$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: dIu/bV3v56bpYzO9+hmB8lhhEQqjibbtL9UcJlpVr8c= Subject key identifier: B5:2D:AA:20:45:23:15:99:7C:41:E4:DB:BE:FC:25:FE:CC:93:55:DD Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0D8E Signing time: Sat 18 Apr 2026 17:52:04 +0000 Manifest this update: Sat 18 Apr 2026 17:52:03 +0000 Manifest next update: Sat 25 Apr 2026 17:52:03 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: dQftq+vixjGZJ7A+nk/bgC08ZR59kN4YRX8MNkzaL4E=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3485 (0xd9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Apr 18 17:52:03 2026 GMT Not After : Apr 25 17:52:03 2026 GMT Subject: CN=69e3c4c4-7f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:98:b3:be:e3:44:47:85:a9:b8:fa:59:5a: f8:97:b9:b3:71:63:41:20:c8:4b:0c:5c:49:76:11: 04:57:44:fa:65:e9:f4:f0:f1:aa:76:33:f9:b5:5d: b2:cc:51:24:05:aa:22:6f:cf:23:14:62:b0:4e:aa: 81:9c:58:09:15:4e:72:14:be:16:81:ee:63:50:61: 70:31:4d:1a:e7:66:7f:d6:22:bf:95:88:f1:10:64: e0:0d:29:43:e7:e3:59:35:06:12:14:77:92:4c:a8: 12:b6:c0:08:25:0b:b4:96:a0:3e:11:a8:10:df:03: 30:0b:5c:34:a3:6b:6e:54:fe:ac:23:7a:8b:d9:2c: 46:2e:54:a3:69:3e:4e:63:4d:d5:b4:26:3a:16:19: 67:1f:b1:a6:34:8c:c9:93:c1:0f:63:d0:3d:73:1c: 4b:a3:15:41:ae:e3:b7:5f:9c:e4:23:58:d9:63:40: 2c:5b:6e:86:05:60:75:ba:eb:57:95:15:ea:6a:33: 38:f8:e7:8f:2b:8f:25:ed:81:a0:fa:24:31:60:74: 0f:43:93:4d:5c:e7:38:e9:6d:58:c6:06:fd:6d:f5: 49:ae:ff:2c:4c:43:c3:92:28:e6:8b:85:9e:91:7f: f7:6a:dd:b5:67:e0:aa:65:63:54:07:bd:90:8e:3e: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2D:AA:20:45:23:15:99:7C:41:E4:DB:BE:FC:25:FE:CC:93:55:DD X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:76:97:db:02:70:56:87:55:07:2f:b1:19:a5:9f:c6:7e:48: 81:8f:21:cb:24:a3:55:3d:57:6d:6e:e0:3d:c3:c1:9c:a8:d7: ae:54:77:bc:4a:05:53:90:f9:18:73:4c:12:56:ef:1d:d3:70: 2e:82:35:5d:82:2c:5c:0f:01:99:1c:25:59:9e:11:ed:4e:a9: 9b:f7:a0:53:9e:24:ea:85:ce:c5:33:03:ad:68:4c:96:ee:1b: 9b:db:7f:fb:5e:b0:df:c2:c4:ec:62:6e:e1:be:d6:2a:9d:82: e8:46:de:09:c0:77:25:02:85:df:42:30:d1:27:c4:44:5b:a1: 8b:8b:3f:f3:4e:23:3d:e2:33:01:1a:b6:e5:a3:6a:42:fc:4f: e6:38:f5:2f:8f:e4:ce:a3:40:9d:bf:fb:e9:11:29:8e:a7:36: a6:af:bd:a1:df:87:88:b6:2f:e2:a3:f1:4f:44:f7:c3:2e:37: cf:bf:49:95:30:a6:8e:77:c1:0f:58:bd:1f:33:9b:7c:d8:32: 35:65:6b:a2:d0:bb:72:40:cc:f3:b1:c6:1c:7c:22:64:c0:c8: 51:66:4d:27:cb:7f:c4:05:16:e6:1a:c8:68:36:e9:96:23:71: 6b:4e:9e:22:6d:3d:c2:bc:a2:60:10:88:d7:3e:a7:7c:22:6b: 2b:65:5b:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjYwNDE4MTc1MjAzWhcNMjYwNDI1MTc1MjAzWjAYMRYwFAYD VQQDEw02OWUzYzRjNC03ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmeYs77jREeFqbj6WVr4l7mzcWNBIMhLDFxJdhEEV0T6Zen08PGqdjP5tV2y zFEkBaoib88jFGKwTqqBnFgJFU5yFL4Wge5jUGFwMU0a52Z/1iK/lYjxEGTgDSlD 5+NZNQYSFHeSTKgStsAIJQu0lqA+EagQ3wMwC1w0o2tuVP6sI3qL2SxGLlSjaT5O Y03VtCY6FhlnH7GmNIzJk8EPY9A9cxxLoxVBruO3X5zkI1jZY0AsW26GBWB1uutX lRXqajM4+OePK48l7YGg+iQxYHQPQ5NNXOc46W1Yxgb9bfVJrv8sTEPDkijmi4We kX/3at21Z+CqZWNUB72Qjj7qQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUtqiBF IxWZfEHk2778Jf7Mk1XdMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaHaX2wJwVodVBy+xGaWfxn5IgY8hyySjVT1XbW7gPcPBnKjXrlR3vEoFU5D5 GHNMElbvHdNwLoI1XYIsXA8BmRwlWZ4R7U6pm/egU54k6oXOxTMDrWhMlu4bm9t/ +16w38LE7GJu4b7WKp2C6EbeCcB3JQKF30Iw0SfERFuhi4s/804jPeIzARq25aNq QvxP5jj1L4/kzqNAnb/76REpjqc2pq+9od+HiLYv4qPxT0T3wy43z79JlTCmjnfB D1i9HzObfNgyNWVrotC7ckDM87HGHHwiZMDIUWZNJ8t/xAUW5hrIaDbpliNxa06e Im09wryiYBCI1z6nfCJrK2VbYw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:30 2026 by rpki-client