$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: ff/ZhNgfA00oSamgfusx0zR4BoTywuq/SE174I5Pp0w= Subject key identifier: 64:80:B6:78:9B:6E:8F:AF:FB:D1:A6:42:4E:AC:C5:E8:C7:CB:C5:C7 Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D9D Signing time: Sat 04 Apr 2026 17:48:23 +0000 Manifest this update: Sat 04 Apr 2026 17:48:22 +0000 Manifest next update: Sat 11 Apr 2026 17:48:22 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: /QE+5BZh47z89Gt4AxzkESM6CsVHa+9L9wVAnHdmJqQ=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: 7Br/DTiPTx/Ar/MbjlybmCjnr1Fwi5lt+TR9Ep/lxRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Apr 4 17:48:22 2026 GMT Not After : Apr 11 17:48:22 2026 GMT Subject: CN=69d14ee7-5dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:36:21:32:5d:46:fe:2a:ec:93:ee:97:f8: b8:ed:4e:57:fb:7a:10:04:49:8c:36:16:e8:93:80: 7b:48:f3:50:d6:46:3d:69:83:9a:d4:d1:9a:07:77: 3f:31:5e:05:79:92:9c:37:6d:e6:9b:05:1d:62:9c: 0c:ca:6a:fe:31:28:5b:f6:60:ac:51:5f:e7:93:d3: 49:ae:ad:4f:94:f7:3d:06:52:8d:bc:6e:2d:72:43: 34:72:e4:a0:a8:4c:42:02:a8:eb:25:75:13:29:6b: 4e:82:34:a3:c3:77:db:12:4a:25:9b:01:e3:b1:38: 38:a1:0d:af:cf:cd:84:e2:88:64:5b:36:0a:d1:2b: f3:03:b6:ad:56:e5:32:2e:c3:3c:8c:d3:0b:8a:af: 2f:02:19:d1:42:72:5c:f2:1c:20:35:86:94:12:ed: 16:15:25:bb:86:8a:18:2a:ac:1c:94:da:71:8e:5d: ec:ab:60:b6:0d:e8:02:f6:08:6f:61:4b:fe:db:81: a7:cf:6a:c7:de:4c:77:4d:1e:cf:7a:79:e2:db:86: 06:e7:68:8d:a0:8b:3b:e6:be:a7:38:74:5a:0b:ad: 5d:3f:54:ad:68:8f:5a:3a:0e:8f:e0:64:67:d6:25: cc:21:ba:ca:71:90:14:3b:d7:3d:30:bf:9e:94:c9: 3d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:80:B6:78:9B:6E:8F:AF:FB:D1:A6:42:4E:AC:C5:E8:C7:CB:C5:C7 X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:97:b9:e0:7f:95:d9:e6:30:96:5c:aa:11:85:81:ff:2c:b1: fa:7e:89:54:04:20:c5:9f:e9:59:c4:76:f1:f6:21:08:29:ac: 56:eb:bc:c6:3c:c0:0a:3c:52:a1:99:2b:2e:ce:52:29:1a:95: 10:e7:9e:ab:c6:10:00:7c:00:02:0f:16:c8:14:0b:e7:46:ae: 08:51:b2:60:d8:5d:c3:ea:47:b1:bb:d3:34:7c:44:f6:0c:f7: 9d:54:18:72:72:3a:4a:6c:4e:ea:c6:eb:3b:82:81:0f:e1:6b: bc:5f:9d:95:60:e0:a9:5c:49:9e:c2:18:de:88:ba:a3:9a:f6: 3d:1f:a4:ba:46:25:6d:db:a2:47:33:96:a9:54:ef:ce:70:4f: 95:a6:a6:2b:c1:a0:c0:84:a6:f6:c0:54:79:7e:a0:a2:de:3f: 86:a9:b5:89:23:5a:35:c5:13:e1:7e:cf:78:d2:92:85:8f:5c: 4a:24:8b:58:da:bb:a8:fb:01:24:b1:88:f3:19:1f:5c:fd:77: e6:ea:62:84:92:b5:53:8f:e2:ba:a6:65:b0:29:da:ec:5f:02: 2d:fa:fd:e8:f7:9a:8f:ef:75:e1:13:d0:61:d6:d7:63:fd:00: ec:22:51:36:99:c7:b0:ee:1e:0c:80:84:78:75:75:42:49:40: c6:f3:ad:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjYwNDA0MTc0ODIyWhcNMjYwNDExMTc0ODIyWjAYMRYwFAYD VQQDEw02OWQxNGVlNy01ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+k2ITJdRv4q7JPul/i47U5X+3oQBEmMNhbok4B7SPNQ1kY9aYOa1NGaB3c/ MV4FeZKcN23mmwUdYpwMymr+MShb9mCsUV/nk9NJrq1PlPc9BlKNvG4tckM0cuSg qExCAqjrJXUTKWtOgjSjw3fbEkolmwHjsTg4oQ2vz82E4ohkWzYK0SvzA7atVuUy LsM8jNMLiq8vAhnRQnJc8hwgNYaUEu0WFSW7hooYKqwclNpxjl3sq2C2DegC9ghv YUv+24Gnz2rH3kx3TR7Penni24YG52iNoIs75r6nOHRaC61dP1StaI9aOg6P4GRn 1iXMIbrKcZAUO9c9ML+elMk9/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSAtnib bo+v+9GmQk6sxejHy8XHMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARJe54H+V2eYwllyqEYWB/yyx+n6JVAQgxZ/pWcR28fYhCCmsVuu8xjzACjxS oZkrLs5SKRqVEOeeq8YQAHwAAg8WyBQL50auCFGyYNhdw+pHsbvTNHxE9gz3nVQY cnI6SmxO6sbrO4KBD+FrvF+dlWDgqVxJnsIY3oi6o5r2PR+kukYlbduiRzOWqVTv znBPlaamK8GgwISm9sBUeX6got4/hqm1iSNaNcUT4X7PeNKShY9cSiSLWNq7qPsB JLGI8xkfXP135upihJK1U4/iuqZlsCna7F8CLfr96Peaj+914RPQYdbXY/0A7CJR NpnHsO4eDICEeHV1QklAxvOtqA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:07 2026 by rpki-client