$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: zR7JJddSj1NztpgQsnjJ+SYxbw2wL0Jpi8H+TgxKRzc= Subject key identifier: 48:99:C9:FB:48:0D:F5:D2:63:DB:11:D2:68:AC:C1:DD:8A:43:5C:E9 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0CEA Signing time: Thu 16 Apr 2026 18:10:36 +0000 Manifest this update: Thu 16 Apr 2026 18:10:36 +0000 Manifest next update: Thu 23 Apr 2026 18:10:36 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: EYFQNfG8t6fXPwu8h4ZJ4SoZpnLxScxk1PrZPaKXZEc=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Apr 16 18:10:36 2026 GMT Not After : Apr 23 18:10:36 2026 GMT Subject: CN=69e1261c-49eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:cc:20:7f:a5:76:0c:19:56:07:ed:22:c7: 49:2b:03:40:fc:f7:c0:46:51:fa:8e:d8:cc:4c:4c: e0:b0:5f:f1:73:3b:6b:c7:61:c6:30:6f:c6:47:28: e8:ae:6a:86:dd:fc:93:78:75:8b:d0:4b:91:69:0b: 36:c5:16:70:96:3c:e1:e3:a2:e4:1f:55:37:d1:b3: 7e:dc:74:f9:dd:c3:40:29:7e:84:11:41:c7:cb:66: 9e:05:9a:4d:42:df:05:e2:a6:12:86:bc:27:67:1e: 20:bd:a2:01:fd:a6:da:ae:de:fc:c6:7f:ff:9e:74: 24:55:79:ff:f6:a4:3b:45:ee:2b:80:b4:3c:58:71: 23:0d:8e:c4:b0:5c:bf:57:0a:34:8c:fd:d8:4a:6e: 28:e8:d4:d4:b3:b2:b3:40:33:9e:d8:c3:5d:16:65: 76:15:d9:28:09:03:4d:39:6d:d3:27:66:8e:53:84: 41:b3:30:a6:45:1d:00:94:48:3a:17:ea:97:60:d6: 5a:8a:98:cd:40:4b:4a:d3:26:1f:0a:38:00:03:bd: 86:e7:42:26:59:f9:f9:70:9e:c4:35:53:c1:3b:f7: 57:92:ef:3d:9f:cc:13:ec:c2:22:29:6e:d8:f7:a9: aa:1f:43:db:fe:f2:71:d7:a8:93:4e:3e:db:fc:d3: 50:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:99:C9:FB:48:0D:F5:D2:63:DB:11:D2:68:AC:C1:DD:8A:43:5C:E9 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4b:df:84:e9:e9:70:6d:4c:7f:41:21:7e:aa:2c:f1:00:8e: a7:c4:d6:e5:91:47:65:02:cc:8b:36:42:81:75:37:bc:a2:e8: 55:81:ca:2d:a7:8d:5e:bb:3a:f5:7d:4b:e0:4e:83:6c:c1:03: 0c:b2:7e:61:a9:cb:19:1b:d0:80:fd:77:17:39:8b:a9:40:c1: 14:1c:09:95:50:c3:88:b4:28:fe:ce:68:58:58:18:35:b6:43: a3:f9:6d:5a:2f:67:71:b1:09:4d:e0:05:29:ba:24:37:19:44: 58:e3:60:d5:40:00:b5:ae:c5:4e:fe:c9:e5:32:a9:80:52:24: e4:09:d1:60:3b:fc:7a:0b:cb:07:66:c8:2b:bc:75:58:29:ba: 10:28:96:c7:b1:b2:75:9c:00:ab:d0:02:1d:dc:e6:75:8c:89: d7:fc:8f:17:b8:47:14:92:76:8b:84:1c:03:bb:47:36:31:c4: a2:1d:4c:05:c4:91:f4:23:81:22:ea:fa:1b:b5:c8:a9:77:35: 68:35:ac:9f:a6:f1:77:1b:11:3a:4e:d9:96:77:9b:ad:5b:1c: a7:9d:5d:c7:7b:bc:8e:0c:70:15:d7:3c:22:df:d6:11:01:3f: 71:ce:08:38:7d:d6:58:26:de:e7:f5:f8:a7:ec:7c:04:64:fc: 36:29:47:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjYwNDE2MTgxMDM2WhcNMjYwNDIzMTgxMDM2WjAYMRYwFAYD VQQDEw02OWUxMjYxYy00OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpbMIH+ldgwZVgftIsdJKwNA/PfARlH6jtjMTEzgsF/xcztrx2HGMG/GRyjo rmqG3fyTeHWL0EuRaQs2xRZwljzh46LkH1U30bN+3HT53cNAKX6EEUHHy2aeBZpN Qt8F4qYShrwnZx4gvaIB/abart78xn//nnQkVXn/9qQ7Re4rgLQ8WHEjDY7EsFy/ Vwo0jP3YSm4o6NTUs7KzQDOe2MNdFmV2FdkoCQNNOW3TJ2aOU4RBszCmRR0AlEg6 F+qXYNZaipjNQEtK0yYfCjgAA72G50ImWfn5cJ7ENVPBO/dXku89n8wT7MIiKW7Y 96mqH0Pb/vJx16iTTj7b/NNQtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiZyftI DfXSY9sR0miswd2KQ1zpMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI0vfhOnpcG1Mf0Ehfqos8QCOp8TW5ZFHZQLMizZCgXU3vKLoVYHKLaeNXrs6 9X1L4E6DbMEDDLJ+YanLGRvQgP13FzmLqUDBFBwJlVDDiLQo/s5oWFgYNbZDo/lt Wi9ncbEJTeAFKbokNxlEWONg1UAAta7FTv7J5TKpgFIk5AnRYDv8egvLB2bIK7x1 WCm6ECiWx7GydZwAq9ACHdzmdYyJ1/yPF7hHFJJ2i4QcA7tHNjHEoh1MBcSR9COB Iur6G7XIqXc1aDWsn6bxdxsROk7ZlnebrVscp51dx3u8jgxwFdc8It/WEQE/cc4I OH3WWCbe5/X4p+x8BGT8NilHWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:56 2026 by rpki-client