$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json) Hash identifier: nJoBmbVD53sWJ4WewKy+9ZkCU5RSTd5da0gTQvherdM= Subject key identifier: 0A:29:8F:42:12:E4:44:8B:80:6D:E0:A4:5A:1D:AB:A7:43:8A:50:28 Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 148A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft Manifest number: 1464 Signing time: Thu 16 Apr 2026 15:24:31 +0000 Manifest this update: Thu 16 Apr 2026 15:24:30 +0000 Manifest next update: Thu 23 Apr 2026 15:24:30 +0000 Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: GtSLoiRKDY+hpZqjSTxP+F1inLZ5CiieDrASmRILeio=) 2: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: Ahq8pAmeUbi/UnTEDIDcD1i65MG+Vf7huahab+3HR9s=) 3: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: w2NWjfabvdQFP3C4IwPEM+fGnRuZMPns4zEDrwbMyxc=) 4: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: yi1Y4ZAzUNkEpGZbqmVVGbSuzm1HULg6+CfEtcyOZy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5258 (0x148a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: Apr 16 15:24:30 2026 GMT Not After : Apr 23 15:24:30 2026 GMT Subject: CN=69e0ff2f-d3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:73:1c:c7:f4:9f:30:79:97:ce:bb:47:cb: 67:06:6f:ab:a6:e7:b3:8a:31:8d:75:e5:06:55:6c: d8:c0:48:d4:2d:5b:99:1e:af:93:1b:52:a3:1b:6d: 92:b8:7c:cb:57:78:22:6e:09:46:a6:a4:fb:01:58: ee:22:0a:ee:1c:37:86:09:fa:d7:3f:79:ae:fd:07: ea:6b:e0:2c:ce:70:e5:15:9d:19:55:d0:1f:65:2b: fa:89:c6:83:5e:83:ae:31:ca:71:b4:3e:a1:86:63: 49:62:04:57:7b:18:46:68:72:32:85:90:14:53:c3: 98:a3:f1:b9:aa:b8:ae:1c:f6:7b:ba:9f:50:da:9e: f9:01:d2:01:4e:a0:c3:98:0a:6f:6d:56:35:b6:03: 34:08:de:f0:28:45:d8:10:9f:61:57:9e:e5:92:47: cd:90:64:0a:2e:5b:33:35:2e:53:4a:41:d1:f8:71: 02:fa:1a:c7:f8:f7:08:92:d1:12:96:5e:ef:fc:57: 79:02:81:06:2d:45:25:7e:ef:90:47:56:68:d5:d5: 70:d6:aa:47:33:56:71:44:74:89:e0:8c:72:93:c3: 07:55:81:d2:e2:9a:d0:db:8f:f1:b5:57:0c:55:65: 91:a1:5a:c8:68:08:a8:e4:bd:a0:49:fd:4b:c8:ae: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:29:8F:42:12:E4:44:8B:80:6D:E0:A4:5A:1D:AB:A7:43:8A:50:28 X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:74:79:bf:44:d0:85:c2:3c:1e:51:1a:30:cb:31:f3:06:5f: cf:dc:f4:25:82:b2:c7:b2:22:ea:ed:7f:5d:0a:ca:63:d4:d1: d9:c5:28:20:80:06:30:12:64:d9:89:6e:45:75:1a:c9:7b:37: 95:90:8c:d0:4c:47:76:e3:f8:a9:0d:ba:0b:b7:3f:83:f3:8a: 9e:1f:86:6e:32:8b:90:ba:b0:d7:d5:09:59:27:97:c2:87:77: 9a:c4:e1:b2:67:d2:1e:2e:d9:82:1d:4b:b0:ff:17:49:b8:fe: c5:5f:b4:b4:12:3f:4f:90:05:b3:ee:e0:d0:48:86:20:c4:1e: e9:bc:6a:7f:6b:01:88:e6:56:ab:71:ed:4b:ef:9e:4d:81:f9: 45:30:09:2c:2e:d5:98:48:0c:9f:53:1a:f3:b0:8f:9b:32:ea: 57:ef:8b:28:c4:42:41:46:5e:5e:11:c5:20:c5:77:10:4b:bd: 10:1b:2b:e2:e6:3f:e4:60:8e:ec:45:66:8b:b9:b9:ab:6e:e4: 4f:88:03:1c:93:3c:5b:55:55:13:3a:b4:46:1b:78:bb:45:2b: fc:fe:79:dd:ff:e6:5b:83:27:7d:af:5b:6b:79:1d:c6:04:78: 74:49:91:c0:7b:9b:83:32:53:31:d7:9b:d7:3a:41:44:72:2b: 66:92:49:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYwNDE2MTUyNDMwWhcNMjYwNDIzMTUyNDMwWjAYMRYwFAYD VQQDEw02OWUwZmYyZi1kM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv1zHMf0nzB5l867R8tnBm+rpuezijGNdeUGVWzYwEjULVuZHq+TG1KjG22S uHzLV3gibglGpqT7AVjuIgruHDeGCfrXP3mu/Qfqa+AsznDlFZ0ZVdAfZSv6icaD XoOuMcpxtD6hhmNJYgRXexhGaHIyhZAUU8OYo/G5qriuHPZ7up9Q2p75AdIBTqDD mApvbVY1tgM0CN7wKEXYEJ9hV57lkkfNkGQKLlszNS5TSkHR+HEC+hrH+PcIktES ll7v/Fd5AoEGLUUlfu+QR1Zo1dVw1qpHM1ZxRHSJ4Ixyk8MHVYHS4prQ24/xtVcM VWWRoVrIaAio5L2gSf1LyK5t8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAopj0IS 5ESLgG3gpFodq6dDilAoMB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wNzQ5NTg5MDkxODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5R LUFJM2phM2RTQUcxWndvLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOnR5v0TQhcI8HlEaMMsx8wZfz9z0JYKyx7Ii6u1/XQrKY9TR2cUoIIAGMBJk 2YluRXUayXs3lZCM0ExHduP4qQ26C7c/g/OKnh+GbjKLkLqw19UJWSeXwod3msTh smfSHi7Zgh1LsP8XSbj+xV+0tBI/T5AFs+7g0EiGIMQe6bxqf2sBiOZWq3HtS++e TYH5RTAJLC7VmEgMn1Ma87CPmzLqV++LKMRCQUZeXhHFIMV3EEu9EBsr4uY/5GCO 7EVmi7m5q27kT4gDHJM8W1VVEzq0Rht4u0Ur/P553f/mW4Mnfa9ba3kdxgR4dEmR wHubgzJTMdeb1zpBRHIrZpJJiA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:17:53 2026 by rpki-client