$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: oQ7LWcV2mtVI2tAPFhp+dko86h/Rt0aQPPMGNY9z6L8= Subject key identifier: 2D:8D:20:F3:F2:22:1F:D4:E1:04:53:08:CD:8B:BB:77:CB:7D:C1:60 Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0D5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0D41 Signing time: Thu 16 Apr 2026 17:59:02 +0000 Manifest this update: Thu 16 Apr 2026 17:59:01 +0000 Manifest next update: Thu 23 Apr 2026 17:59:01 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: kXwtF/RfUSqdY+m7Bcr/yG8bMXBvICOc9d+nBNWlM4Y=) 2: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Pvc5GDrJlGSuNYbRyBpLm6q2hwwEqbNDXIDKhGgHHek=) 3: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: bMVnErmgRlLugY09+B5/egD11gP2CX9LPToXy6tEisU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3421 (0xd5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Apr 16 17:59:01 2026 GMT Not After : Apr 23 17:59:01 2026 GMT Subject: CN=69e12366-b920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:91:33:a5:9b:77:33:17:82:03:10:ba:84: 1a:48:6f:9f:cc:eb:b3:1e:c1:17:dc:44:9f:15:74: b1:92:ca:5c:1a:00:b7:27:53:9d:38:58:38:71:20: 4b:95:44:e2:ee:5f:7c:3c:42:8d:e6:ef:16:f5:a7: 0e:dc:9e:ad:1a:6b:20:26:9c:fa:6d:27:a5:97:2c: 8e:89:ee:e3:eb:3c:d8:52:23:ad:59:c9:32:fa:93: 59:0e:4a:dd:a9:78:14:4e:3e:a2:d5:be:22:a8:22: c0:07:8d:00:70:65:35:37:cf:03:a1:ed:78:4f:c1: 17:12:55:6a:75:7f:26:65:c9:21:49:dd:10:56:23: 37:8c:05:f9:c5:c1:95:9d:5d:23:fc:6a:b9:83:66: 1b:6e:d7:5e:5f:20:0f:10:48:61:0a:f1:26:be:c2: 06:ae:f0:16:17:fe:91:f6:27:01:ec:25:7e:90:bd: f5:3c:64:26:26:23:28:c9:d7:9f:ae:5e:fa:58:30: 95:1f:11:54:fd:a8:cf:d0:bb:45:aa:36:1f:0c:d4: 1f:8b:f6:57:2b:b3:52:7e:c0:61:6d:16:82:4b:2f: d0:29:65:fe:64:83:46:3f:0c:7c:db:60:e7:ac:e6: 34:b1:66:c1:f0:93:c8:84:2d:41:9a:17:e0:f1:b2: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8D:20:F3:F2:22:1F:D4:E1:04:53:08:CD:8B:BB:77:CB:7D:C1:60 X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:07:cc:58:83:e5:30:eb:83:17:1f:67:94:7c:b8:6e:71:ee: a4:e6:83:24:22:1c:f2:25:88:09:43:50:c8:af:45:2c:a2:35: 47:32:a0:30:ca:a8:8b:02:f2:10:19:f6:cf:85:e7:cb:51:67: 74:da:8f:f0:37:45:4a:a6:e4:7f:4e:19:00:8d:ed:56:21:04: 95:8c:2a:51:c4:1e:a0:69:13:9c:64:da:ff:dd:0f:83:02:2c: 4c:06:2f:fe:da:f5:3b:6e:0d:3a:31:ab:c1:4c:40:a2:fa:3b: 92:f2:b3:67:48:79:c1:63:a4:f5:1d:d1:bc:34:81:b5:21:03: b3:09:6d:4b:cf:52:d2:ef:40:68:39:f9:55:60:5e:31:cc:29: 64:57:76:6a:6c:5d:94:f9:c5:52:7c:df:3c:02:15:b1:2c:26: d7:ab:91:19:c3:33:a0:57:b1:f6:57:da:da:78:36:ef:b8:dc: e2:01:11:ad:e6:13:af:d7:ae:43:0a:e4:35:24:8a:03:ed:8c: 5c:f0:db:34:6a:08:7e:83:2c:80:4d:71:eb:93:e6:18:3b:4c: 37:4d:74:62:de:5e:6c:05:b0:2f:2f:03:71:c2:d2:47:a8:bf: e3:0b:98:6c:10:98:3f:23:af:21:99:a6:19:82:c0:50:a6:5c: 4d:05:1f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjYwNDE2MTc1OTAxWhcNMjYwNDIzMTc1OTAxWjAYMRYwFAYD VQQDEw02OWUxMjM2Ni1iOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoASRM6WbdzMXggMQuoQaSG+fzOuzHsEX3ESfFXSxkspcGgC3J1OdOFg4cSBL lUTi7l98PEKN5u8W9acO3J6tGmsgJpz6bSellyyOie7j6zzYUiOtWcky+pNZDkrd qXgUTj6i1b4iqCLAB40AcGU1N88Doe14T8EXElVqdX8mZckhSd0QViM3jAX5xcGV nV0j/Gq5g2YbbtdeXyAPEEhhCvEmvsIGrvAWF/6R9icB7CV+kL31PGQmJiMoydef rl76WDCVHxFU/ajP0LtFqjYfDNQfi/ZXK7NSfsBhbRaCSy/QKWX+ZINGPwx822Dn rOY0sWbB8JPIhC1Bmhfg8bI2kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2NIPPy Ih/U4QRTCM2Lu3fLfcFgMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABQfMWIPlMOuDFx9nlHy4bnHupOaDJCIc8iWICUNQyK9FLKI1RzKgMMqoiwLy EBn2z4Xny1FndNqP8DdFSqbkf04ZAI3tViEElYwqUcQeoGkTnGTa/90PgwIsTAYv /tr1O24NOjGrwUxAovo7kvKzZ0h5wWOk9R3RvDSBtSEDswltS89S0u9AaDn5VWBe McwpZFd2amxdlPnFUnzfPAIVsSwm16uRGcMzoFex9lfa2ng277jc4gERreYTr9eu QwrkNSSKA+2MXPDbNGoIfoMsgE1x65PmGDtMN010Yt5ebAWwLy8DccLSR6i/4wuY bBCYPyOvIZmmGYLAUKZcTQUfew== -----END CERTIFICATE-----Generated at Fri Apr 17 12:09:11 2026 by rpki-client