$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: ZsuJWflGkbpbnqNS9PcSUX545xJ1vmLU0VxohQ4cyZQ= Subject key identifier: CE:28:DB:7E:1A:65:E3:6C:2C:2D:E5:D4:81:7D:03:36:B3:53:92:9B Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 04D1 Signing time: Thu 16 Apr 2026 23:46:52 +0000 Manifest this update: Thu 16 Apr 2026 23:46:51 +0000 Manifest next update: Thu 23 Apr 2026 23:46:51 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: nGDb5H7oVsoaZuDhhlQJs59f6HCsPgBjqRFg6CsgdTA=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: Bqm0LBQ1QxgmzQ67GzN6T9VVJw3twyV0J98hBbifjyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Apr 16 23:46:51 2026 GMT Not After : Apr 23 23:46:51 2026 GMT Subject: CN=69e174eb-6ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:51:70:fe:c0:6a:1b:06:77:c7:fd:f5:d3: f3:e8:4d:a2:bd:46:47:ff:4e:19:65:32:47:71:06: 8e:6c:4d:ef:fd:cd:75:85:5c:da:a8:dc:a4:2f:5d: fe:27:13:e2:4b:b6:70:75:09:91:20:b5:e4:9f:3d: 38:c8:b8:c9:46:f1:b2:ae:e2:8e:e1:8a:4b:73:05: 55:eb:81:be:d8:c8:65:47:10:cb:60:61:56:a0:e9: e6:08:59:32:ae:db:77:fb:39:c8:d0:9f:4a:04:26: 88:c1:10:ce:61:6a:29:63:5a:d0:f6:f0:f9:f8:31: 19:2d:62:aa:6a:c9:cd:3e:21:2c:0e:40:e7:cf:cb: bb:ec:8e:0a:3c:2f:3e:64:de:26:37:c9:1c:b2:fe: 99:92:b0:3e:e6:44:14:87:05:4c:47:a1:1c:a2:c7: b0:5b:aa:c4:ff:45:1e:05:e0:cf:a2:54:ad:f8:31: 05:af:bd:0f:b8:4d:fe:f6:6a:66:d4:85:c2:a9:3b: 13:cd:15:52:61:11:85:fc:11:2a:b3:a8:30:97:4c: a8:48:b0:ec:87:fe:8b:b8:be:49:04:92:8d:d4:6c: 25:dd:4b:7d:a8:a2:3d:8e:b7:9e:83:7d:87:35:1d: 1c:bc:ef:bd:23:ee:7d:da:d5:b1:61:68:be:08:17: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:28:DB:7E:1A:65:E3:6C:2C:2D:E5:D4:81:7D:03:36:B3:53:92:9B X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:57:8e:cb:3d:61:d6:29:d8:4a:6f:6f:21:0b:04:c0:1a:a6: 6e:ef:22:51:e6:6c:b7:68:a3:3b:7d:ee:71:2c:a0:31:d0:5e: ac:7e:1c:fb:a3:e7:46:b5:6f:23:92:38:b3:22:d3:7f:0a:73: 98:10:3c:26:2b:0b:b6:4a:6c:10:fa:f3:b9:3d:c8:5f:ac:29: dd:90:20:2a:4f:08:72:19:eb:44:5c:71:9a:a6:3d:fc:7b:d6: d9:43:eb:99:f7:6e:1b:fa:98:66:77:b9:71:ad:1b:6c:b5:55: db:d6:42:13:94:a0:fb:3e:39:4e:81:c0:c8:d2:76:69:7c:e1: 38:de:18:2d:1b:20:de:1a:7f:28:3a:b3:52:58:df:50:bd:e5: 0c:e6:ce:30:b6:86:68:39:fb:f7:64:88:fc:5e:12:cc:59:b2: dc:35:e9:01:d0:90:0d:35:c5:53:3c:c1:50:2e:f9:f6:fe:35: 7a:de:73:45:14:d7:6c:7d:2b:45:32:a5:e5:0c:5b:d2:c0:4b: 99:3d:b4:df:68:5c:ef:64:a0:0e:2d:d2:f4:73:69:68:35:06: de:78:be:1b:25:df:ee:8e:64:1d:0d:9e:13:34:24:af:db:49: 77:f1:03:ac:16:57:69:72:06:b1:60:0b:91:d2:0b:6f:7a:21: 65:f8:af:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjYwNDE2MjM0NjUxWhcNMjYwNDIzMjM0NjUxWjAYMRYwFAYD VQQDEw02OWUxNzRlYi02ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiORRcP7AahsGd8f99dPz6E2ivUZH/04ZZTJHcQaObE3v/c11hVzaqNykL13+ JxPiS7ZwdQmRILXknz04yLjJRvGyruKO4YpLcwVV64G+2MhlRxDLYGFWoOnmCFky rtt3+znI0J9KBCaIwRDOYWopY1rQ9vD5+DEZLWKqasnNPiEsDkDnz8u77I4KPC8+ ZN4mN8kcsv6ZkrA+5kQUhwVMR6EcosewW6rE/0UeBeDPolSt+DEFr70PuE3+9mpm 1IXCqTsTzRVSYRGF/BEqs6gwl0yoSLDsh/6LuL5JBJKN1Gwl3Ut9qKI9jreeg32H NR0cvO+9I+592tWxYWi+CBcVWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4o234a ZeNsLC3l1IF9AzazU5KbMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqVeOyz1h1inYSm9vIQsEwBqmbu8iUeZst2ijO33ucSygMdBerH4c+6PnRrVv I5I4syLTfwpzmBA8JisLtkpsEPrzuT3IX6wp3ZAgKk8IchnrRFxxmqY9/HvW2UPr mfduG/qYZne5ca0bbLVV29ZCE5Sg+z45ToHAyNJ2aXzhON4YLRsg3hp/KDqzUljf UL3lDObOMLaGaDn792SI/F4SzFmy3DXpAdCQDTXFUzzBUC759v41et5zRRTXbH0r RTKl5Qxb0sBLmT2032hc72SgDi3S9HNpaDUG3ni+GyXf7o5kHQ2eEzQkr9tJd/ED rBZXaXIGsWALkdILb3ohZfiv+w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:50:35 2026 by rpki-client