$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: HoFSorSW15O8QT5rnL0Liw4k/Eo5BHWvsqVKufzZetI= Subject key identifier: E2:84:51:D1:FC:04:CA:BF:B9:C2:19:7D:90:F5:1F:A2:91:A9:5A:20 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 0224 Signing time: Fri 17 Apr 2026 02:28:50 +0000 Manifest this update: Fri 17 Apr 2026 02:28:50 +0000 Manifest next update: Fri 24 Apr 2026 02:28:50 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: YaZUGL2v87M93eF5IzDXVcetBA/rq0NKlAN7Ztn9vQ0=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: 93lqVQhsdgkNqe+QLKSt6rzwX0cHhLHTkYfLV3iVFU8=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 5THegraPgMqqp6VrhQyR4hOqJ9d+jYAhvqCx1inYwhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Apr 17 02:28:50 2026 GMT Not After : Apr 24 02:28:50 2026 GMT Subject: CN=69e19ae2-933a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:07:33:44:b9:f3:8a:0c:e5:67:11:dc:f6: cd:2d:7e:4c:2b:8c:52:f6:57:1d:13:6b:49:c7:b0: 9f:e4:2a:06:77:d8:97:b7:c4:85:57:aa:d9:ae:c5: a6:17:81:41:56:f5:42:73:5f:83:69:c9:41:7c:12: 9f:a2:2d:f0:88:d1:b6:86:e0:45:6a:3c:43:37:75: 53:8f:2e:7f:7c:93:dd:ba:bc:1f:56:d7:b9:28:90: 9b:b1:e6:e9:03:48:1f:43:c3:e1:c3:90:79:fd:2c: 05:5e:af:d1:f3:66:5d:b5:6f:cf:2f:ff:40:66:2b: 87:f2:01:e5:5c:e7:52:19:23:0e:03:09:d8:b8:49: 5c:bc:6f:31:fd:62:36:e8:8b:1f:1d:f0:97:98:38: c9:f3:55:ac:1b:a3:70:2e:de:ac:a1:0f:99:8e:83: 40:9e:da:bb:c7:8f:f3:3d:3a:44:03:26:e2:31:63: 14:b1:0f:db:9a:5a:0a:c0:3f:88:6a:68:b2:ce:83: 0b:d3:3b:da:47:5f:8d:f6:b3:4b:29:01:db:26:40: cd:3c:a0:e7:2d:b4:d9:71:1e:c7:1c:10:77:bd:29: 94:b0:d1:42:b4:b4:51:d6:00:de:eb:06:1b:ff:5f: 5d:94:3f:de:b1:65:be:88:5e:62:68:d3:ce:5c:1c: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:84:51:D1:FC:04:CA:BF:B9:C2:19:7D:90:F5:1F:A2:91:A9:5A:20 X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:25:b2:15:55:b1:ca:2f:e6:5c:d9:95:2b:44:fc:ed:0e:ca: ba:52:51:dc:e2:b8:9a:65:a1:ee:bd:1e:46:3b:15:79:2f:14: 43:95:44:6d:62:b2:bd:6e:e5:12:32:e9:54:be:00:a4:69:4c: 8f:93:e2:44:81:c1:cd:f3:e0:5a:8c:4a:75:32:69:64:3b:0c: ca:ab:23:7d:67:c9:1e:ac:3e:43:f3:bb:d5:dc:4c:ab:8f:31: 21:15:b0:97:ef:b9:67:3b:be:e3:c9:56:7a:dc:0a:81:39:be: c8:97:2a:49:62:8f:39:08:a6:f9:5c:4f:3b:b3:74:1e:83:5a: 1f:91:09:25:b3:e2:b3:c7:41:2d:38:6e:54:ff:09:9c:ac:0e: f0:e6:b7:87:d4:8b:f8:77:38:31:c9:90:c4:55:43:b7:5f:92: ce:8a:c1:c8:4f:36:bd:be:13:aa:6f:a8:d0:f8:6f:75:35:e0: 11:92:1e:c9:0f:a7:84:43:23:35:e0:f6:e3:9b:ca:32:92:34: a6:21:54:27:2d:5f:e0:f0:64:3d:5c:11:d1:0b:76:2a:24:fe: 5f:6a:1b:59:89:27:87:50:ad:43:5c:60:55:ef:55:a5:58:36: 07:b6:3c:5f:90:a7:bf:ef:35:7c:4e:8e:b7:32:a9:42:ff:f0: b7:85:b6:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjYwNDE3MDIyODUwWhcNMjYwNDI0MDIyODUwWjAYMRYwFAYD VQQDEw02OWUxOWFlMi05MzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5wHM0S584oM5WcR3PbNLX5MK4xS9lcdE2tJx7Cf5CoGd9iXt8SFV6rZrsWm F4FBVvVCc1+DaclBfBKfoi3wiNG2huBFajxDN3VTjy5/fJPdurwfVte5KJCbsebp A0gfQ8Phw5B5/SwFXq/R82ZdtW/PL/9AZiuH8gHlXOdSGSMOAwnYuElcvG8x/WI2 6IsfHfCXmDjJ81WsG6NwLt6soQ+ZjoNAntq7x4/zPTpEAybiMWMUsQ/bmloKwD+I amiyzoML0zvaR1+N9rNLKQHbJkDNPKDnLbTZcR7HHBB3vSmUsNFCtLRR1gDe6wYb /19dlD/esWW+iF5iaNPOXBwNYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKEUdH8 BMq/ucIZfZD1H6KRqVogMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCWyFVWxyi/mXNmVK0T87Q7KulJR3OK4mmWh7r0eRjsVeS8UQ5VEbWKyvW7l EjLpVL4ApGlMj5PiRIHBzfPgWoxKdTJpZDsMyqsjfWfJHqw+Q/O71dxMq48xIRWw l++5Zzu+48lWetwKgTm+yJcqSWKPOQim+VxPO7N0HoNaH5EJJbPis8dBLThuVP8J nKwO8Oa3h9SL+Hc4McmQxFVDt1+SzorByE82vb4Tqm+o0PhvdTXgEZIeyQ+nhEMj NeD245vKMpI0piFUJy1f4PBkPVwR0Qt2KiT+X2obWYknh1CtQ1xgVe9VpVg2B7Y8 X5Cnv+81fE6OtzKpQv/wt4W2EQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:44 2026 by rpki-client