$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json) Hash identifier: aaC3agKFQIcn6uVgxSW8e95nYzzXg/NKlmfIHPCdFgQ= Subject key identifier: 9A:28:97:F3:89:2C:7B:6D:30:94:DA:AD:33:9B:89:5F:1F:2B:FC:4A Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Certificate serial: 14F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft Manifest number: 14D3 Signing time: Sat 18 Apr 2026 16:46:13 +0000 Manifest this update: Sat 18 Apr 2026 16:46:13 +0000 Manifest next update: Sat 25 Apr 2026 16:46:13 +0000 Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: laNOtZH45jvcTYjImv2bMA1387i47yrnOl69+T33bq0=) 2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: ri400EEfSt1Zr4saG3aAHE5et+UN5EhiVulgcbMnm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 16:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5361 (0x14f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Validity Not Before: Apr 18 16:46:13 2026 GMT Not After : Apr 25 16:46:13 2026 GMT Subject: CN=69e3b555-fc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:02:00:ba:b1:97:e0:3b:c0:0c:93:40:15: 11:7e:a7:c4:e8:6d:f1:3c:cf:d1:fd:44:af:63:43: da:11:a2:50:38:e0:18:84:60:2f:83:d3:55:08:f2: f0:a4:4a:ed:e6:33:73:aa:ca:91:84:d2:e3:4d:df: fe:91:83:b6:76:1e:4c:3f:c2:a5:e2:b0:43:00:a5: b6:d8:13:c6:f3:fe:b8:93:de:9f:b7:01:b6:56:5a: c7:cb:b6:4d:3c:23:62:d9:9c:32:87:23:be:b4:6a: 72:e5:f3:45:5a:93:d9:92:cd:fe:27:c5:50:87:ca: 30:06:88:a8:49:d1:cd:e8:5f:b0:4a:8a:cf:af:f2: 6a:b3:bb:7e:c2:8f:a2:33:ee:a5:17:87:ab:5f:dc: 6d:a7:ca:63:74:6e:99:b2:96:b1:b3:89:e5:4c:69: b9:c3:68:bf:12:65:0b:33:57:8b:35:de:b0:54:6d: 6b:41:c7:38:5a:be:4b:50:90:a5:c6:a0:74:52:fe: f3:db:82:0e:cd:e6:2f:81:77:27:d7:e0:57:fa:b8: 37:63:11:aa:96:e8:6e:83:76:13:9f:7a:05:cd:db: 05:58:d0:94:13:81:31:72:c7:2a:26:61:96:40:6d: a9:33:d8:93:1c:d0:b0:c7:27:28:c1:0d:19:6b:d2: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:97:F3:89:2C:7B:6D:30:94:DA:AD:33:9B:89:5F:1F:2B:FC:4A X509v3 Authority Key Identifier: keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2f:98:40:c6:a8:90:51:53:8d:53:54:09:aa:4a:ad:0b:f6: c9:2a:1c:a6:d3:b8:ca:00:a9:27:d4:95:ac:45:85:1b:0e:4e: ea:66:2c:2d:61:43:c9:5a:db:be:7f:58:b0:0f:26:ca:ad:ec: 70:34:f9:73:3b:45:d0:40:80:a3:d9:6f:6e:36:bb:50:cf:45: 8c:f3:fe:38:cd:42:d9:f4:51:9a:db:63:ef:e3:fc:cb:d4:b7: 8d:5d:98:2c:6e:dd:1e:ef:af:b3:d1:bf:67:1a:ca:f3:ce:cb: b8:4e:09:de:d5:fc:4b:a4:ee:c7:ca:fe:1a:49:88:8c:e3:94: 13:b7:b1:5c:bb:34:7b:56:88:0b:0d:b1:87:0b:71:32:e8:44: 74:e0:b5:9c:af:90:da:7b:a7:68:53:9d:a3:b8:5f:bf:65:53: ef:47:76:b9:b6:3d:3d:4b:0a:03:e8:9e:6b:30:c0:81:a1:78: b4:01:35:8e:7f:ca:c8:0f:3e:5a:bd:59:48:15:28:bf:0d:03: bd:60:70:d4:88:49:43:b1:f0:8a:47:5c:40:57:14:e9:cc:0e: 5f:22:4e:83:2a:6b:de:0f:22:73:ae:52:a5:43:bd:7c:07:cb: 32:f0:70:5d:81:29:8b:58:39:12:fd:92:f3:61:cb:05:51:44: 1e:86:d8:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2QjgxMTAvBgNVBAUTKDMwRTdERUIxQzUyMkU3OTE1OTg1OTJCNjQ1MzA4ODYz Q0EwMDBFMTgwHhcNMjYwNDE4MTY0NjEzWhcNMjYwNDI1MTY0NjEzWjAYMRYwFAYD VQQDEw02OWUzYjU1NS1mYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38YCALqxl+A7wAyTQBURfqfE6G3xPM/R/USvY0PaEaJQOOAYhGAvg9NVCPLw pErt5jNzqsqRhNLjTd/+kYO2dh5MP8Kl4rBDAKW22BPG8/64k96ftwG2VlrHy7ZN PCNi2ZwyhyO+tGpy5fNFWpPZks3+J8VQh8owBoioSdHN6F+wSorPr/Jqs7t+wo+i M+6lF4erX9xtp8pjdG6Zspaxs4nlTGm5w2i/EmULM1eLNd6wVG1rQcc4Wr5LUJCl xqB0Uv7z24IOzeYvgXcn1+BX+rg3YxGqluhug3YTn3oFzdsFWNCUE4ExcscqJmGW QG2pM9iTHNCwxycowQ0Za9JPUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJool/OJ LHttMJTarTObiV8fK/xKMB8GA1UdIwQYMBaAFDDn3rHFIueRWYWStkUwiGPKAA4Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZCOC9GRjE1MDhFRTdF OUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1RlpoWksyUlRDSVk4b0FE aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PZmVzY1VpNTVGWmhaSzJSVENJWThvQURoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzZCOC9GRjE1MDhFRTdFOUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1 RlpoWksyUlRDSVk4b0FEaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhS+YQMaokFFTjVNUCapKrQv2ySocptO4ygCpJ9SVrEWFGw5O6mYsLWFDyVrb vn9YsA8myq3scDT5cztF0ECAo9lvbja7UM9FjPP+OM1C2fRRmttj7+P8y9S3jV2Y LG7dHu+vs9G/ZxrK887LuE4J3tX8S6Tux8r+GkmIjOOUE7exXLs0e1aICw2xhwtx MuhEdOC1nK+Q2nunaFOdo7hfv2VT70d2ubY9PUsKA+ieazDAgaF4tAE1jn/KyA8+ Wr1ZSBUovw0DvWBw1IhJQ7HwikdcQFcU6cwOXyJOgypr3g8ic65SpUO9fAfLMvBw XYEpi1g5Ev2S82HLBVFEHobYOw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:23 2026 by rpki-client