$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: jsOtlJlTRlPmvl57+kuMagl6sf9A7mGbWOW4hxVgFic= Subject key identifier: B4:AC:56:06:9D:68:B3:FB:16:00:D8:0D:EA:F7:4A:8C:09:2E:8C:34 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 70 Signing time: Thu 16 Apr 2026 23:22:38 +0000 Manifest this update: Thu 16 Apr 2026 23:22:38 +0000 Manifest next update: Thu 23 Apr 2026 23:22:38 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: jFxxiWruSYy/OvMf4OiLaC4mwU01iKpr0vFRxYt4wCM=) 2: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) 4: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 5: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) 6: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Apr 16 23:22:38 2026 GMT Not After : Apr 23 23:22:38 2026 GMT Subject: CN=69e16f3e-7859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:54:e4:b6:c0:ce:24:39:d8:2d:4a:82:5d:45: 3c:90:c0:f0:8b:92:22:00:3b:a9:8c:c8:59:0a:18: fb:b5:6e:6a:92:98:0e:e2:68:02:50:47:ec:88:71: ab:29:7c:a0:43:db:b1:95:80:c0:24:55:3f:63:b3: e1:bc:51:a7:b0:86:ed:93:72:2c:d1:32:8c:8d:40: cd:e9:ed:31:e1:30:e7:3d:5a:c8:a3:c1:7a:bb:69: 58:f0:7b:c3:c2:19:e9:3a:e2:9b:67:62:3e:7a:a0: 9d:df:c8:f4:0a:db:c2:d9:66:55:03:77:ed:2e:59: f8:c1:55:16:6b:6c:2b:51:e4:cd:14:6f:64:13:f4: 95:05:59:04:fa:71:19:dd:90:db:47:cb:dc:39:c0: 45:37:ca:fb:a5:5a:dd:7c:19:b4:33:c1:57:1d:58: 09:2b:f8:8e:d0:21:b0:95:01:a1:41:af:e8:8f:27: c4:8e:09:0b:a0:d8:43:44:26:2c:7e:7c:eb:1a:b1: da:70:f8:ed:c8:6a:95:4e:76:60:83:36:37:1e:50: 2c:a5:53:54:2e:be:75:ed:27:5a:c5:59:65:cd:79: 34:c2:e5:cc:29:de:96:58:ba:2b:04:81:da:e5:83: 8b:a8:cf:03:9f:0d:53:e4:2b:09:f5:50:d5:03:fb: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AC:56:06:9D:68:B3:FB:16:00:D8:0D:EA:F7:4A:8C:09:2E:8C:34 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:15:99:ab:ba:4f:ce:72:17:05:35:02:44:12:a7:be:37:8d: d4:2c:52:dd:ec:19:59:86:b4:95:99:6b:8f:53:24:3d:f4:55: d7:e4:70:c1:00:e8:1a:dc:ae:c0:83:ad:ba:b5:cd:61:be:4b: 37:11:b9:d3:8c:54:e1:80:db:7d:d6:df:6c:14:5a:82:d8:68: c2:6b:87:4c:b9:75:62:2e:72:0a:15:c4:fd:85:cd:2a:86:5a: 00:60:f8:8b:cf:6a:5a:91:ff:53:0d:11:03:bd:63:44:c9:c2: 8a:d3:c3:32:3b:33:6b:b2:44:86:65:04:4c:ed:5f:62:3a:69: 19:5b:ee:ba:4c:bf:bf:31:6e:45:e8:58:b0:70:f4:4a:df:f0: 45:da:7d:32:29:58:f7:f5:c8:8b:eb:44:c2:a5:10:f6:ea:2a: 5a:17:23:24:8c:f6:f3:ba:07:a6:7c:bd:a1:12:d9:b5:d3:51: 06:ec:50:02:cc:15:d6:dd:fd:be:a8:ff:fc:6e:23:69:1a:c1: d1:f9:15:89:ff:7b:77:86:3a:41:b6:49:c6:1b:b6:9b:80:3b: 1c:5c:f2:de:6d:09:84:4c:17:11:27:c3:fc:ef:e1:fb:bc:13: 96:ec:60:df:4b:5d:59:b2:56:69:8c:0b:e6:58:18:61:38:08: 56:8a:32:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwNDE2MjMyMjM4WhcNMjYwNDIzMjMyMjM4WjAYMRYwFAYD VQQDEw02OWUxNmYzZS03ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FTktsDOJDnYLUqCXUU8kMDwi5IiADupjMhZChj7tW5qkpgO4mgCUEfsiHGr KXygQ9uxlYDAJFU/Y7PhvFGnsIbtk3Is0TKMjUDN6e0x4TDnPVrIo8F6u2lY8HvD whnpOuKbZ2I+eqCd38j0CtvC2WZVA3ftLln4wVUWa2wrUeTNFG9kE/SVBVkE+nEZ 3ZDbR8vcOcBFN8r7pVrdfBm0M8FXHVgJK/iO0CGwlQGhQa/ojyfEjgkLoNhDRCYs fnzrGrHacPjtyGqVTnZggzY3HlAspVNULr517SdaxVllzXk0wuXMKd6WWLorBIHa 5YOLqM8Dnw1T5CsJ9VDVA/v7nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSsVgad aLP7FgDYDer3SowJLow0MB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQhWZq7pPznIXBTUCRBKnvjeN1CxS3ewZWYa0lZlrj1MkPfRV1+RwwQDoGtyu wIOturXNYb5LNxG504xU4YDbfdbfbBRagthowmuHTLl1Yi5yChXE/YXNKoZaAGD4 i89qWpH/Uw0RA71jRMnCitPDMjsza7JEhmUETO1fYjppGVvuuky/vzFuRehYsHD0 St/wRdp9MilY9/XIi+tEwqUQ9uoqWhcjJIz287oHpny9oRLZtdNRBuxQAswV1t39 vqj//G4jaRrB0fkVif97d4Y6QbZJxhu2m4A7HFzy3m0JhEwXESfD/O/h+7wTluxg 30tdWbJWaYwL5lgYYTgIVooyJw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:10:45 2026 by rpki-client