$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft File: vCXNTkiu32CLScwphHLFwG6L9vs.mft (raw, json) Hash identifier: Tz50ohMS2PbU/+dHmTFidSxIeU0j3F9qKenMcM5J270= Subject key identifier: 3C:B4:FE:35:0D:E9:D1:7C:33:67:99:C2:F9:EC:8C:FC:39:68:3E:E6 Authority key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB Certificate issuer: /CN=A91E4700/serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft Manifest number: 5A Signing time: Wed 15 Apr 2026 07:39:10 +0000 Manifest this update: Wed 15 Apr 2026 07:39:10 +0000 Manifest next update: Wed 22 Apr 2026 07:39:10 +0000 Files and hashes: 1: vCXNTkiu32CLScwphHLFwG6L9vs.crl (hash: djtqwijHsTTh6KiOetTwiBESGbAZGDsSuU3ZqRtLfDc=) 2: A9CD5C92BB8C11F08999FE2AC4F9AE02.roa (hash: c3y0t6IJx6Q11r5JDlgaeAC6nTxUNX96hYufhWBf0xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB Validity Not Before: Apr 15 07:39:10 2026 GMT Not After : Apr 22 07:39:10 2026 GMT Subject: CN=69df409e-b487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:c3:dc:da:91:58:77:3b:de:ee:0c:6e:6f: 54:61:71:10:e0:a4:d6:c9:99:06:83:74:70:03:31: 21:a6:1d:fb:e4:2d:70:49:16:c0:3a:bd:f4:6c:f1: c2:c0:2b:45:e8:36:67:e4:80:97:b1:df:7f:84:f2: 73:06:cd:75:0d:4c:9b:40:46:ed:df:32:f8:62:6e: 50:e1:ba:01:c5:fa:6c:d9:ff:25:e0:dc:45:1f:28: c9:43:28:e4:34:ef:d6:c2:09:1c:c6:c5:cb:f2:e4: 15:1d:49:69:28:5e:30:a1:ef:50:b2:82:bf:61:65: 0b:67:9a:0c:29:08:9f:01:75:fe:b4:40:26:41:3d: 90:e1:ee:9c:f4:e6:ef:6f:1f:e3:65:90:71:eb:df: 06:03:53:f0:f8:83:c9:58:c5:6a:c2:c8:5a:b5:c7: 6f:0a:bb:72:d7:f4:c5:b1:4b:f1:2d:d5:ce:a6:dc: 82:ab:aa:c8:45:14:2b:ef:cf:aa:5d:d0:16:24:5a: 82:45:84:57:e9:d4:cf:1a:8f:a6:d6:63:dd:9f:7c: 4d:56:fe:29:ea:aa:d0:12:e4:28:fe:31:3d:8d:53: f7:30:3e:b4:bc:bc:58:d3:c6:43:81:bc:d8:e0:b9: 8d:b1:b0:3b:ac:7e:37:f3:d3:3f:d5:45:6e:bf:cb: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:FE:35:0D:E9:D1:7C:33:67:99:C2:F9:EC:8C:FC:39:68:3E:E6 X509v3 Authority Key Identifier: keyid:BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:41:ec:0e:bd:98:4a:51:33:e9:ea:e7:bb:62:35:ff:b9:70: a9:5d:a9:b1:b3:fe:f4:2c:ad:c9:10:48:5d:bf:2e:68:cc:13: 03:87:ff:ac:ec:cb:e1:bf:35:83:25:0a:24:f5:5e:7a:12:82: b4:af:43:07:91:d6:f8:a4:4e:ac:34:ee:a8:42:23:2f:cd:b2: a3:aa:b9:31:6c:f6:f8:c2:7f:79:28:bd:d4:b3:49:f4:5c:56: f9:e4:5e:b6:e0:59:48:8f:f0:f2:52:0f:be:0d:23:2f:a0:a2: ba:0d:51:28:ef:69:2e:ea:2b:54:77:8d:95:f2:5d:5d:33:bc: 5e:7b:10:7b:44:91:76:38:1a:fe:db:74:ba:14:23:bf:fd:a5: 0f:a4:46:33:74:32:ab:1c:50:64:3d:86:65:d4:af:2e:ac:fd: 90:b5:78:c4:48:4c:57:44:4f:10:84:ca:d4:9f:bf:11:52:48: 25:7f:00:c8:f4:91:9d:71:ff:f4:1d:73:5d:56:c9:8b:1c:84: c4:f9:0c:95:e9:6d:96:72:e2:d8:29:4b:22:d0:fc:34:1c:4a: 4b:45:fb:2c:36:30:78:6b:93:cf:62:0e:01:43:3c:43:81:03: 92:d7:ef:e4:cd:93:08:91:60:e8:06:de:8d:22:45:a1:bb:10: d0:6b:8b:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwMDExMC8GA1UEBRMoQkMyNUNENEU0OEFFREY2MDhCNDlDQzI5ODQ3MkM1QzA2 RThCRjZGQjAeFw0yNjA0MTUwNzM5MTBaFw0yNjA0MjIwNzM5MTBaMBgxFjAUBgNV BAMTDTY5ZGY0MDllLWI0ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWCsPc2pFYdzve7gxub1RhcRDgpNbJmQaDdHADMSGmHfvkLXBJFsA6vfRs8cLA K0XoNmfkgJex33+E8nMGzXUNTJtARu3fMvhiblDhugHF+mzZ/yXg3EUfKMlDKOQ0 79bCCRzGxcvy5BUdSWkoXjCh71Cygr9hZQtnmgwpCJ8Bdf60QCZBPZDh7pz05u9v H+NlkHHr3wYDU/D4g8lYxWrCyFq1x28Ku3LX9MWxS/Et1c6m3IKrqshFFCvvz6pd 0BYkWoJFhFfp1M8aj6bWY92ffE1W/inqqtAS5Cj+MT2NU/cwPrS8vFjTxkOBvNjg uY2xsDusfjfz0z/VRW6/y9WnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPLT+NQ3p 0XwzZ5nC+eyM/DloPuYwHwYDVR0jBBgwFoAUvCXNTkiu32CLScwphHLFwG6L9vsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzAwLzE4NkYyQzJBQkI4 MzExRjA4ODk2OTc2NUM0RjlBRTAyL3ZDWE5Ua2l1MzJDTFNjd3BoSExGd0c2TDl2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkNYTlRraXUzMkNMU2N3cGhITEZ3RzZMOXZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 NzAwLzE4NkYyQzJBQkI4MzExRjA4ODk2OTc2NUM0RjlBRTAyL3ZDWE5Ua2l1MzJD TFNjd3BoSExGd0c2TDl2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9QewOvZhKUTPp6ue7YjX/uXCpXamxs/70LK3JEEhdvy5ozBMDh/+s7MvhvzWD JQok9V56EoK0r0MHkdb4pE6sNO6oQiMvzbKjqrkxbPb4wn95KL3Us0n0XFb55F62 4FlIj/DyUg++DSMvoKK6DVEo72ku6itUd42V8l1dM7xeexB7RJF2OBr+23S6FCO/ /aUPpEYzdDKrHFBkPYZl1K8urP2QtXjESExXRE8QhMrUn78RUkglfwDI9JGdcf/0 HXNdVsmLHITE+QyV6W2WcuLYKUsi0Pw0HEpLRfssNjB4a5PPYg4BQzxDgQOS1+/k zZMIkWDoBt6NIkWhuxDQa4tc -----END CERTIFICATE-----Generated at Fri Apr 17 04:06:50 2026 by rpki-client