$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: 54SydTKnficMOpN0cB2NL2HqMEOHorpf168ilHgBocU= Subject key identifier: B8:DB:11:29:84:D8:A0:90:06:7E:09:6E:07:4A:B9:08:9A:58:6F:1B Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 0101 Signing time: Sun 05 Apr 2026 05:34:39 +0000 Manifest this update: Sun 05 Apr 2026 05:34:38 +0000 Manifest next update: Sun 12 Apr 2026 05:34:38 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: B8oQNhJ7YPiWqfb6sDo6T9/zFYZQuTVfFRfLBg4o4VI=) 2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ILuNQjwNhW0PKN+i94dgKZ8uTmGwmDnJT50xUUvXJAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Apr 5 05:34:38 2026 GMT Not After : Apr 12 05:34:38 2026 GMT Subject: CN=69d1f46f-8428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:5c:37:2f:ac:99:5e:fd:f5:04:2a:e6:c9: d3:13:24:8e:7d:a0:e3:54:78:4c:9d:a9:81:89:bb: bc:6b:06:ed:19:9f:08:8d:79:ec:5b:d7:b4:7a:e1: ae:4d:29:9e:81:8c:de:83:49:42:07:59:03:8e:fd: fe:49:36:be:90:b2:42:48:7c:d2:67:67:7e:77:7c: 81:f7:7b:f7:8d:08:bc:24:f9:93:28:e8:b6:90:f9: d5:ea:b5:4a:16:fe:d1:46:7a:e3:9a:c3:1b:27:5c: 30:f8:ba:59:ff:e2:7b:e0:d7:f4:71:c3:0e:9d:f2: 4d:78:e2:68:8f:1a:63:31:9c:5b:e0:d6:19:60:24: 86:67:c0:3a:cf:7c:2b:10:79:90:89:48:74:5b:3b: e5:9c:54:cf:71:58:8e:2a:c5:74:1f:91:59:75:de: 78:1a:d4:99:f1:c3:bd:74:b4:17:b4:b1:6d:aa:03: db:32:72:a9:f5:52:dd:07:12:fb:ce:c0:f0:c5:e3: 25:ca:46:aa:0b:4c:ca:22:9c:9c:9e:4e:6f:81:3a: d6:70:a2:1b:db:60:4e:72:17:a2:25:8b:48:f7:7f: 17:cc:24:de:09:4e:47:c3:8f:c8:1e:21:03:8f:59: ff:84:f0:85:16:d1:31:0c:4d:87:03:7d:cf:70:84: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:11:29:84:D8:A0:90:06:7E:09:6E:07:4A:B9:08:9A:58:6F:1B X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:72:1d:4c:53:9e:fc:2b:0b:ca:db:cf:c8:46:46:ed:97: 16:e6:b6:d9:d6:f4:4e:16:6c:8c:ef:54:14:59:a4:0b:42:c1: 7a:74:2b:7e:33:4e:51:db:ec:f5:c8:70:7c:62:e9:c7:fb:6f: 9c:0d:fc:ea:90:98:32:02:ef:c8:15:4a:6c:68:c1:1f:4b:0d: 2e:54:08:1a:88:b9:97:3c:08:8e:fa:1b:37:31:20:51:79:73: 6f:47:44:ff:cc:2d:1f:1f:97:bb:a3:56:c7:de:c1:12:5f:0a: e8:02:23:7a:18:78:0e:b8:6c:00:30:5f:c2:e0:43:6d:9b:a3: 0b:ce:3e:b5:10:86:40:03:1c:65:9a:1a:48:83:55:15:bc:18: 2b:9b:e4:05:f7:25:ee:0d:df:55:db:51:f3:e2:45:44:e6:50: 0b:50:61:7b:ed:25:dd:51:20:0e:c5:10:7d:6e:09:3f:4c:77: d9:5a:d0:e5:b5:ae:bb:81:7c:da:c9:ae:f3:5f:2d:af:34:d3: b2:19:1c:87:dc:ac:0c:98:db:3c:53:64:f6:bb:c8:aa:4b:5c: 98:9e:44:e0:3e:a1:43:e8:ba:44:09:32:4f:dc:6a:28:1e:56: ec:c2:4b:2d:20:d7:94:c6:2c:5c:37:48:3b:67:d2:14:33:3b: 2f:0f:74:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwNDA1MDUzNDM4WhcNMjYwNDEyMDUzNDM4WjAYMRYwFAYD VQQDEw02OWQxZjQ2Zi04NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolhcNy+smV799QQq5snTEySOfaDjVHhMnamBibu8awbtGZ8IjXnsW9e0euGu TSmegYzeg0lCB1kDjv3+STa+kLJCSHzSZ2d+d3yB93v3jQi8JPmTKOi2kPnV6rVK Fv7RRnrjmsMbJ1ww+LpZ/+J74Nf0ccMOnfJNeOJojxpjMZxb4NYZYCSGZ8A6z3wr EHmQiUh0WzvlnFTPcViOKsV0H5FZdd54GtSZ8cO9dLQXtLFtqgPbMnKp9VLdBxL7 zsDwxeMlykaqC0zKIpycnk5vgTrWcKIb22BOcheiJYtI938XzCTeCU5Hw4/IHiED j1n/hPCFFtExDE2HA33PcIQKkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjbESmE 2KCQBn4JbgdKuQiaWG8bMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIuZyHUxTnvwrC8rbz8hGRu2XFua22db0ThZsjO9UFFmkC0LBenQrfjNOUdvs 9chwfGLpx/tvnA386pCYMgLvyBVKbGjBH0sNLlQIGoi5lzwIjvobNzEgUXlzb0dE /8wtHx+Xu6NWx97BEl8K6AIjehh4DrhsADBfwuBDbZujC84+tRCGQAMcZZoaSINV FbwYK5vkBfcl7g3fVdtR8+JFROZQC1Bhe+0l3VEgDsUQfW4JP0x32VrQ5bWuu4F8 2smu818trzTTshkch9ysDJjbPFNk9rvIqktcmJ5E4D6hQ+i6RAkyT9xqKB5W7MJL LSDXlMYsXDdIO2fSFDM7Lw905g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:07 2026 by rpki-client