$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: yC8cIc4Vf6BAQO0wIiICLsCE4N0qtOZcC8hYEw4kFkw= Subject key identifier: C0:7E:06:D4:3C:D9:8A:2B:4E:ED:19:26:63:EE:12:FB:6C:8D:7E:EA Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 11F3 Signing time: Sat 18 Apr 2026 17:04:18 +0000 Manifest this update: Sat 18 Apr 2026 17:04:18 +0000 Manifest next update: Sat 25 Apr 2026 17:04:18 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: w6+olLh9g15qH33MWM7bRWZ58u2LdAbO+asHbvKaxGM=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4609 (0x1201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Apr 18 17:04:18 2026 GMT Not After : Apr 25 17:04:18 2026 GMT Subject: CN=69e3b992-6bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:9e:26:4c:25:22:2d:c1:ac:83:aa:7e:69: 2e:55:eb:fb:f2:09:c3:5c:61:05:a8:43:bd:a8:3c: 17:da:64:60:ad:cc:d8:c8:1b:50:06:bb:f0:51:57: c6:da:98:80:7b:ba:ae:8e:d8:1d:d3:f1:30:a3:6f: ef:34:c8:a1:eb:f9:56:86:e7:46:88:eb:af:0d:be: ba:68:d1:9c:33:63:af:19:a1:ac:e3:1a:1a:83:86: f4:51:3f:54:ea:e0:d6:20:8b:b2:5a:fb:57:57:4d: 5d:3b:25:7e:00:48:cd:e8:ae:a2:6e:28:68:b7:b0: 49:b7:0a:8a:13:00:da:c5:ff:f8:fe:ff:b2:4c:15: 5a:ef:12:cc:f7:d7:2a:17:60:34:6a:8b:37:28:99: aa:92:3d:91:e3:dc:37:39:df:ac:bf:b7:20:9e:f2: ed:d2:71:29:35:e4:4e:6b:e3:78:35:b1:8a:8a:82: c0:71:cf:6e:6b:90:f3:9d:69:d2:28:78:cc:5d:b8: 8f:92:31:38:34:ed:e9:38:73:1b:d0:97:49:5a:cc: 89:3b:4d:e7:fd:31:a9:24:1b:9c:26:ff:dc:a2:78: f2:05:e4:b7:d0:3b:30:a9:24:45:cf:95:4d:32:cc: 13:52:b6:a4:6d:0e:99:1d:bc:2c:98:8d:d4:1d:94: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:06:D4:3C:D9:8A:2B:4E:ED:19:26:63:EE:12:FB:6C:8D:7E:EA X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3d:0c:41:5c:d2:35:58:93:39:2b:97:33:1f:d0:f0:fe:87: 52:cc:d0:5a:ec:32:9b:58:a5:ab:5b:3e:82:f6:c8:90:f3:b2: 3d:e2:2c:d3:f7:9d:bd:70:4d:96:81:24:c9:4b:7e:ba:07:aa: 99:8d:5d:02:51:89:56:60:70:ee:b2:fc:dd:fc:2b:02:2b:98: 29:84:99:f0:e9:64:72:2a:29:d5:f9:00:47:05:e7:24:14:fd: 0e:0b:d1:11:ba:22:74:bc:c8:a6:07:1b:c4:19:13:eb:a6:19: 00:9d:d1:98:80:0e:50:e8:e5:4c:44:1b:8d:9c:a7:0f:b0:4e: e0:51:29:e3:ff:8c:a0:ae:7c:d5:6d:0b:7d:32:70:07:5a:30: 08:8d:5b:bd:19:e3:58:85:70:3a:3c:ee:24:f4:b6:66:22:43: 55:c7:1f:ea:8c:28:ac:4e:1a:e8:ed:10:72:e7:c7:13:1a:ba: 4e:88:ed:80:be:12:16:04:ba:2e:ca:87:67:a0:2f:94:17:c0: 46:57:58:31:75:f3:8e:50:8d:b0:83:3a:50:3d:74:9f:47:40: 7e:40:e8:8b:39:ed:c6:d0:4b:2d:cf:b0:e5:1c:32:9d:8f:10: 85:ae:57:49:b5:28:69:1e:d5:8b:54:0b:90:1d:01:6d:e2:ad: 72:8d:be:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjYwNDE4MTcwNDE4WhcNMjYwNDI1MTcwNDE4WjAYMRYwFAYD VQQDEw02OWUzYjk5Mi02YmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0G6eJkwlIi3BrIOqfmkuVev78gnDXGEFqEO9qDwX2mRgrczYyBtQBrvwUVfG 2piAe7qujtgd0/Ewo2/vNMih6/lWhudGiOuvDb66aNGcM2OvGaGs4xoag4b0UT9U 6uDWIIuyWvtXV01dOyV+AEjN6K6ibihot7BJtwqKEwDaxf/4/v+yTBVa7xLM99cq F2A0aos3KJmqkj2R49w3Od+sv7cgnvLt0nEpNeROa+N4NbGKioLAcc9ua5DznWnS KHjMXbiPkjE4NO3pOHMb0JdJWsyJO03n/TGpJBucJv/conjyBeS30DswqSRFz5VN MswTUrakbQ6ZHbwsmI3UHZQnaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMB+BtQ8 2YorTu0ZJmPuEvtsjX7qMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAz0MQVzSNViTOSuXMx/Q8P6HUszQWuwym1ilq1s+gvbIkPOyPeIs0/edvXBN loEkyUt+ugeqmY1dAlGJVmBw7rL83fwrAiuYKYSZ8Olkciop1fkARwXnJBT9DgvR EboidLzIpgcbxBkT66YZAJ3RmIAOUOjlTEQbjZynD7BO4FEp4/+MoK581W0LfTJw B1owCI1bvRnjWIVwOjzuJPS2ZiJDVccf6oworE4a6O0QcufHExq6TojtgL4SFgS6 LsqHZ6AvlBfARldYMXXzjlCNsIM6UD10n0dAfkDoizntxtBLLc+w5RwynY8Qha5X SbUoaR7Vi1QLkB0BbeKtco2+gA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:38 2026 by rpki-client