$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: f677FFf4zGjeASF+4r4wA0xxinwLwzrJjvodfQMAAzE= Subject key identifier: 17:0C:E6:21:44:9D:F4:BD:5D:B3:0D:FC:A6:A0:4F:B0:61:8B:4A:D2 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 0238 Signing time: Fri 17 Apr 2026 03:06:19 +0000 Manifest this update: Fri 17 Apr 2026 03:06:18 +0000 Manifest next update: Fri 24 Apr 2026 03:06:18 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: aP7SOC1HA+cE4VIRBsagLTcyn5jbswvyjZOHsDKJpJA=) 2: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=) 3: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=) 4: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=) 5: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=) 6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=) 7: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=) 8: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=) 9: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=) 10: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Apr 17 03:06:18 2026 GMT Not After : Apr 24 03:06:18 2026 GMT Subject: CN=69e1a3ab-1960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:5f:84:df:c3:d6:78:99:ef:95:b0:5e:22: 76:51:5a:91:5c:96:af:ae:dc:1e:56:b5:1f:ee:db: f3:62:90:48:a0:d3:b8:fb:61:c6:c4:6a:00:24:5a: 8f:63:a8:5b:53:13:2d:40:73:d0:0a:f5:7e:c6:b7: 70:53:f7:12:b4:2c:dc:ea:08:f5:07:7b:7f:08:d0: c6:de:34:f4:e7:84:97:33:24:f3:fd:79:e2:8d:a3: 44:77:57:8d:9d:d4:14:bb:c0:2b:fb:d0:64:42:d1: d4:f0:c8:39:7f:6a:ff:2d:c8:49:0d:96:26:21:8d: c0:7c:41:6b:75:d1:62:0d:aa:62:32:cc:ac:9d:5d: 0c:81:3d:a6:4e:92:90:af:af:16:74:0f:8e:00:31: 34:3e:70:b1:82:d2:7b:7d:18:ea:1a:f7:46:a2:4c: 42:37:bf:b3:b7:a0:01:6e:31:5b:9b:8a:4d:a0:11: aa:7c:1e:32:30:47:fd:32:33:26:54:0c:27:51:5e: 4c:64:49:05:c4:f1:87:06:64:af:ea:f9:7b:88:f0: 0b:88:28:53:76:38:ff:46:2e:61:bc:43:ba:8b:35: 2b:ec:46:6c:ff:c6:2d:83:92:14:8f:37:6f:24:65: 96:13:05:09:0a:55:c0:9a:cc:d3:da:04:5c:d1:05: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:E6:21:44:9D:F4:BD:5D:B3:0D:FC:A6:A0:4F:B0:61:8B:4A:D2 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:87:07:e9:d7:1a:77:84:a0:61:8b:02:20:b7:2f:fa:2a:cd: a2:ec:c6:35:26:67:b2:4a:fa:ce:66:39:10:7e:33:88:55:31: 45:0f:0b:14:3f:52:64:20:51:d0:15:dd:3b:c2:9f:27:6f:17: a0:47:1c:e5:7a:6d:a8:5e:5a:28:e7:a0:1b:6e:37:8b:33:4e: 5e:10:de:3f:d3:03:c5:28:e6:8d:4a:6d:ec:a4:47:26:49:3a: 48:e6:f4:c1:bd:d0:61:46:be:9f:50:09:69:41:3a:85:d5:f9: 25:b7:23:bb:2c:b8:07:cb:70:35:09:84:6a:c1:81:58:39:a1: 29:34:ec:26:3b:8f:89:80:61:3e:56:2f:23:3f:1a:e0:49:7d: aa:ea:c3:81:b4:16:eb:ea:9b:e9:c0:b8:67:9b:50:50:8a:c6: d9:84:67:0a:bf:cd:c2:0f:83:d4:1f:74:72:3d:84:be:8a:79: 40:c4:e3:71:f1:29:02:6a:9d:13:38:d7:d7:ec:7d:f9:b4:7f: 2b:2f:78:93:50:83:67:58:c2:b9:3b:e1:a8:7d:7a:ce:5a:d7: af:eb:17:d2:36:02:0b:8c:c5:bf:eb:7c:05:cd:87:e9:ae:d5: 87:19:a0:44:24:ca:cb:64:ea:ab:d2:f7:ea:fb:ee:e3:0d:d8: 04:a2:42:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYwNDE3MDMwNjE4WhcNMjYwNDI0MDMwNjE4WjAYMRYwFAYD VQQDEw02OWUxYTNhYi0xOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkf1fhN/D1niZ75WwXiJ2UVqRXJavrtweVrUf7tvzYpBIoNO4+2HGxGoAJFqP Y6hbUxMtQHPQCvV+xrdwU/cStCzc6gj1B3t/CNDG3jT054SXMyTz/XnijaNEd1eN ndQUu8Ar+9BkQtHU8Mg5f2r/LchJDZYmIY3AfEFrddFiDapiMsysnV0MgT2mTpKQ r68WdA+OADE0PnCxgtJ7fRjqGvdGokxCN7+zt6ABbjFbm4pNoBGqfB4yMEf9MjMm VAwnUV5MZEkFxPGHBmSv6vl7iPALiChTdjj/Ri5hvEO6izUr7EZs/8Ytg5IUjzdv JGWWEwUJClXAmszT2gRc0QW0HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcM5iFE nfS9XbMN/KagT7Bhi0rSMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMIcH6dcad4SgYYsCILcv+irNouzGNSZnskr6zmY5EH4ziFUxRQ8LFD9SZCBR 0BXdO8KfJ28XoEcc5XptqF5aKOegG243izNOXhDeP9MDxSjmjUpt7KRHJkk6SOb0 wb3QYUa+n1AJaUE6hdX5Jbcjuyy4B8twNQmEasGBWDmhKTTsJjuPiYBhPlYvIz8a 4El9qurDgbQW6+qb6cC4Z5tQUIrG2YRnCr/Nwg+D1B90cj2Evop5QMTjcfEpAmqd EzjX1+x9+bR/Ky94k1CDZ1jCuTvhqH16zlrXr+sX0jYCC4zFv+t8Bc2H6a7Vhxmg RCTKy2Tqq9L36vvu4w3YBKJCLg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:26:43 2026 by rpki-client