$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft File: dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json) Hash identifier: zdfxhjw1Kw6PTjcMq5K05VckJCx40BhZCyR+TsgdmrA= Subject key identifier: 93:E3:30:F6:C6:91:71:B9:C1:4F:71:0D:80:90:76:A3:21:EB:7D:03 Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 Certificate issuer: /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft Manifest number: 0337 Signing time: Fri 17 Apr 2026 03:59:23 +0000 Manifest this update: Fri 17 Apr 2026 03:59:22 +0000 Manifest next update: Fri 24 Apr 2026 03:59:22 +0000 Files and hashes: 1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: NKANidCLnb9CP1K2G7J2tl69mjn1tMj/zxVw08eJ2Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980 Validity Not Before: Apr 17 03:59:22 2026 GMT Not After : Apr 24 03:59:22 2026 GMT Subject: CN=69e1b01a-fc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:57:6a:05:b0:e2:05:ec:89:5b:aa:85:29: 9d:39:b9:c5:ec:36:26:63:b4:ba:50:ff:26:26:dc: 55:87:3a:dc:28:dd:7f:1f:85:c7:15:85:c9:5b:00: 67:6b:81:fc:69:76:9c:09:7d:97:33:21:f0:89:dc: b3:c1:f5:87:43:41:01:b1:8f:9e:8e:8f:6c:c3:77: 80:57:8c:bf:fa:25:da:65:ab:65:cf:16:d1:e4:c5: 17:e3:78:e8:4b:b8:58:0c:c7:d9:f0:8e:3e:26:49: 5e:7a:ef:55:5c:52:a4:01:e9:51:6a:d7:0f:2a:cd: 32:bd:05:a4:fb:98:07:85:89:be:65:64:72:c5:c5: c0:e7:3a:3f:85:89:17:e5:f7:a9:1d:af:f0:0e:19: 71:68:11:57:0b:c6:7a:ad:cc:98:d8:44:32:21:5b: 02:48:51:c6:45:f8:73:c4:b5:fb:25:fe:c0:87:0c: ff:cd:f9:a8:30:fd:c6:7e:8d:ec:63:54:db:30:96: 96:06:50:4f:8f:8d:28:b3:b6:3d:52:64:d9:3f:ff: 14:7a:e0:aa:d9:11:5e:ac:32:2b:92:9e:68:23:25: 0f:06:ab:bd:02:2f:c5:c0:1b:15:10:a5:3c:c8:e9: 9a:8e:87:b5:3c:10:a9:16:d7:b1:64:80:5b:a1:67: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:30:F6:C6:91:71:B9:C1:4F:71:0D:80:90:76:A3:21:EB:7D:03 X509v3 Authority Key Identifier: keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a6:14:01:6f:67:0c:c9:cb:5b:10:d8:12:92:cc:d9:b5:2e: 23:f0:4d:8d:42:06:33:2a:29:cf:17:5d:62:f2:16:89:e1:91: 19:9d:76:f1:05:04:a8:ef:3a:46:c3:41:38:5e:28:d3:6b:30: 9b:49:9c:e7:70:cb:8e:fd:e5:53:a1:ad:b2:f8:7a:4c:ac:0c: 82:cd:6e:14:9e:34:9d:52:49:a7:55:f6:1a:f1:62:1d:d5:7b: f2:45:55:22:55:fe:e6:d4:d4:68:ff:78:9c:66:03:ca:85:a7: ca:f8:a7:fe:e1:b8:b6:16:26:ff:e5:77:7b:9c:09:e8:28:13: af:99:49:1b:a4:63:56:71:8b:2e:8b:1b:e3:46:b7:ef:96:07: fb:7f:5c:e4:c0:3f:be:05:fd:b0:24:02:5e:17:20:36:d1:d5: 9a:cf:60:cd:0a:5e:d2:13:40:a1:d3:07:43:5d:f7:74:52:55: b5:4e:aa:d9:e7:d1:65:f8:37:ec:b9:dd:7e:82:a6:44:99:3b: a9:bd:e7:3d:2b:81:3b:79:9b:45:12:6f:ca:43:72:df:53:49: ae:67:0b:68:90:3a:85:8f:d9:a6:25:31:1a:95:26:cd:26:f1: 88:ae:70:f9:6b:8d:4e:42:dc:63:4c:ce:35:7f:e1:51:b8:5f: 7f:27:3f:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDc0M0U3OEM0NTk4RUZDNzJEQTA4NDY0NjUwRUI4RjlD REExNkY5ODAwHhcNMjYwNDE3MDM1OTIyWhcNMjYwNDI0MDM1OTIyWjAYMRYwFAYD VQQDEw02OWUxYjAxYS1mYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtldXagWw4gXsiVuqhSmdObnF7DYmY7S6UP8mJtxVhzrcKN1/H4XHFYXJWwBn a4H8aXacCX2XMyHwidyzwfWHQ0EBsY+ejo9sw3eAV4y/+iXaZatlzxbR5MUX43jo S7hYDMfZ8I4+Jkleeu9VXFKkAelRatcPKs0yvQWk+5gHhYm+ZWRyxcXA5zo/hYkX 5fepHa/wDhlxaBFXC8Z6rcyY2EQyIVsCSFHGRfhzxLX7Jf7Ahwz/zfmoMP3Gfo3s Y1TbMJaWBlBPj40os7Y9UmTZP/8UeuCq2RFerDIrkp5oIyUPBqu9Ai/FwBsVEKU8 yOmajoe1PBCpFtexZIBboWep2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPjMPbG kXG5wU9xDYCQdqMh630DMB8GA1UdIwQYMBaAFHQ+eMRZjvxy2ghGRlDrj5zaFvmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19ITGFDRVpHVU91UG5Ob1ct WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RENTR4Rm1PX0hMYUNFWkdVT3VQbk5vVy1ZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC8zRkZGNUMzRUM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9kRDU0eEZtT19I TGFDRVpHVU91UG5Ob1ctWUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA6YUAW9nDMnLWxDYEpLM2bUuI/BNjUIGMyopzxddYvIWieGRGZ128QUEqO86 RsNBOF4o02swm0mc53DLjv3lU6Gtsvh6TKwMgs1uFJ40nVJJp1X2GvFiHdV78kVV IlX+5tTUaP94nGYDyoWnyvin/uG4thYm/+V3e5wJ6CgTr5lJG6RjVnGLLosb40a3 75YH+39c5MA/vgX9sCQCXhcgNtHVms9gzQpe0hNAodMHQ133dFJVtU6q2efRZfg3 7LndfoKmRJk7qb3nPSuBO3mbRRJvykNy31NJrmcLaJA6hY/ZpiUxGpUmzSbxiK5w +WuNTkLcY0zONX/hUbhffyc/kg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:13 2026 by rpki-client