$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: Ja1M4IUSf8x5xqYy+/yURM2DFBeRn7mxEGuUJDFvb44= Subject key identifier: C5:A5:9C:EF:C0:34:B4:78:3C:D4:5D:10:74:6B:5D:A4:B0:31:09:2A Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: 0130 Signing time: Sun 19 Apr 2026 05:12:40 +0000 Manifest this update: Sun 19 Apr 2026 05:12:40 +0000 Manifest next update: Sun 26 Apr 2026 05:12:40 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: 1Vp69Z7NsXCZJDdwOoO3QvtfbJvzaFaMOO2qDPJELro=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: cly4cYutElaX5qSNdsfUH5zLjhQKkS1wrfF7eYDZnn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Apr 19 05:12:40 2026 GMT Not After : Apr 26 05:12:40 2026 GMT Subject: CN=69e46448-20d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:a7:fb:08:46:78:cb:c6:64:3e:e6:e5:6c: cf:76:bf:76:40:97:ef:3c:f2:0b:b9:92:f7:7e:a9: 0c:f5:01:fa:6b:c8:5b:a0:00:5e:10:ba:bd:45:bc: f9:e8:a8:ba:ed:76:42:3b:0b:fd:3b:c1:92:e7:b0: 57:bb:71:7e:9e:2e:43:c4:44:7c:53:b3:2d:71:71: 68:d7:e3:b6:8f:fd:a0:0e:c8:67:69:74:5a:ac:75: 84:e2:63:20:fe:d0:d9:25:62:c2:92:d3:c5:15:71: b1:82:17:b6:33:8f:56:98:7c:99:e4:59:0e:e4:df: 61:92:ed:33:8c:0a:5f:41:f5:80:30:75:53:92:23: ef:7e:a8:c2:ec:03:af:11:b8:2a:db:94:9f:a6:55: 6f:cd:1b:6a:1a:81:7e:b3:73:eb:05:d0:0c:bc:41: 39:36:e1:7d:b0:49:82:3a:35:89:c2:a0:64:0f:c5: 2e:9a:5d:90:01:60:93:91:9f:9e:42:5f:6e:ff:c5: fe:06:80:52:73:1c:de:31:35:5d:66:3c:45:0c:f4: 4f:bf:27:68:b5:67:48:18:d4:e8:26:fa:41:e2:49: 12:a1:f4:11:4b:ec:75:bb:db:3a:9f:ef:a9:54:78: 0a:ac:41:fe:d0:50:4c:0f:56:b8:3e:4b:72:c3:4a: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A5:9C:EF:C0:34:B4:78:3C:D4:5D:10:74:6B:5D:A4:B0:31:09:2A X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:3d:88:d0:15:fe:f3:5e:63:ab:f9:96:05:96:89:44:5d:11: 17:fb:47:7f:8c:bd:91:33:d6:84:e6:c7:68:4f:95:6c:59:2a: f8:35:1d:a1:7c:34:fb:4e:32:8f:d3:ef:17:8c:e1:43:36:56: ea:e7:ca:c2:a2:5a:22:27:a9:67:bc:04:e5:fd:49:6b:1d:59: fe:0e:f8:1c:60:e1:c1:73:ab:4b:4e:b6:2f:3a:cd:89:c6:75: da:53:07:e8:3f:98:c0:93:b7:76:1b:c6:3f:c4:cb:23:70:5b: aa:c1:e4:b4:04:af:e1:3e:5d:9e:f0:eb:53:fd:36:6f:03:be: ad:4d:b8:ff:ec:ed:66:f2:38:0c:96:10:ae:44:34:d8:86:55: 0f:30:c3:e8:46:a6:4e:f5:d9:cf:93:e7:1a:eb:9d:c1:25:6c: 54:df:1e:be:17:1e:1b:5c:87:a4:ff:9e:32:8d:6c:8f:64:7b: 98:57:fe:00:04:79:f9:90:40:1e:3c:f4:f2:38:a4:f1:73:a3: 73:4e:e6:41:71:4a:78:62:74:ac:de:5f:db:e8:3b:ce:53:f8: 2e:93:dd:99:71:98:bb:11:2e:79:3c:11:a8:cb:0a:ef:b2:75: 31:b1:85:2e:7f:aa:04:81:67:4f:1f:8f:42:ef:74:bc:24:0e: a4:89:fb:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjYwNDE5MDUxMjQwWhcNMjYwNDI2MDUxMjQwWjAYMRYwFAYD VQQDEw02OWU0NjQ0OC0yMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosGn+whGeMvGZD7m5WzPdr92QJfvPPILuZL3fqkM9QH6a8hboABeELq9Rbz5 6Ki67XZCOwv9O8GS57BXu3F+ni5DxER8U7MtcXFo1+O2j/2gDshnaXRarHWE4mMg /tDZJWLCktPFFXGxghe2M49WmHyZ5FkO5N9hku0zjApfQfWAMHVTkiPvfqjC7AOv Ebgq25SfplVvzRtqGoF+s3PrBdAMvEE5NuF9sEmCOjWJwqBkD8Uuml2QAWCTkZ+e Ql9u/8X+BoBScxzeMTVdZjxFDPRPvydotWdIGNToJvpB4kkSofQRS+x1u9s6n++p VHgKrEH+0FBMD1a4Pktyw0oHmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWlnO/A NLR4PNRdEHRrXaSwMQkqMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGD2I0BX+815jq/mWBZaJRF0RF/tHf4y9kTPWhObHaE+VbFkq+DUdoXw0+04y j9PvF4zhQzZW6ufKwqJaIiepZ7wE5f1Jax1Z/g74HGDhwXOrS062LzrNicZ12lMH 6D+YwJO3dhvGP8TLI3BbqsHktASv4T5dnvDrU/02bwO+rU24/+ztZvI4DJYQrkQ0 2IZVDzDD6EamTvXZz5PnGuudwSVsVN8evhceG1yHpP+eMo1sj2R7mFf+AAR5+ZBA Hjz08jik8XOjc07mQXFKeGJ0rN5f2+g7zlP4LpPdmXGYuxEueTwRqMsK77J1MbGF Ln+qBIFnTx+PQu90vCQOpIn7FA== -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:41 2026 by rpki-client