:86:9c:6b:d4:c2:35: 96:0d:a2:ba:22:7b:41:9c:f8:b7:6f:c6:44:a1:e9:55:7d:68: 27:64:45:ba:70:35:05:b3:d2:07:d5:1c:65:22:54:94:a6:3e: 93:9a:1b:80:a2:5c:4d:95:58:1a:11:74:62:6a:a5:fd:eb:05: e6:03:25:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjYwNDE2MTk1MDM5WhcNMjYwNDIzMTk1MDM5WjAYMRYwFAYD VQQDEw02OWUxM2Q4Zi0yYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVSSUVUOguR139tLR9ktGzVsQBay2/g2kGc3dNOW014GbQw+XwefMRJRywBu frWD2zKXlEaYpnH8FZd35GMMwim5df5DgBbYG9nBztf3ck1ud1hSoHPh6Qa3eb/4 hey2dm1pazP1sXyCNMDkJKHTgjYh14N9eWVWW/ajKCPuucBU7CwFyx2tH0FfBUGH cSHNVAZ1x4RK3Y1+h3g4OeQ0v4wBnzpGILWUlh6kV5Y9xwpEeD4n/1zRfaNxBjLk 6ngURrlbEVp78s+BYK0nnsU7L5F0j6ySJrjoW2oOYmfsDSithUtxPXrYG8QxamO6 0Lodz4itIvSC4IYyJSMNLKcw9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9pVzPv qbZH8+1XpggkjV5cE5cUMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JX VFR3ODNybmdkR2RHNzBLUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaFkFa+zR7u7rm65ECG4yV/yiomDFuJ9X//YUpoXayzHWszY9nRhJIYbypECh YmXCEZdhCYOf+Yp/cTFCqukiDDNfmi2NWjTTZb7VsUtatzSRwJtDOdjahuxskzQf 0mocaz3KFfle+nDXDr4ZwEqWqaYRhTmx9PqUhRpgp5QHKegnAnkCr1FG15JYgrk3 XsAgU4+v1T8pIu6Oan2FgxPVOM2BJxJ6aqbUW/OIvGABM/O4Sw0a/FQKexGpuXol wz0chpxr1MI1lg2iuiJ7QZz4t2/GRKHpVX1oJ2RFunA1BbPSB9UcZSJUlKY+k5ob gKJcTZVYGhF0Ymql/esF5gMlEw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:49:09 2026 by rpki-client