$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json) Hash identifier: mGaNkvq/pcjCC/nE+GE8zY/g6DGriSMFs9+jLXJCMAk= Subject key identifier: 9E:90:27:F3:57:9C:A7:B4:8F:A7:E9:27:B0:BA:E0:89:65:4B:08:93 Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft Manifest number: 27 Signing time: Fri 17 Apr 2026 08:36:33 +0000 Manifest this update: Fri 17 Apr 2026 08:36:33 +0000 Manifest next update: Fri 24 Apr 2026 08:36:33 +0000 Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: 2ZAPLNjvHNm2QqCwr1/xuvowU4W5Wh8keWPLIn1xXFE=) 2: C2373EAC1D6011F1BE4C1B34263D8C67.roa (hash: 07klE73+JTtSptr8Nr9s1wMcP6sL8OycY1vW+oKqJmE=) 3: B1B9A1641D6011F1B057D12F263D8C67.roa (hash: t6D9tXAplx7/JIUvggusg1vjbe0cuS2nLDglz+Se1SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Validity Not Before: Apr 17 08:36:33 2026 GMT Not After : Apr 24 08:36:33 2026 GMT Subject: CN=69e1f111-393a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:5f:9b:0c:fd:92:cc:b4:ca:10:45:bb:85: c7:25:5f:68:16:aa:e8:5e:44:33:56:43:60:e0:21: dc:f3:b6:6f:46:82:dc:9d:28:4a:a4:97:af:f9:9b: d9:cd:a4:03:cb:58:f9:ed:9e:4c:75:b6:0b:7f:a9: 76:f3:c8:8f:e8:c2:45:98:df:67:9b:70:73:3a:58: 46:cc:f6:af:5f:96:f0:e8:12:6e:51:ca:06:bf:46: 45:21:5e:cd:43:7a:16:d5:ff:89:c8:d2:23:b5:e4: d9:f7:01:61:c6:16:e2:69:8e:03:6f:54:19:e1:a2: 4f:80:79:ee:82:3d:4d:e8:c3:20:22:b5:65:13:73: 4e:6d:7f:aa:18:5f:68:c0:c7:c1:ac:60:c2:ee:fa: ea:53:cd:b9:a5:28:a6:26:94:0b:55:ae:10:1d:3b: ee:6a:ad:7f:29:36:c9:4e:89:02:30:ae:25:79:52: d7:86:b8:eb:c8:4b:6b:07:97:3c:24:dc:a2:a1:3d: 12:d9:de:7f:a7:f9:0f:9a:eb:85:64:99:8b:86:17: 4d:f6:77:44:16:2e:df:48:00:b2:c7:8c:ee:11:62: 8d:70:a1:da:f5:6c:72:bf:9a:66:33:60:55:0e:b7: f0:92:43:54:01:14:f9:79:c4:b8:1b:d7:79:fe:e8: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:90:27:F3:57:9C:A7:B4:8F:A7:E9:27:B0:BA:E0:89:65:4B:08:93 X509v3 Authority Key Identifier: keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:66:41:99:f6:a0:03:9c:d4:ff:94:96:c4:63:e5:b6:87: ec:b1:ca:d4:a0:00:09:a2:4a:8c:3f:36:38:35:7a:52:a4:d7: c8:12:44:9a:0b:fb:f2:0c:59:b2:81:61:11:2c:75:5d:0b:db: c5:c5:2e:c1:3d:84:75:12:17:05:fa:18:09:88:62:4a:69:dd: 7f:51:a8:9c:0b:86:4b:f1:c3:36:ff:9b:9b:5f:f4:b8:23:f5: 81:a8:18:10:ce:12:e7:39:63:fa:e7:b6:7c:cd:2c:ff:91:63: cc:42:be:f7:ba:64:b7:25:52:a0:bc:69:a2:2c:38:d8:45:47: 6a:07:b1:b5:69:ef:02:66:32:60:a4:05:06:7b:54:69:fb:83: 66:dd:91:de:7d:7c:d9:25:9d:20:a6:87:18:34:68:a2:df:7d: 58:52:38:a4:a0:cc:d9:e2:3e:d5:76:b8:c8:50:24:8b:81:e5: 2e:6c:f8:40:c8:98:5c:9d:69:e2:8c:14:6f:8a:ce:c7:d8:66: 5a:3f:af:36:f0:3a:54:83:77:24:cd:08:60:ad:e7:2a:8c:32: 3a:f1:1c:5a:a0:13:16:56:67:70:79:14:9c:f6:8e:76:aa:ef: c7:7b:20:23:84:15:79:4a:45:74:56:ab:b1:49:0c:81:46:01: 97:be:da:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE1NzExMC8GA1UEBRMoOTFEQTNBMTc2MzdDRDI5MkNFQTQ2NzBERDEzQTcyRDg2 RUFBMkQ5MTAeFw0yNjA0MTcwODM2MzNaFw0yNjA0MjQwODM2MzNaMBgxFjAUBgNV BAMTDTY5ZTFmMTExLTM5M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWqV+bDP2SzLTKEEW7hcclX2gWquheRDNWQ2DgIdzztm9GgtydKEqkl6/5m9nN pAPLWPntnkx1tgt/qXbzyI/owkWY32ebcHM6WEbM9q9flvDoEm5Ryga/RkUhXs1D ehbV/4nI0iO15Nn3AWHGFuJpjgNvVBnhok+Aee6CPU3owyAitWUTc05tf6oYX2jA x8GsYMLu+upTzbmlKKYmlAtVrhAdO+5qrX8pNslOiQIwriV5UteGuOvIS2sHlzwk 3KKhPRLZ3n+n+Q+a64VkmYuGF032d0QWLt9IALLHjO4RYo1wodr1bHK/mmYzYFUO t/CSQ1QBFPl5xLgb13n+6APZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnpAn81ec p7SPp+knsLrgiWVLCJMwHwYDVR0jBBgwFoAUkdo6F2N80pLOpGcN0Tpy2G6qLZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzI1MDgzOEFFMTE0 MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxa RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2RvNkYyTjgwcExPcEdjTjBUcHkyRzZxTFpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTU3LzI1MDgzOEFFMTE0MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBM T3BHY04wVHB5Mkc2cUxaRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBF8mZBmfagA5zU/5SWxGPltofsscrUoAAJokqMPzY4NXpSpNfIEkSaC/vyDFmy gWERLHVdC9vFxS7BPYR1EhcF+hgJiGJKad1/UaicC4ZL8cM2/5ubX/S4I/WBqBgQ zhLnOWP657Z8zSz/kWPMQr73umS3JVKgvGmiLDjYRUdqB7G1ae8CZjJgpAUGe1Rp +4Nm3ZHefXzZJZ0gpocYNGii331YUjikoMzZ4j7VdrjIUCSLgeUubPhAyJhcnWni jBRvis7H2GZaP6828DpUg3ckzQhgrecqjDI68RxaoBMWVmdweRSc9o52qu/HeyAj hBV5SkV0VquxSQyBRgGXvtpJ -----END CERTIFICATE-----Generated at Fri Apr 17 10:51:38 2026 by rpki-client