$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft File: aLMj2oThIFRmzrWv19YHcmdbBTE.mft (raw, json) Hash identifier: OZ2T11snu4s6qikDCIzzwMDQycOpFkF3KU1euYUf50E= Subject key identifier: CA:AC:B8:E0:70:44:07:65:43:5F:EC:2F:C9:94:50:1B:2E:9F:D4:41 Authority key identifier: 68:B3:23:DA:84:E1:20:54:66:CE:B5:AF:D7:D6:07:72:67:5B:05:31 Certificate issuer: /CN=A91CD40B/serialNumber=68B323DA84E1205466CEB5AFD7D60772675B0531 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLMj2oThIFRmzrWv19YHcmdbBTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft Manifest number: 011F Signing time: Fri 17 Apr 2026 05:25:41 +0000 Manifest this update: Fri 17 Apr 2026 05:25:40 +0000 Manifest next update: Fri 24 Apr 2026 05:25:40 +0000 Files and hashes: 1: aLMj2oThIFRmzrWv19YHcmdbBTE.crl (hash: XrypCJTXgrqHk/g87X/YzqTEngeQ4wCqbtofig6JvmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.crl rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLMj2oThIFRmzrWv19YHcmdbBTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD40B, serialNumber=68B323DA84E1205466CEB5AFD7D60772675B0531 Validity Not Before: Apr 17 05:25:40 2026 GMT Not After : Apr 24 05:25:40 2026 GMT Subject: CN=69e1c455-6803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:d9:fb:97:3b:e8:a4:60:37:63:c5:83:0a: 06:6a:0b:62:25:75:15:46:70:07:71:d0:11:69:98: 67:04:48:f1:39:a4:a3:29:7f:bc:0c:8a:2c:60:ca: 04:fb:fa:23:bc:df:72:8b:6d:a3:79:c4:8e:62:28: 28:80:1c:0f:d6:42:84:f3:9d:51:e0:74:7e:20:0e: 03:59:fc:df:ec:cb:eb:f7:89:cd:48:85:6e:20:c0: 09:e6:99:f8:43:5b:1c:e3:09:b0:9c:74:d4:a8:6a: 7b:e4:34:bb:33:54:3e:f0:da:44:86:80:e7:02:8d: 86:2b:f9:9d:d7:ea:fe:95:c6:2f:50:11:80:a2:8b: e1:27:ff:b4:01:ed:5b:fa:1b:34:b1:03:f0:51:66: 47:f3:69:90:7e:7b:0b:49:74:47:ca:e9:70:2c:6c: aa:75:80:ac:db:f6:25:d0:69:14:0f:48:f8:4b:15: 11:6f:10:0f:86:98:c3:b5:60:f7:11:95:da:11:68: 21:74:06:5e:44:0c:66:58:64:95:45:3e:ef:f0:41: ba:50:85:0c:60:48:35:b6:7c:d5:79:86:57:7c:0a: a2:12:43:67:a9:ce:56:26:2f:55:85:50:6c:f1:51: 4a:fb:2d:35:65:65:c1:3b:e0:c5:eb:d0:dd:c9:85: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:B8:E0:70:44:07:65:43:5F:EC:2F:C9:94:50:1B:2E:9F:D4:41 X509v3 Authority Key Identifier: keyid:68:B3:23:DA:84:E1:20:54:66:CE:B5:AF:D7:D6:07:72:67:5B:05:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLMj2oThIFRmzrWv19YHcmdbBTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:56:12:31:d3:ad:8c:e1:3a:b3:01:e0:32:4e:c5:58:9e:08: a0:c2:26:f4:f6:8b:e8:b7:75:dd:96:ea:06:28:2a:24:b1:f3: cc:43:2f:1c:15:11:16:74:b1:40:b3:d3:e0:f9:41:2a:41:68: 78:03:97:4c:b2:e7:45:65:35:43:65:88:9f:36:63:22:79:e3: 21:7d:15:45:3f:4d:79:80:4e:62:78:f2:a5:0e:23:73:b1:77: 8e:f4:d3:71:40:59:a4:5e:ff:3d:67:bb:26:e1:2e:a6:32:4b: d3:67:88:a5:4f:09:b4:4c:f8:6b:95:7f:65:b6:cd:a6:78:a4: ac:c4:38:b4:f7:6b:52:51:f1:e1:f6:29:d8:04:6f:5c:77:2d: 51:67:5c:20:c7:df:3d:6e:93:27:80:24:49:1d:b8:14:4b:76: 0f:15:16:d0:0e:d6:7b:4d:db:ac:8a:e1:b3:78:b0:49:b7:97: 5f:6a:3b:aa:f7:99:b7:33:ce:aa:47:12:25:94:a5:5c:ff:d1: 1c:dc:e0:f2:39:ed:c7:84:6a:85:b9:dd:d5:31:d3:80:14:4c: 1f:ff:86:9e:b0:92:62:6c:a7:9d:cf:e2:c2:38:c0:78:7d:0a: 73:de:f7:27:48:b7:7c:db:85:6d:93:77:6a:dc:7a:11:5a:8f: a7:73:24:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0MEIxMTAvBgNVBAUTKDY4QjMyM0RBODRFMTIwNTQ2NkNFQjVBRkQ3RDYwNzcy Njc1QjA1MzEwHhcNMjYwNDE3MDUyNTQwWhcNMjYwNDI0MDUyNTQwWjAYMRYwFAYD VQQDEw02OWUxYzQ1NS02ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPDZ+5c76KRgN2PFgwoGagtiJXUVRnAHcdARaZhnBEjxOaSjKX+8DIosYMoE +/ojvN9yi22jecSOYigogBwP1kKE851R4HR+IA4DWfzf7Mvr94nNSIVuIMAJ5pn4 Q1sc4wmwnHTUqGp75DS7M1Q+8NpEhoDnAo2GK/md1+r+lcYvUBGAoovhJ/+0Ae1b +hs0sQPwUWZH82mQfnsLSXRHyulwLGyqdYCs2/Yl0GkUD0j4SxURbxAPhpjDtWD3 EZXaEWghdAZeRAxmWGSVRT7v8EG6UIUMYEg1tnzVeYZXfAqiEkNnqc5WJi9VhVBs 8VFK+y01ZWXBO+DF69DdyYWMLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqsuOBw RAdlQ1/sL8mUUBsun9RBMB8GA1UdIwQYMBaAFGizI9qE4SBUZs61r9fWB3JnWwUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDQwQi83NDFBMUUyQzg1 NUIxMUVGQjA1NzZENDBDNEY5QUUwMi9hTE1qMm9UaElGUm16cld2MTlZSGNtZGJC VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMTWoyb1RoSUZSbXpyV3YxOVlIY21kYkJURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDQwQi83NDFBMUUyQzg1NUIxMUVGQjA1NzZENDBDNEY5QUUwMi9hTE1qMm9UaElG Um16cld2MTlZSGNtZGJCVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN1YSMdOtjOE6swHgMk7FWJ4IoMIm9PaL6Ld13ZbqBigqJLHzzEMvHBURFnSx QLPT4PlBKkFoeAOXTLLnRWU1Q2WInzZjInnjIX0VRT9NeYBOYnjypQ4jc7F3jvTT cUBZpF7/PWe7JuEupjJL02eIpU8JtEz4a5V/ZbbNpnikrMQ4tPdrUlHx4fYp2ARv XHctUWdcIMffPW6TJ4AkSR24FEt2DxUW0A7We03brIrhs3iwSbeXX2o7qveZtzPO qkcSJZSlXP/RHNzg8jntx4Rqhbnd1THTgBRMH/+GnrCSYmynnc/iwjjAeH0Kc973 J0i3fNuFbZN3atx6EVqPp3MkJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:28:14 2026 by rpki-client