$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: fGE4hQuZ/t/rc7k4L+k2RuiVJ7hLD4ji6bWMNKVs2KQ= Subject key identifier: 89:6E:10:7F:DB:40:0C:83:50:2A:8F:27:07:77:AD:49:E0:EA:6D:79 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D92 Signing time: Thu 16 Apr 2026 17:51:38 +0000 Manifest this update: Thu 16 Apr 2026 17:51:38 +0000 Manifest next update: Thu 23 Apr 2026 17:51:38 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: zDj0z8940+BYqzATQLzoImCnn8SovkMyS0W+XK1+XRg=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=) 3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Apr 16 17:51:38 2026 GMT Not After : Apr 23 17:51:38 2026 GMT Subject: CN=69e121aa-4bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:a9:e4:af:c1:44:53:40:35:3d:0d:49:47: 79:fc:cf:64:9e:04:66:9c:80:9c:51:a4:dd:9d:96: 20:05:09:c7:48:33:29:49:0e:b9:c3:fc:84:f3:c7: ba:f7:13:65:af:aa:b2:48:6c:e3:c8:43:c0:08:a3: 06:1e:6c:ea:c0:a0:e0:9b:d6:1d:95:af:57:77:74: b6:3b:51:4f:3a:7a:4c:54:40:4c:ab:ea:a2:fb:da: a4:02:d8:a6:bd:53:ba:bc:79:fe:7c:36:67:6b:ce: 6d:ec:97:a1:2a:8d:69:21:be:60:e0:16:23:26:5a: 7b:df:20:79:05:2d:57:c4:b2:e9:01:0e:c7:56:77: 1e:7b:88:4a:63:aa:9c:fc:82:91:8c:4d:af:76:52: 59:14:a4:0e:f7:e9:39:03:88:bd:9c:54:ef:77:72: 6d:99:a2:73:05:12:be:d3:ad:41:22:b5:dd:0e:03: 20:34:9d:c6:1d:21:a9:8f:67:51:62:bd:b5:0a:9b: 76:d4:59:33:6d:48:af:45:f2:6c:1b:3b:ab:89:0a: 2e:23:da:72:b5:4c:7b:6a:45:e9:a6:91:b7:37:10: 18:3d:eb:2f:35:66:ac:6a:4f:6b:06:d8:03:cc:a5: fe:29:fc:88:f9:b6:b3:60:24:d2:12:9b:eb:d6:77: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6E:10:7F:DB:40:0C:83:50:2A:8F:27:07:77:AD:49:E0:EA:6D:79 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c4:ff:46:49:1c:55:f3:bc:c7:a1:41:d6:12:71:90:7b:a2: e7:dc:68:7a:0e:44:2e:68:09:24:8c:e0:9f:1f:c7:e6:56:19: cb:e4:ed:d5:93:e2:55:d7:0e:0b:dd:ad:b2:6d:13:3b:bf:78: 95:90:74:c4:e3:5b:5f:4c:a7:20:50:10:a0:ae:89:b0:ac:c0: 0c:79:24:7e:17:b4:2e:4c:dc:05:bb:f1:40:bc:5e:37:1e:aa: a1:76:8d:2a:ef:9a:cb:4e:b7:2c:b7:09:69:e0:36:ad:ab:82: bd:32:c6:a9:72:a1:92:98:97:f8:b2:e9:34:dc:6c:12:d7:4a: 21:d0:3d:d4:b5:e5:cc:93:2c:2b:e9:f5:16:ac:7a:0e:a4:a1: 8a:8c:bf:a6:c0:ec:74:4b:85:89:b6:bf:b3:bf:f7:9d:75:cb: 25:e0:23:f1:2c:50:28:6e:81:30:dd:58:79:6b:11:31:e1:1e: f2:0d:29:2d:7a:c8:3d:f4:4c:a7:3a:ca:0b:43:a9:83:d6:1a: c9:28:5a:ec:4b:1c:9b:a9:32:29:a1:8c:f6:29:51:cc:74:ce: 41:5f:41:c6:76:6e:01:e1:d3:c1:a6:b2:c2:b6:74:f5:6a:a8: 94:7f:c1:49:ee:b2:9c:c5:ee:6c:bf:fa:02:5b:20:c4:47:26: 8e:4a:33:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwNDE2MTc1MTM4WhcNMjYwNDIzMTc1MTM4WjAYMRYwFAYD VQQDEw02OWUxMjFhYS00YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP+p5K/BRFNANT0NSUd5/M9kngRmnICcUaTdnZYgBQnHSDMpSQ65w/yE88e6 9xNlr6qySGzjyEPACKMGHmzqwKDgm9Ydla9Xd3S2O1FPOnpMVEBMq+qi+9qkAtim vVO6vHn+fDZna85t7JehKo1pIb5g4BYjJlp73yB5BS1XxLLpAQ7HVncee4hKY6qc /IKRjE2vdlJZFKQO9+k5A4i9nFTvd3JtmaJzBRK+061BIrXdDgMgNJ3GHSGpj2dR Yr21Cpt21FkzbUivRfJsGzuriQouI9pytUx7akXpppG3NxAYPesvNWasak9rBtgD zKX+KfyI+bazYCTSEpvr1ndt5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIluEH/b QAyDUCqPJwd3rUng6m15MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdsT/RkkcVfO8x6FB1hJxkHui59xoeg5ELmgJJIzgnx/H5lYZy+Tt1ZPiVdcO C92tsm0TO794lZB0xONbX0ynIFAQoK6JsKzADHkkfhe0LkzcBbvxQLxeNx6qoXaN Ku+ay063LLcJaeA2rauCvTLGqXKhkpiX+LLpNNxsEtdKIdA91LXlzJMsK+n1Fqx6 DqShioy/psDsdEuFiba/s7/3nXXLJeAj8SxQKG6BMN1YeWsRMeEe8g0pLXrIPfRM pzrKC0Opg9YaySha7Escm6kyKaGM9ilRzHTOQV9BxnZuAeHTwaaywrZ09WqolH/B Se6ynMXubL/6AlsgxEcmjkozJA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:04:50 2026 by rpki-client