$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: /coeB9ZLaEXWCfv+1JXiV7mFkSipCmPa5ijC1+W+Llo= Subject key identifier: 18:AF:F4:81:A7:FA:0E:89:12:6A:17:BA:5B:DE:41:52:7A:67:68:E1 Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 1883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 1871 Signing time: Thu 16 Apr 2026 16:26:49 +0000 Manifest this update: Thu 16 Apr 2026 16:26:49 +0000 Manifest next update: Thu 23 Apr 2026 16:26:49 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: 8AoEIG4pqWSlfRiWchocak3h+MxwmdNynp1L1w01z8M=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: Ab1is/evOLhc3g4DpSbGl1Q9LWF8CNxrAAAtmCT5wDg=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zSG0LGFJE7WuZbbBJfnMq6hMoXOF+N0WFOj4d7BqNDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6275 (0x1883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: Apr 16 16:26:49 2026 GMT Not After : Apr 23 16:26:49 2026 GMT Subject: CN=69e10dc9-2f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:00:b7:0e:0c:d8:a2:73:c6:7b:68:28:6c: c8:03:6f:4e:43:b5:fe:d1:a2:17:4b:43:0e:9b:38: 51:05:1b:74:f1:ec:ec:f2:65:85:87:1f:49:78:84: 75:6f:87:62:6e:04:c8:af:32:34:0c:0e:76:bd:1c: 78:71:f4:1e:1f:05:b7:d2:d0:13:2a:af:00:91:13: 32:6f:27:fc:eb:49:d9:59:6f:c3:a8:c0:37:82:de: 08:43:06:72:86:0b:09:e1:4e:e7:5d:87:e2:35:24: a8:64:9f:b6:0c:00:28:54:f1:5c:77:f2:fb:b9:75: ee:83:1a:0e:df:70:77:35:7b:45:43:cd:72:b5:16: 89:d2:0c:0a:e9:32:8c:68:e8:d4:45:51:3e:6c:e6: 45:89:d4:70:20:39:79:8d:59:d0:2e:30:58:ac:06: 8f:2f:21:a3:07:4d:81:09:80:3e:92:37:c4:d5:cc: cd:c0:8b:79:70:48:cd:f4:b5:77:92:5e:49:f8:1f: f6:be:7e:fa:c8:f6:5f:b6:16:1f:5d:6e:cb:95:fb: fc:24:35:87:76:bb:4f:c2:bb:e6:a3:30:fd:0d:2d: 06:7f:c3:c2:ec:97:fb:b1:53:55:a5:a1:93:ae:b9: b8:3e:81:01:09:bf:35:36:90:b6:4d:c8:a0:5e:2e: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AF:F4:81:A7:FA:0E:89:12:6A:17:BA:5B:DE:41:52:7A:67:68:E1 X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:36:6e:ab:a1:6c:e7:cf:03:22:94:a8:8d:0e:fb:92:73:0d: 5b:86:36:14:19:29:4d:33:21:1a:cc:d9:ee:97:70:4f:61:47: e5:3c:c1:2e:21:4f:0a:48:3b:ed:54:b7:c3:a5:48:a0:5c:f7: 61:50:2b:eb:42:15:82:b1:6c:e0:22:9d:ae:88:fa:79:6a:80: 5a:af:df:9d:ff:7a:22:79:5c:40:fb:5c:29:13:d6:26:25:aa: d1:07:d3:bd:36:02:b7:f9:7d:b9:79:33:f3:78:5f:b8:4b:3a: c9:35:42:18:ca:4d:e2:31:b2:d1:e5:ea:97:80:eb:0c:a7:1e: e8:e0:8f:8a:65:bb:b3:39:06:ab:4d:99:b4:3d:2f:35:03:75: ab:5a:b4:cc:b7:a0:4b:24:f9:9d:aa:58:61:3b:45:ac:84:e4: 5c:e2:f1:d5:47:33:d2:8f:2d:b4:f6:53:38:24:ac:55:49:56: b7:c5:1f:f4:eb:6f:73:01:72:1d:ba:b7:92:6c:36:51:4c:8f: 99:d2:cf:d5:b8:31:f5:1f:e3:d2:11:fb:57:62:21:de:ef:c7: 96:e5:14:43:79:25:fe:86:08:9d:e7:8b:9e:26:88:4f:df:67: bf:66:ec:2f:7e:b2:7e:d6:c6:99:63:e0:14:59:9e:27:86:14: 8b:81:a4:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjYwNDE2MTYyNjQ5WhcNMjYwNDIzMTYyNjQ5WjAYMRYwFAYD VQQDEw02OWUxMGRjOS0yZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBUAtw4M2KJzxntoKGzIA29OQ7X+0aIXS0MOmzhRBRt08ezs8mWFhx9JeIR1 b4dibgTIrzI0DA52vRx4cfQeHwW30tATKq8AkRMybyf860nZWW/DqMA3gt4IQwZy hgsJ4U7nXYfiNSSoZJ+2DAAoVPFcd/L7uXXugxoO33B3NXtFQ81ytRaJ0gwK6TKM aOjURVE+bOZFidRwIDl5jVnQLjBYrAaPLyGjB02BCYA+kjfE1czNwIt5cEjN9LV3 kl5J+B/2vn76yPZfthYfXW7Llfv8JDWHdrtPwrvmozD9DS0Gf8PC7Jf7sVNVpaGT rrm4PoEBCb81NpC2TcigXi732QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiv9IGn +g6JEmoXulveQVJ6Z2jhMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASzZuq6Fs588DIpSojQ77knMNW4Y2FBkpTTMhGszZ7pdwT2FH5TzBLiFPCkg7 7VS3w6VIoFz3YVAr60IVgrFs4CKdroj6eWqAWq/fnf96InlcQPtcKRPWJiWq0QfT vTYCt/l9uXkz83hfuEs6yTVCGMpN4jGy0eXql4DrDKce6OCPimW7szkGq02ZtD0v NQN1q1q0zLegSyT5napYYTtFrITkXOLx1Ucz0o8ttPZTOCSsVUlWt8Uf9OtvcwFy Hbq3kmw2UUyPmdLP1bgx9R/j0hH7V2Ih3u/HluUUQ3kl/oYIneeLniaIT99nv2bs L36yftbGmWPgFFmeJ4YUi4GkNA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:29:26 2026 by rpki-client