$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: Q3bnjkxhoeY2Yev4hHXgNm0oqb86yMWOWrPoW4mn7Pg= Subject key identifier: 30:1C:75:15:F4:DC:68:1C:52:40:ED:BC:7A:10:3B:D6:F6:64:69:2A Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 0191 Signing time: Sun 05 Apr 2026 03:52:16 +0000 Manifest this update: Sun 05 Apr 2026 03:52:16 +0000 Manifest next update: Sun 12 Apr 2026 03:52:16 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: pw1+hbZFoqGh3aFyiSQmJnMmbXsfVbxjJ9I2PwRUDxQ=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 3wRVfI1zpk+cbpoO3lK5QYCwvSabow1kgGaBDb4LpII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Apr 5 03:52:16 2026 GMT Not After : Apr 12 03:52:16 2026 GMT Subject: CN=69d1dc70-8392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:55:1c:5a:da:92:64:a3:9f:4b:14:ac:38: 48:9d:9f:36:be:05:a6:81:54:e9:0e:6f:a1:3d:1f: 0d:aa:f1:d3:01:01:b9:51:bf:31:66:20:3c:82:85: 2d:f4:31:73:63:1b:85:a2:b2:7a:c7:4c:36:00:aa: ca:0e:d1:5f:9c:d4:c1:8a:73:11:0f:43:80:54:51: a2:17:6c:cb:cb:84:0c:bb:cf:33:93:a6:a5:aa:35: dc:af:06:b4:97:71:41:ba:1a:36:71:f3:ea:2f:86: bf:e4:99:0e:52:b8:4c:6c:af:f7:16:b6:b1:59:d4: 8f:77:65:26:b0:e1:72:a2:86:53:09:3c:5b:52:ed: 49:3c:e3:c6:b5:27:b8:3b:b3:0f:ad:03:c2:99:fb: 88:b4:90:e1:58:60:b5:08:0c:f4:1e:79:71:7f:17: 74:92:af:37:47:94:c9:46:1c:d3:6a:c1:66:33:57: fb:47:1d:5a:f1:65:07:7d:91:79:db:70:83:6f:8a: 48:29:76:89:c6:39:9f:c0:5c:ea:2d:17:cb:e3:ba: 2c:11:16:23:f9:12:57:71:36:e3:94:9b:c3:c6:56: 9a:38:8d:ba:83:a9:a8:b5:f1:b0:f9:b4:19:65:a8: 52:96:dd:a5:14:3f:e6:3e:a6:7c:42:34:ab:70:54: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1C:75:15:F4:DC:68:1C:52:40:ED:BC:7A:10:3B:D6:F6:64:69:2A X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:15:9b:3f:e3:89:73:25:79:32:0c:cf:af:74:86:b3:4f:7a: 96:a3:81:8a:ee:ed:47:86:1a:0c:50:be:20:92:51:a6:84:c1: 44:6d:7d:8d:68:6c:0a:f3:30:1c:b7:48:65:26:db:5a:cb:e8: 87:c6:4c:ea:a7:52:d8:d9:6b:d2:9c:1b:1f:68:27:2f:d9:c7: 3f:1d:ad:bf:ae:cc:c4:98:24:99:67:f8:94:b2:a1:ea:a6:79: 6b:7a:61:ee:30:b5:4e:b0:9e:c9:b4:c9:43:1c:d6:17:0b:b1: fc:59:f3:91:87:0d:2c:5a:fc:8a:f3:ce:c1:56:f9:db:f3:76: e3:15:c9:46:a8:ae:59:4c:2d:10:8a:52:e7:92:71:0d:05:b7: 3b:30:1f:10:20:d4:4f:0a:09:b1:bd:09:3b:27:7f:12:92:07: 40:17:39:1f:4d:5f:81:a5:41:39:98:29:13:b5:ca:14:86:d1: 95:f4:47:67:b2:e0:cd:7d:8d:87:2b:92:c1:7c:24:92:fe:13: dd:1b:d9:6e:86:f1:74:52:0d:c5:81:0a:42:66:9d:bf:c2:36: 0c:50:d3:72:39:f5:ef:15:d0:36:26:10:8f:a9:63:ea:b4:3e: f0:1e:93:aa:0a:88:4d:33:d2:3e:04:bf:38:ff:25:fe:e2:da: 62:4b:ae:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjYwNDA1MDM1MjE2WhcNMjYwNDEyMDM1MjE2WjAYMRYwFAYD VQQDEw02OWQxZGM3MC04MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjNVHFrakmSjn0sUrDhInZ82vgWmgVTpDm+hPR8NqvHTAQG5Ub8xZiA8goUt 9DFzYxuForJ6x0w2AKrKDtFfnNTBinMRD0OAVFGiF2zLy4QMu88zk6alqjXcrwa0 l3FBuho2cfPqL4a/5JkOUrhMbK/3FraxWdSPd2UmsOFyooZTCTxbUu1JPOPGtSe4 O7MPrQPCmfuItJDhWGC1CAz0Hnlxfxd0kq83R5TJRhzTasFmM1f7Rx1a8WUHfZF5 23CDb4pIKXaJxjmfwFzqLRfL47osERYj+RJXcTbjlJvDxlaaOI26g6motfGw+bQZ ZahSlt2lFD/mPqZ8QjSrcFQ8oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAcdRX0 3GgcUkDtvHoQO9b2ZGkqMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBWbP+OJcyV5MgzPr3SGs096lqOBiu7tR4YaDFC+IJJRpoTBRG19jWhsCvMw HLdIZSbbWsvoh8ZM6qdS2Nlr0pwbH2gnL9nHPx2tv67MxJgkmWf4lLKh6qZ5a3ph 7jC1TrCeybTJQxzWFwux/FnzkYcNLFr8ivPOwVb52/N24xXJRqiuWUwtEIpS55Jx DQW3OzAfECDUTwoJsb0JOyd/EpIHQBc5H01fgaVBOZgpE7XKFIbRlfRHZ7LgzX2N hyuSwXwkkv4T3RvZbobxdFINxYEKQmadv8I2DFDTcjn17xXQNiYQj6lj6rQ+8B6T qgqITTPSPgS/OP8l/uLaYkuunQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:14 2026 by rpki-client