$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: DPF2SzRpe3dKJLiIkRozq6qAvMbIeZ14W9ozHbOGsso= Subject key identifier: 70:29:85:33:B4:37:A3:1D:E8:75:4B:E8:16:4E:BF:D4:D5:2D:D1:94 Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 35 Signing time: Fri 17 Apr 2026 08:17:44 +0000 Manifest this update: Fri 17 Apr 2026 08:17:43 +0000 Manifest next update: Fri 24 Apr 2026 08:17:43 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: 6dC5dQzu/lSuoV8OOBfujF2HkpsbP9Z0Cv3WrG4Y1HI=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Apr 17 08:17:43 2026 GMT Not After : Apr 24 08:17:43 2026 GMT Subject: CN=69e1eca8-1d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:69:c6:1b:49:2d:a0:bd:7c:1a:5a:42:21: 7a:9b:b7:06:e4:03:11:ed:7d:23:e5:3f:d6:ed:4b: 80:48:cd:90:31:13:af:1b:78:d3:21:9a:41:7e:99: 21:87:1d:3d:8f:ba:b2:47:f8:e6:41:e2:e9:2c:6b: d8:c3:4c:60:73:dd:3a:d4:cc:fc:89:5c:0a:04:cb: 47:69:3d:e1:a3:fe:33:ec:00:8c:72:40:71:ac:9d: 7b:31:41:89:6d:df:67:6b:75:3c:c8:e9:bf:0a:76: 73:4c:fc:45:77:0a:ba:e0:63:9e:23:f9:ed:04:2e: e9:06:9d:fb:05:e2:ac:00:39:12:e9:cc:2b:1a:4c: 28:01:95:4e:67:d4:c2:f9:a8:a7:47:c6:68:89:04: 1e:8e:f1:86:00:fb:40:17:65:82:8f:6e:ef:9a:87: 3d:f5:47:f4:c9:b1:c2:3c:65:23:cf:25:fb:1c:4c: 2e:e2:e3:ec:39:53:4d:c2:2a:0b:de:e8:6b:aa:45: 90:cc:64:8e:69:37:6d:c9:49:19:66:f4:ce:a2:c6: aa:d1:87:45:0f:99:fb:ed:dd:c2:f4:32:c3:a9:c4: c1:b8:f1:93:b1:a9:b1:13:3f:7d:ef:33:c1:e5:c2: d5:5d:d2:b5:1e:29:eb:4d:39:0a:6f:b4:56:fe:86: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:29:85:33:B4:37:A3:1D:E8:75:4B:E8:16:4E:BF:D4:D5:2D:D1:94 X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:6e:5f:fc:65:71:d1:1f:4a:e8:22:6f:63:03:ea:d9:f4: 7f:31:8d:47:4b:a1:df:88:50:35:34:02:ec:e0:06:62:c7:d0: 95:fb:7b:18:cb:fd:6d:34:85:4f:2d:0f:ec:16:dd:63:89:65: a4:55:3d:23:27:06:15:01:d4:58:78:b8:0e:fc:9f:82:8b:a1: 4e:f7:4e:3c:16:96:c2:95:1b:2a:8f:8c:cc:10:08:e0:eb:e7: 46:9f:82:69:2d:94:ea:04:88:17:34:1e:c2:1a:8c:c1:27:5b: 93:fc:52:56:9c:a2:40:34:8d:50:58:3f:ee:53:98:84:95:55: 3c:6e:d2:57:62:d8:a1:63:05:75:bf:86:d1:d0:16:e9:9f:ee: ee:61:4c:0b:37:46:c7:65:f8:44:29:00:8a:cd:99:0f:b2:f0: d0:3e:40:20:63:1a:b6:6f:bd:05:66:09:84:e1:cc:1d:02:8d: 94:f1:ae:c9:c3:21:fa:13:6f:36:48:da:cc:35:09:ef:38:b6: 6c:4c:c9:a4:aa:6a:20:a5:2d:02:a9:bc:1a:a4:3e:da:c5:7e: e2:5b:b1:d7:84:2e:97:81:f5:5a:43:74:ad:47:81:d2:ae:ec: c7:79:8b:3f:3c:74:b5:67:b9:d2:94:2b:b8:cb:c5:31:79:6b: 2a:e0:a4:8a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx MTU2NTMzNDAeFw0yNjA0MTcwODE3NDNaFw0yNjA0MjQwODE3NDNaMBgxFjAUBgNV BAMTDTY5ZTFlY2E4LTFkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKJmnGG0ktoL18GlpCIXqbtwbkAxHtfSPlP9btS4BIzZAxE68beNMhmkF+mSGH HT2PurJH+OZB4uksa9jDTGBz3TrUzPyJXAoEy0dpPeGj/jPsAIxyQHGsnXsxQYlt 32drdTzI6b8KdnNM/EV3CrrgY54j+e0ELukGnfsF4qwAORLpzCsaTCgBlU5n1ML5 qKdHxmiJBB6O8YYA+0AXZYKPbu+ahz31R/TJscI8ZSPPJfscTC7i4+w5U03CKgve 6GuqRZDMZI5pN23JSRlm9M6ixqrRh0UPmfvt3cL0MsOpxMG48ZOxqbETP33vM8Hl wtVd0rUeKetNOQpvtFb+hh5vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcCmFM7Q3 ox3odUvoFk6/1NUt0ZQwHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDQxL0UwODFBNjBBRUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExC ck56SUhpa0l3cnhGV1V6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwf25f/GVx0R9K6CJvYwPq2fR/MY1HS6HfiFA1NALs4AZix9CV+3sYy/1tNIVP LQ/sFt1jiWWkVT0jJwYVAdRYeLgO/J+Ci6FO9048FpbClRsqj4zMEAjg6+dGn4Jp LZTqBIgXNB7CGozBJ1uT/FJWnKJANI1QWD/uU5iElVU8btJXYtihYwV1v4bR0Bbp n+7uYUwLN0bHZfhEKQCKzZkPsvDQPkAgYxq2b70FZgmE4cwdAo2U8a7JwyH6E282 SNrMNQnvOLZsTMmkqmogpS0CqbwapD7axX7iW7HXhC6XgfVaQ3StR4HSruzHeYs/ PHS1Z7nSlCu4y8UxeWsq4KSK -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:38 2026 by rpki-client