$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json) Hash identifier: mOCi2WURBxMZGc+0sYQ1lWIF2azK7xGEa6QlNCXRgWA= Subject key identifier: DA:9A:64:4B:CE:C4:5D:88:72:1E:C2:AD:38:67:8E:F6:FD:85:5F:6E Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft Manifest number: 33 Signing time: Fri 17 Apr 2026 08:20:59 +0000 Manifest this update: Fri 17 Apr 2026 08:20:59 +0000 Manifest next update: Fri 24 Apr 2026 08:20:59 +0000 Files and hashes: 1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: LzcILdKhATjvrGY+ho7IOOMsa6Mb02fwzlVoB243UJQ=) 2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Validity Not Before: Apr 17 08:20:59 2026 GMT Not After : Apr 24 08:20:59 2026 GMT Subject: CN=69e1ed6b-7849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:fe:fd:62:7e:bd:ec:42:33:84:35:dd:f4: 6c:6c:5e:2f:49:e8:17:45:ae:7e:7a:44:d4:c9:3b: 61:60:c2:88:f4:71:70:13:dd:64:12:57:9e:1b:e1: 43:03:75:09:6b:a9:55:38:a4:78:60:e1:eb:21:e5: 93:62:df:5b:cf:c8:b4:30:a2:24:fa:54:50:2a:7a: 80:a3:a8:8b:7b:94:5b:0c:c5:02:2a:a2:32:3d:c8: ee:09:9b:f3:43:47:c9:fd:f3:a3:ab:c7:b6:7c:64: d4:8f:8e:2a:74:9c:d2:72:13:9d:ff:fe:cb:c8:90: 26:5e:ba:42:ec:9d:39:07:92:e0:ab:2a:e1:ff:7e: fd:ea:2b:11:22:4b:c5:e1:99:cd:5a:1c:92:f7:a1: 65:ea:b7:27:77:75:0e:2b:33:e3:9b:26:d3:b9:60: 52:62:75:f5:25:d5:c7:52:f1:af:24:a2:b1:b2:bc: ca:0b:82:ad:8d:3d:11:b6:82:d9:97:3d:0e:76:02: cc:59:bf:24:3c:01:e5:38:8a:d4:a4:f7:a5:c7:3e: 50:48:21:e5:12:f3:d1:0a:bf:4b:ff:07:0e:9d:2e: 88:67:79:6b:ac:84:d3:18:1f:f8:69:e9:0b:d7:f4: 51:a4:4e:37:9c:bd:b2:73:2d:1e:41:20:a5:d5:d7: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9A:64:4B:CE:C4:5D:88:72:1E:C2:AD:38:67:8E:F6:FD:85:5F:6E X509v3 Authority Key Identifier: keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c3:68:1a:6b:4e:c9:9f:6d:65:c5:be:a4:90:ec:a5:ba:3f: f6:9b:4c:0c:f5:f6:27:b5:95:cc:11:6f:ca:02:fe:b9:38:09: 32:64:65:d8:7b:a4:ef:62:03:aa:a9:ff:9f:c2:92:79:17:b0: f6:cb:27:cb:86:0f:86:e4:b5:c7:82:38:fe:05:d6:8f:4e:2c: 18:3d:c1:f8:3c:7d:e3:c2:c6:2d:e4:65:13:68:69:c2:9a:56: e0:4b:df:92:2b:18:b3:45:e3:b7:a9:41:7f:07:c5:74:53:09: 65:4b:dd:e0:93:d1:99:ea:93:fb:53:45:39:c8:a6:13:52:de: 95:1e:db:b5:d5:d4:37:20:75:05:de:41:21:8e:c5:1b:f7:2f: 32:b8:f0:7b:b5:39:73:a8:5c:8f:e9:3a:56:64:14:74:36:d4: 13:97:c7:15:dd:18:47:0c:4f:38:6e:d3:b8:d0:b1:21:0a:6f: 2b:db:bd:94:52:94:6a:60:a9:3c:f8:3b:64:21:fc:f5:8f:42: e3:86:ab:47:1b:0a:17:1a:bb:2b:1d:68:01:4e:4d:72:f2:76: 2c:12:44:93:e0:b1:5a:85:ad:1a:b1:c7:3b:dd:c8:55:a2:69: 57:60:44:8a:0e:b4:3a:42:88:61:27:91:6a:42:20:94:e3:7d: 80:2f:9f:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTg1QjExMC8GA1UEBRMoMzFDOEU0RDQzODk3NEVERDBFODdBMUM3RUJEOTA5Q0Ex QzFEMTJBNTAeFw0yNjA0MTcwODIwNTlaFw0yNjA0MjQwODIwNTlaMBgxFjAUBgNV BAMTDTY5ZTFlZDZiLTc4NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmw/79Yn697EIzhDXd9GxsXi9J6BdFrn56RNTJO2Fgwoj0cXAT3WQSV54b4UMD dQlrqVU4pHhg4esh5ZNi31vPyLQwoiT6VFAqeoCjqIt7lFsMxQIqojI9yO4Jm/ND R8n986Orx7Z8ZNSPjip0nNJyE53//svIkCZeukLsnTkHkuCrKuH/fv3qKxEiS8Xh mc1aHJL3oWXqtyd3dQ4rM+ObJtO5YFJidfUl1cdS8a8korGyvMoLgq2NPRG2gtmX PQ52AsxZvyQ8AeU4itSk96XHPlBIIeUS89EKv0v/Bw6dLohneWushNMYH/hp6QvX 9FGkTjecvbJzLR5BIKXV1wt/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2ppkS87E XYhyHsKtOGeO9v2FX24wHwYDVR0jBBgwFoAUMcjk1DiXTt0Oh6HH69kJyhwdEqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0FGRDFCNTAyRjIw NTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQwT2g2SEg2OWtKeWh3ZEVx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWNqazFEaVhUdDBPaDZISDY5a0p5aHdkRXFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODVCL0FGRDFCNTAyRjIwNTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQw T2g2SEg2OWtKeWh3ZEVxVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZw2gaa07Jn21lxb6kkOyluj/2m0wM9fYntZXMEW/KAv65OAkyZGXYe6TvYgOq qf+fwpJ5F7D2yyfLhg+G5LXHgjj+BdaPTiwYPcH4PH3jwsYt5GUTaGnCmlbgS9+S KxizReO3qUF/B8V0UwllS93gk9GZ6pP7U0U5yKYTUt6VHtu11dQ3IHUF3kEhjsUb 9y8yuPB7tTlzqFyP6TpWZBR0NtQTl8cV3RhHDE84btO40LEhCm8r272UUpRqYKk8 +DtkIfz1j0LjhqtHGwoXGrsrHWgBTk1y8nYsEkST4LFaha0ascc73chVomlXYESK DrQ6QohhJ5FqQiCU432AL59v -----END CERTIFICATE-----Generated at Fri Apr 17 21:36:01 2026 by rpki-client