$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json) Hash identifier: ZrAnIg03leuSZmygz177EMNvDUj+rCHs3ps99kVGeGQ= Subject key identifier: E9:C4:7B:52:C5:8C:A9:D8:4D:6A:06:55:3C:4E:9B:A7:5D:8F:10:C1 Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft Manifest number: 43 Signing time: Fri 17 Apr 2026 08:04:27 +0000 Manifest this update: Fri 17 Apr 2026 08:04:26 +0000 Manifest next update: Fri 24 Apr 2026 08:04:26 +0000 Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: 98jA84uAlag9Jt9cHZpJoz9Ea45+wYknYra40ktH0uQ=) 2: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: Ifqu/imW1CpJtOK3B5gKpgSp1ZH+G/n9WtAUtx4GCTI=) 3: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: T0uD7GQksTME+qhX3xTaNiGDGWI7HGkb3DLPjDo3u3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Validity Not Before: Apr 17 08:04:26 2026 GMT Not After : Apr 24 08:04:26 2026 GMT Subject: CN=69e1e98b-9499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:b6:b9:59:6c:1d:41:63:e8:93:36:39:15: 15:d1:4d:73:10:03:8a:28:f1:e5:d9:b8:68:fb:d1: 4e:1b:d2:54:99:b8:44:07:1a:b7:72:b0:9a:d4:83: ea:b5:f8:a7:38:4a:2b:f7:e1:09:24:ec:af:5e:ad: ff:c5:96:4e:14:ed:16:ec:df:ec:4d:d4:88:37:f3: 12:59:cd:f7:49:43:3b:4f:e1:b0:d3:98:6e:13:b2: 4e:3e:47:02:c1:19:23:19:94:3c:b5:ad:4f:af:2a: d8:c0:39:d7:c0:91:60:96:bf:ef:27:7e:f0:e0:83: 37:6f:74:61:27:cb:d9:9a:f4:40:08:a7:0c:3f:cb: 6c:73:c5:9d:1a:07:5b:0e:7a:92:6e:10:c8:d2:86: a4:b3:26:61:79:f0:85:ee:b1:24:d0:6f:03:16:7a: ff:12:c1:96:5d:f6:be:c6:9d:99:e8:0d:04:45:35: dd:7b:9e:fd:9d:11:6c:8f:ff:4c:35:1f:a6:2d:7f: 6c:bc:84:25:da:17:f5:33:05:6f:d7:9e:7c:4f:dc: 38:5e:33:9d:34:61:60:9e:08:9a:16:0e:38:a1:8c: 77:0f:b5:80:9a:75:aa:9b:ee:a6:66:fd:00:30:12: e9:20:92:67:8f:cb:66:2c:1e:a4:cc:b0:3c:50:a7: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:7B:52:C5:8C:A9:D8:4D:6A:06:55:3C:4E:9B:A7:5D:8F:10:C1 X509v3 Authority Key Identifier: keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:10:20:9e:3c:f2:d1:36:c8:8f:51:ef:69:03:49:0b:2f:f8: 85:a5:f4:46:1f:5e:7f:a2:1a:95:4f:85:f8:97:5d:0e:20:f7: 50:05:3d:79:cf:99:60:e9:98:2e:87:aa:48:b6:46:8d:39:c3: f3:51:d6:00:eb:eb:a5:ee:73:49:dd:be:78:44:09:71:2a:79: c0:50:c5:52:e2:3a:c7:9e:62:49:d8:03:3c:57:c2:67:62:84: 1c:54:32:7d:8f:ae:4b:5a:1b:bc:12:9d:0b:63:ad:2c:99:62: 7f:55:46:fa:36:c3:c1:fe:f8:0e:07:34:f3:0f:a0:32:eb:ef: 71:8e:49:01:61:e5:98:e4:d1:ed:f5:38:30:32:d3:4c:23:cb: e1:4e:53:1f:67:b4:13:73:f8:09:3c:60:c8:6b:2a:22:35:91: 7e:9a:0b:88:38:78:77:44:5e:a0:1c:83:cd:b0:fe:ad:e0:39: 4d:59:db:e6:98:e8:f4:1f:13:92:01:19:e4:f9:7b:00:ab:16: 9d:77:e7:d3:d1:a7:f5:b9:89:63:30:02:06:d6:d4:a8:f6:ae: fc:5a:d7:cf:4b:95:2a:8a:6c:02:5d:31:f5:d6:77:91:82:0f: 6a:2b:d4:f5:3d:bc:ee:5d:b2:6f:f4:3c:a7:eb:da:8f:71:4f: e2:e0:4a:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkQ4RjExMC8GA1UEBRMoOUFEODkyOEVBRjI1QzUxQ0IzQjMyMTFENDlCNkJBQjlG MEI5RjY3RjAeFw0yNjA0MTcwODA0MjZaFw0yNjA0MjQwODA0MjZaMBgxFjAUBgNV BAMTDTY5ZTFlOThiLTk0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVGba5WWwdQWPokzY5FRXRTXMQA4oo8eXZuGj70U4b0lSZuEQHGrdysJrUg+q1 +Kc4Siv34Qkk7K9erf/Flk4U7Rbs3+xN1Ig38xJZzfdJQztP4bDTmG4Tsk4+RwLB GSMZlDy1rU+vKtjAOdfAkWCWv+8nfvDggzdvdGEny9ma9EAIpww/y2xzxZ0aB1sO epJuEMjShqSzJmF58IXusSTQbwMWev8SwZZd9r7GnZnoDQRFNd17nv2dEWyP/0w1 H6Ytf2y8hCXaF/UzBW/XnnxP3DheM500YWCeCJoWDjihjHcPtYCadaqb7qZm/QAw EukgkmePy2YsHqTMsDxQp929AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6cR7UsWM qdhNagZVPE6bp12PEMEwHwYDVR0jBBgwFoAUmtiSjq8lxRyzsyEdSba6ufC59n8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGLzUyRUJDOEM4RDk5 QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5enN5RWRTYmE2dWZDNTlu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRpU2pxOGx4Unl6c3lFZFNiYTZ1ZkM1OW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC RDhGLzUyRUJDOEM4RDk5QjExRjA4NEY0MzZCMTY1RDM2NDFEL210aVNqcThseFJ5 enN5RWRTYmE2dWZDNTluOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCyECCePPLRNsiPUe9pA0kLL/iFpfRGH15/ohqVT4X4l10OIPdQBT15z5lg6Zgu h6pItkaNOcPzUdYA6+ul7nNJ3b54RAlxKnnAUMVS4jrHnmJJ2AM8V8JnYoQcVDJ9 j65LWhu8Ep0LY60smWJ/VUb6NsPB/vgOBzTzD6Ay6+9xjkkBYeWY5NHt9TgwMtNM I8vhTlMfZ7QTc/gJPGDIayoiNZF+mguIOHh3RF6gHIPNsP6t4DlNWdvmmOj0HxOS ARnk+XsAqxadd+fT0af1uYljMAIG1tSo9q78WtfPS5UqimwCXTH11neRgg9qK9T1 PbzuXbJv9Dyn69qPcU/i4Eqy -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:07 2026 by rpki-client