$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: CUmrUyWNu4Pr4awCv56wwFZ5KgnVXc/iCYxEhzjNZYQ= Subject key identifier: 35:D6:D6:CB:E0:9A:3A:47:6D:27:45:28:30:78:44:98:CE:63:C1:F1 Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 37 Signing time: Fri 17 Apr 2026 08:19:47 +0000 Manifest this update: Fri 17 Apr 2026 08:19:46 +0000 Manifest next update: Fri 24 Apr 2026 08:19:46 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: aHjAVL0W5/P8nB3/1lW5Iyrsc7YqvG2gMYC1BiX6EiM=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Apr 17 08:19:46 2026 GMT Not After : Apr 24 08:19:46 2026 GMT Subject: CN=69e1ed23-158d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:30:ba:80:cf:d7:47:5b:da:ed:12:d4:29:80: a7:0b:53:75:8e:2b:19:b3:9b:b2:0e:d3:dc:eb:02: b9:fe:ce:54:d0:7a:45:ff:c8:15:61:df:53:9e:83: fb:7c:65:b9:ab:3b:9f:e7:6d:1c:3a:c6:37:65:10: 0a:60:c4:59:82:fb:a3:7d:6a:d9:64:31:38:cc:ab: fe:37:9e:f1:e8:cd:33:53:b7:72:47:bd:19:9b:7d: 3e:6c:e7:f0:1c:79:7a:67:ee:3a:b3:8a:7c:2b:e7: ef:5b:30:02:c0:2d:aa:8d:72:0f:07:d2:5d:ed:a5: 25:d6:ca:3f:47:34:7d:ae:c7:55:3b:41:b2:fd:e6: 5d:d5:00:c2:2d:6a:3a:fd:37:76:5b:6e:98:00:34: dd:3b:3b:63:29:ac:7d:ad:6d:7c:4b:fc:5d:20:8c: 3e:21:62:8f:8b:ef:65:8d:a2:8f:ff:29:c7:77:1b: 5b:0c:fa:68:e0:be:cd:29:41:8c:5d:c8:93:b7:8a: 28:be:73:fc:95:ba:bd:4a:d5:f9:6f:ba:c1:09:ed: c3:1f:6d:cd:54:f4:fe:27:18:fb:c1:75:08:48:c1: f7:e8:3a:b8:ad:c2:68:6a:41:d6:bb:a7:2e:f6:99: 2f:8d:4c:8b:e3:b4:dd:79:8f:fc:6c:8b:a7:75:f7: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D6:D6:CB:E0:9A:3A:47:6D:27:45:28:30:78:44:98:CE:63:C1:F1 X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d7:0f:d6:70:e5:e9:c5:e9:f2:7f:25:e8:e3:d4:67:a6:d5: 2a:d2:8c:a5:55:7f:99:1c:b4:23:09:4a:94:02:7d:56:de:2b: 7f:61:f4:2a:a1:ea:ad:18:96:36:dc:de:fb:09:7b:0d:bf:bb: 00:e1:00:fa:80:12:17:1f:d7:f2:14:ee:10:08:94:05:b6:da: 98:c6:2d:d1:99:04:1f:b8:2e:e4:9b:b3:24:0f:80:a1:26:f7: 1d:2a:8b:80:b3:7c:a9:1d:8f:e7:19:b0:77:92:b4:2f:44:96: a9:63:72:f8:d7:c2:a6:db:16:9f:f9:d4:a6:27:c6:d4:14:2f: 57:76:58:00:68:2a:3c:61:82:dc:cf:e2:d4:cd:2d:1d:38:3c: 1d:02:1e:1e:a7:a0:92:16:2c:19:fc:4f:a0:eb:01:0f:38:a8: 01:bc:18:4b:73:2a:f8:8f:8a:30:bc:14:1f:8e:1f:1c:46:76: 8f:38:f0:4a:3f:cd:34:a2:64:b8:49:b1:11:07:bb:31:e4:f5: b4:ab:b1:52:79:cf:42:3a:cc:94:b8:7b:2b:9e:d8:3b:91:77: 32:ae:19:3c:21:46:f1:c4:d8:5d:c8:79:6f:00:f5:42:ba:8a: dc:b4:c5:70:2f:4f:20:96:44:48:12:55:59:cf:8f:59:6a:8b: 9a:63:4a:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjA0MTcwODE5NDZaFw0yNjA0MjQwODE5NDZaMBgxFjAUBgNV BAMTDTY5ZTFlZDIzLTE1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsMLqAz9dHW9rtEtQpgKcLU3WOKxmzm7IO09zrArn+zlTQekX/yBVh31Oeg/t8 ZbmrO5/nbRw6xjdlEApgxFmC+6N9atlkMTjMq/43nvHozTNTt3JHvRmbfT5s5/Ac eXpn7jqzinwr5+9bMALALaqNcg8H0l3tpSXWyj9HNH2ux1U7QbL95l3VAMItajr9 N3ZbbpgANN07O2MprH2tbXxL/F0gjD4hYo+L72WNoo//Kcd3G1sM+mjgvs0pQYxd yJO3iii+c/yVur1K1flvusEJ7cMfbc1U9P4nGPvBdQhIwffoOritwmhqQda7py72 mS+NTIvjtN15j/xsi6d193bBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNdbWy+Ca OkdtJ0UoMHhEmM5jwfEwHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQ1w/WcOXpxenyfyXo49RnptUq0oylVX+ZHLQjCUqUAn1W3it/YfQqoeqtGJY2 3N77CXsNv7sA4QD6gBIXH9fyFO4QCJQFttqYxi3RmQQfuC7km7MkD4ChJvcdKouA s3ypHY/nGbB3krQvRJapY3L418Km2xaf+dSmJ8bUFC9XdlgAaCo8YYLcz+LUzS0d ODwdAh4ep6CSFiwZ/E+g6wEPOKgBvBhLcyr4j4owvBQfjh8cRnaPOPBKP800omS4 SbERB7sx5PW0q7FSec9COsyUuHsrntg7kXcyrhk8IUbxxNhdyHlvAPVCuorctMVw L08glkRIElVZz49ZaouaY0rX -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:05 2026 by rpki-client