$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: 7JDKeLgVb1BdpAjfN/PnZNYcGfNAaTxRYgTljM/dFHk= Subject key identifier: EB:71:CE:3A:FE:C2:F2:28:44:C1:AD:A0:7E:6F:15:D4:9B:7B:60:34 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 0200 Signing time: Fri 17 Apr 2026 02:54:15 +0000 Manifest this update: Fri 17 Apr 2026 02:54:14 +0000 Manifest next update: Fri 24 Apr 2026 02:54:14 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: HNdumYkqGFELDlEIPWT7AOX0Dwh6I/e/3v25IfHTn9U=) 2: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=) 3: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=) 4: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=) 5: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Apr 17 02:54:14 2026 GMT Not After : Apr 24 02:54:14 2026 GMT Subject: CN=69e1a0d7-4db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:bb:ce:9e:4e:dd:e7:94:6c:d6:5c:67:a6: 1a:46:eb:d5:59:28:c2:05:d5:92:1a:af:ee:0a:bf: 82:7d:d1:86:8c:d0:35:d3:e6:82:42:83:e2:e2:3e: f6:27:6a:85:1a:b6:90:e9:18:0b:31:7a:36:8e:45: 48:31:06:62:d7:8c:f7:e6:02:2b:ef:d5:87:98:4f: 64:c8:c6:0a:42:d8:06:a3:81:db:a7:67:26:b5:64: 14:ca:a4:ed:0d:17:18:f1:6c:bf:ff:89:8c:5d:ec: 3a:dc:9e:66:39:16:33:e0:c2:5f:36:3d:0b:47:b0: 62:ec:55:4a:4b:50:23:3b:f4:01:5a:2e:20:f2:6d: b1:98:31:2d:cb:67:75:8f:dd:19:db:4e:dc:13:be: d2:c4:62:a2:54:7c:e2:b4:63:32:78:17:7c:a8:0f: d2:87:0d:99:b3:ab:d4:e5:d2:bf:36:02:e9:5c:c3: 36:73:a5:d9:a1:62:e2:aa:46:ef:8a:f2:73:a5:bd: 40:17:a7:27:f0:d7:52:2e:c6:45:09:d9:2a:d3:bf: c0:10:05:c0:27:61:c8:e2:52:f8:44:8a:c1:3c:f6: 50:4e:e9:4b:ab:f2:6a:fd:ae:1a:d0:f6:36:b2:5c: e8:67:44:cd:9c:2a:73:d8:68:16:73:20:a4:37:62: 9f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:71:CE:3A:FE:C2:F2:28:44:C1:AD:A0:7E:6F:15:D4:9B:7B:60:34 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:df:f4:c0:bb:b5:35:ab:72:37:2d:d6:c5:3a:29:ab:29:b9: 4c:a1:a4:11:a7:c8:06:6b:dd:5b:36:ca:96:e4:01:04:cb:1c: 3d:c5:f6:d4:74:2c:e6:d2:4f:75:ff:0b:f3:e8:5a:15:e9:35: 8a:77:6a:96:5b:1a:aa:a0:74:78:04:74:a5:79:9f:0c:1c:f7: 1c:ce:61:22:1f:65:b0:cf:1b:f9:49:31:27:0a:48:cd:66:9f: ce:78:72:4e:5b:ea:73:37:f7:fa:b1:e5:97:61:0b:76:3f:e3: 3d:bf:c8:d6:c5:d6:59:69:41:f0:08:e6:91:fd:30:d1:8b:eb: 7c:45:45:29:54:35:28:8d:ed:f0:2f:d7:bc:7a:b3:e8:ff:94: 1f:02:4d:63:90:2c:4f:f1:5c:35:19:57:08:98:89:a4:89:5e: c9:cf:e1:5c:19:60:2b:80:23:55:11:eb:46:bb:9c:cd:83:b9: ea:32:36:b0:86:3b:e3:ea:f7:ac:c0:87:b1:22:86:d5:2f:f1: b3:16:4c:ef:ed:e8:16:5a:ae:51:4c:60:8f:fd:16:0e:7f:5c: 33:7f:4e:7b:9f:f2:21:86:7d:bd:9d:a8:50:19:14:e8:40:f0: 55:91:18:14:ee:ec:c9:c6:3a:83:00:2b:8e:c8:a6:7f:35:f5: 2d:13:32:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjYwNDE3MDI1NDE0WhcNMjYwNDI0MDI1NDE0WjAYMRYwFAYD VQQDEw02OWUxYTBkNy00ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/27zp5O3eeUbNZcZ6YaRuvVWSjCBdWSGq/uCr+CfdGGjNA10+aCQoPi4j72 J2qFGraQ6RgLMXo2jkVIMQZi14z35gIr79WHmE9kyMYKQtgGo4Hbp2cmtWQUyqTt DRcY8Wy//4mMXew63J5mORYz4MJfNj0LR7Bi7FVKS1AjO/QBWi4g8m2xmDEty2d1 j90Z207cE77SxGKiVHzitGMyeBd8qA/Shw2Zs6vU5dK/NgLpXMM2c6XZoWLiqkbv ivJzpb1AF6cn8NdSLsZFCdkq07/AEAXAJ2HI4lL4RIrBPPZQTulLq/Jq/a4a0PY2 slzoZ0TNnCpz2GgWcyCkN2KfTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtxzjr+ wvIoRMGtoH5vFdSbe2A0MB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0d/0wLu1NatyNy3WxTopqym5TKGkEafIBmvdWzbKluQBBMscPcX21HQs5tJP df8L8+haFek1indqllsaqqB0eAR0pXmfDBz3HM5hIh9lsM8b+UkxJwpIzWafznhy Tlvqczf3+rHll2ELdj/jPb/I1sXWWWlB8Ajmkf0w0YvrfEVFKVQ1KI3t8C/XvHqz 6P+UHwJNY5AsT/FcNRlXCJiJpIleyc/hXBlgK4AjVRHrRruczYO56jI2sIY74+r3 rMCHsSKG1S/xsxZM7+3oFlquUUxgj/0WDn9cM39Oe5/yIYZ9vZ2oUBkU6EDwVZEY FO7sycY6gwArjsimfzX1LRMyDA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:15 2026 by rpki-client