$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: in7Jo0+Ij/gmQfNaqdf9DzSv+ixoeyZeAweeQL+6zpA= Subject key identifier: 01:E4:E8:95:18:24:9D:09:F5:66:2E:67:4B:DE:39:D3:D1:F9:BB:00 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 19 Signing time: Sun 19 Apr 2026 08:35:23 +0000 Manifest this update: Sun 19 Apr 2026 08:35:22 +0000 Manifest next update: Sun 26 Apr 2026 08:35:22 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: KvtQvfDRhXeTdkZizg9JnnnTNPbaVtJSvAfeFWFNrcA=) 2: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: YICsi1o5Z1QCNa3raABk0vbNZqKDNF4/heN9D5mwTtc=) 3: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 08:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Apr 19 08:35:22 2026 GMT Not After : Apr 26 08:35:22 2026 GMT Subject: CN=69e493cb-b9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:76:48:d8:c1:7c:4b:2e:b6:cc:f3:b3:f1: e2:47:28:56:0d:4f:29:a4:ca:2b:62:1e:eb:60:0d: 27:5e:14:d4:69:53:e1:d5:ab:18:23:d5:57:d4:b9: dc:65:3b:2f:f5:7e:1a:e3:f9:77:65:e9:da:d2:cc: ba:13:7c:8e:e1:54:79:52:a8:4c:cd:d2:c1:53:b8: 3f:3a:a4:c1:1a:46:a8:74:bc:24:32:a7:ff:cb:2c: 0e:00:85:76:d0:11:d0:c3:9e:27:71:a2:87:a8:d3: 8c:29:44:c5:03:13:d9:39:87:f8:f3:e3:f4:04:18: f3:84:ea:b9:2c:67:d5:09:6f:6b:5d:99:05:a2:91: 58:56:2d:58:f8:20:8e:d4:8f:3b:c7:85:1d:14:ae: 2e:06:7a:fa:f3:f3:a6:35:8f:6e:cf:0a:b3:d4:95: e8:0c:55:3c:9c:68:49:31:64:c1:88:5d:e1:b1:1b: 28:2a:0d:8e:99:2b:0e:7b:ff:7b:ba:fa:23:e3:38: ab:d4:38:26:d9:d2:80:9b:9b:43:40:c4:83:90:c8: 51:4e:f1:04:8e:07:8a:ee:5b:4e:4e:7d:57:82:55: e0:fa:4a:94:97:c9:af:b7:c5:c5:6b:18:b4:77:c5: 35:9f:62:62:d7:25:23:8e:07:31:d0:7b:8a:43:f3: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:E8:95:18:24:9D:09:F5:66:2E:67:4B:DE:39:D3:D1:F9:BB:00 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b7:37:02:9f:df:45:cb:a0:cb:b8:76:ba:e6:c0:6d:a3:79: 94:70:0f:e6:fe:08:68:08:8a:ca:71:a7:85:9d:5a:ae:5c:2d: d9:a1:cb:70:4d:81:3f:33:29:c8:d4:2d:c2:49:a7:81:7c:fd: 77:7a:88:11:01:7e:e3:01:10:e6:9a:cd:b4:0e:7a:88:23:6d: e6:69:03:0e:5a:b6:5f:61:64:01:19:f4:c8:08:c4:16:55:23: 2c:0c:36:5e:e8:ae:39:7e:01:f0:d1:0a:f7:a6:31:7a:75:0b: 1d:f4:fd:1a:08:f6:d5:fd:24:27:9c:22:73:d4:62:53:c6:bf: c4:e7:dc:01:be:23:b3:c7:1b:55:6b:91:e6:a2:6d:52:0c:c6: cf:ec:fb:f3:b2:e0:15:b8:28:fd:5f:1e:47:3c:ff:a4:69:c9: 3a:bd:b5:97:19:6b:8a:81:79:32:5d:aa:48:06:2d:e0:81:13: 7a:ab:44:f2:2e:aa:53:c8:3a:d6:71:90:22:1d:8f:a5:72:1a: 64:0f:b2:19:32:9a:3d:4e:f6:60:e8:fc:d4:89:54:5f:f1:0f: fe:3a:b4:22:22:ae:37:9b:7c:dd:c8:40:11:44:3b:08:88:ae: 38:63:ba:78:fc:9b:87:ad:31:0f:f4:85:66:c6:ac:92:f2:d6: 8c:55:61:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA0MTkwODM1MjJaFw0yNjA0MjYwODM1MjJaMBgxFjAUBgNV BAMTDTY5ZTQ5M2NiLWI5ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIH3ZI2MF8Sy62zPOz8eJHKFYNTymkyitiHutgDSdeFNRpU+HVqxgj1VfUudxl Oy/1fhrj+Xdl6drSzLoTfI7hVHlSqEzN0sFTuD86pMEaRqh0vCQyp//LLA4AhXbQ EdDDnidxooeo04wpRMUDE9k5h/jz4/QEGPOE6rksZ9UJb2tdmQWikVhWLVj4II7U jzvHhR0Uri4Gevrz86Y1j27PCrPUlegMVTycaEkxZMGIXeGxGygqDY6ZKw57/3u6 +iPjOKvUOCbZ0oCbm0NAxIOQyFFO8QSOB4ruW05OfVeCVeD6SpSXya+3xcVrGLR3 xTWfYmLXJSOOBzHQe4pD897xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAeTolRgk nQn1Zi5nS94509H5uwAwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQButzcCn99Fy6DLuHa65sBto3mUcA/m/ghoCIrKcaeFnVquXC3ZoctwTYE/MynI 1C3CSaeBfP13eogRAX7jARDmms20DnqII23maQMOWrZfYWQBGfTICMQWVSMsDDZe 6K45fgHw0Qr3pjF6dQsd9P0aCPbV/SQnnCJz1GJTxr/E59wBviOzxxtVa5Hmom1S DMbP7PvzsuAVuCj9Xx5HPP+kack6vbWXGWuKgXkyXapIBi3ggRN6q0TyLqpTyDrW cZAiHY+lchpkD7IZMpo9TvZg6PzUiVRf8Q/+OrQiIq43m3zdyEARRDsIiK44Y7p4 /JuHrTEP9IVmxqyS8taMVWHK -----END CERTIFICATE-----Generated at Sun Apr 19 13:58:18 2026 by rpki-client