$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: /tsinkVzK97Eo5OSHqEvLFG22O5CbRfh12JFc/qPRAA= Subject key identifier: 6B:C2:8D:C6:FF:4D:72:EB:51:7B:98:19:70:43:F2:F7:0E:0E:25:E0 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 01E4 Signing time: Fri 17 Apr 2026 03:14:33 +0000 Manifest this update: Fri 17 Apr 2026 03:14:33 +0000 Manifest next update: Fri 24 Apr 2026 03:14:33 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: 6ZvOK0JBdsOW0z3k9ZDwAZOEQJ+DoWAOamkwMuYxO0A=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: EhYXno6ug4ByU87OUq1wUeh+ctGIsCVZa0SYOR15ZnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Apr 17 03:14:33 2026 GMT Not After : Apr 24 03:14:33 2026 GMT Subject: CN=69e1a599-1d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:10:88:23:c3:d8:fe:c4:cd:c9:b5:d8:99:14: 74:50:42:c0:b5:b9:42:6d:01:76:23:f0:5f:54:59: 68:5a:52:20:6e:ed:06:8c:54:d3:50:00:ef:7d:f2: ca:7f:b9:aa:c8:bc:18:3d:ae:ee:55:af:73:71:64: ce:a8:f9:0e:17:55:ec:ab:3f:62:e1:90:dc:07:b3: 61:bb:62:64:51:fd:e8:66:b7:00:06:eb:58:1c:cf: dd:2f:31:72:71:96:f6:31:c5:e2:26:bb:51:cd:a2: e7:92:10:8e:3c:fb:27:39:24:0a:2a:25:3f:cf:d5: 59:f1:f7:c8:f9:c7:b2:b8:0f:04:43:16:8b:ef:f8: f1:7b:e0:53:7b:cc:f7:68:be:69:a0:ab:dc:ff:95: 43:2c:67:7c:7e:27:89:f5:60:50:b1:ec:28:c7:f2: 22:da:f3:aa:92:e5:3d:f2:15:e6:bb:9e:25:6d:a0: 05:9b:0d:e2:36:e2:02:ee:87:23:82:a2:c8:e3:88: b3:5b:6d:89:99:cf:e8:2e:cc:7b:4e:a7:73:8b:10: 66:3d:e9:42:9d:96:59:20:15:7a:8f:aa:83:5b:3a: 6d:7e:21:41:86:b0:cf:b7:77:6e:f7:66:b7:1c:c2: 33:2f:80:48:58:2b:80:6b:0a:12:c5:78:ba:c8:f9: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C2:8D:C6:FF:4D:72:EB:51:7B:98:19:70:43:F2:F7:0E:0E:25:E0 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a0:f1:4a:d5:35:8d:62:df:5f:f4:2d:77:ce:83:b2:a8:42: 16:d4:7c:b3:80:f2:5f:a0:55:12:7d:c7:42:58:99:61:9f:f5: 00:5f:1f:7a:ec:dc:67:83:af:4d:b4:fb:78:bf:f0:34:fe:2c: e1:eb:9f:e1:f3:ef:ac:b1:03:2e:f7:7f:1c:f6:62:6a:68:b5: 25:f5:c6:c9:b2:91:f6:1b:74:d3:15:dd:92:a3:c6:73:cd:11: d6:12:f7:11:d7:25:91:a2:fe:bb:2d:78:0e:56:c0:f9:0b:98: f8:e2:f9:88:07:e5:f2:39:8c:d9:2b:ca:74:9d:8a:e7:c7:4f: 01:0e:2b:59:b2:87:24:37:f4:b4:a0:db:1b:27:93:fb:4f:44: 41:06:df:41:d0:6b:1c:d0:7f:a9:11:c1:a5:34:90:95:de:cc: 44:78:80:14:51:48:80:3f:ba:e0:fb:0a:bf:f8:9b:d0:56:25: 10:92:32:ad:17:e9:cc:2b:9a:63:c4:b3:f0:8f:40:55:30:e6: 20:8a:28:de:d6:e3:e4:3c:e4:33:3b:c1:ca:04:11:e1:36:b1: 8a:aa:0e:3e:32:ef:44:0d:cf:2b:ee:44:08:4d:63:15:9d:77: 52:47:79:a1:e4:3b:a5:1b:39:f8:d1:98:95:d7:d4:7e:0e:22: 27:c7:6b:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjYwNDE3MDMxNDMzWhcNMjYwNDI0MDMxNDMzWjAYMRYwFAYD VQQDEw02OWUxYTU5OS0xZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xCII8PY/sTNybXYmRR0UELAtblCbQF2I/BfVFloWlIgbu0GjFTTUADvffLK f7mqyLwYPa7uVa9zcWTOqPkOF1Xsqz9i4ZDcB7Nhu2JkUf3oZrcAButYHM/dLzFy cZb2McXiJrtRzaLnkhCOPPsnOSQKKiU/z9VZ8ffI+ceyuA8EQxaL7/jxe+BTe8z3 aL5poKvc/5VDLGd8fieJ9WBQsewox/Ii2vOqkuU98hXmu54lbaAFmw3iNuIC7ocj gqLI44izW22Jmc/oLsx7TqdzixBmPelCnZZZIBV6j6qDWzptfiFBhrDPt3du92a3 HMIzL4BIWCuAawoSxXi6yPkEowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvCjcb/ TXLrUXuYGXBD8vcODiXgMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbqDxStU1jWLfX/Qtd86DsqhCFtR8s4DyX6BVEn3HQliZYZ/1AF8feuzcZ4Ov TbT7eL/wNP4s4euf4fPvrLEDLvd/HPZiami1JfXGybKR9ht00xXdkqPGc80R1hL3 EdclkaL+uy14DlbA+QuY+OL5iAfl8jmM2SvKdJ2K58dPAQ4rWbKHJDf0tKDbGyeT +09EQQbfQdBrHNB/qRHBpTSQld7MRHiAFFFIgD+64PsKv/ib0FYlEJIyrRfpzCua Y8Sz8I9AVTDmIIoo3tbj5DzkMzvBygQR4TaxiqoOPjLvRA3PK+5ECE1jFZ13Ukd5 oeQ7pRs5+NGYldfUfg4iJ8drew== -----END CERTIFICATE-----Generated at Fri Apr 17 07:47:58 2026 by rpki-client