$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json) Hash identifier: H6R2EnaSZHZ1e+sgeTTuBaZ+57lnG5PR5xOyTC8iMnI= Subject key identifier: D4:A3:F9:82:11:74:71:B2:30:CA:9D:EA:EE:E2:D1:BC:B6:C8:41:B2 Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft Manifest number: 78 Signing time: Sun 05 Apr 2026 07:12:12 +0000 Manifest this update: Sun 05 Apr 2026 07:12:12 +0000 Manifest next update: Sun 12 Apr 2026 07:12:12 +0000 Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: p0zh1WtbAZ9Ef6/D06ganXC/5nR4wnRpWxSSteM7LTM=) 2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: lCi752ligH/UO1OJEHoof5FIfLu807frgAct0rFSMSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Validity Not Before: Apr 5 07:12:12 2026 GMT Not After : Apr 12 07:12:12 2026 GMT Subject: CN=69d20b4c-7fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:75:23:99:c4:91:a1:18:87:21:c7:08:58: b2:34:c5:01:72:79:ee:0f:e2:1b:fa:eb:6c:fb:9f: 20:92:73:1a:57:84:a3:61:8f:ee:50:00:11:a9:ad: 93:42:d4:c8:f1:b8:66:e6:22:08:a1:30:82:c2:70: 9c:64:45:23:bf:35:37:98:2d:33:24:b7:cc:6b:13: 4d:bf:b0:52:a2:ff:b4:40:c8:1f:fa:ba:58:07:60: 27:47:d7:44:9f:d1:0e:1a:35:fb:bc:70:9c:f1:5f: 69:fd:91:0e:6e:e6:20:22:b5:2b:41:0b:50:ef:af: 7d:dd:73:72:cb:a8:49:33:9e:ff:19:bf:87:d0:d4: 53:a3:05:9a:fd:36:9c:44:b4:97:ad:f9:14:64:82: 82:75:2a:3f:cf:1c:b5:69:94:f9:e9:75:e4:fd:db: e5:4e:59:b6:ab:c3:e6:a1:cd:d5:ba:98:92:83:45: 02:64:7d:0b:af:76:5b:54:eb:90:e0:eb:bb:aa:2b: 30:73:7e:32:e7:7b:1d:bc:93:06:38:85:d6:4b:6d: 84:09:25:e7:c0:39:ba:26:71:65:05:cb:d7:e3:42: f2:4e:e1:be:8b:8f:ce:1c:18:de:bb:cd:49:d3:cd: ee:cf:ae:93:88:fd:8f:53:5b:e2:1f:4f:18:c3:5c: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A3:F9:82:11:74:71:B2:30:CA:9D:EA:EE:E2:D1:BC:B6:C8:41:B2 X509v3 Authority Key Identifier: keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6b:0a:be:e7:79:f8:e9:72:7e:d4:d9:3b:cb:39:6c:49:45: 96:36:4e:4b:5d:22:93:e5:fe:a9:bf:3d:47:0d:f2:8b:9d:ad: 9e:24:fa:a6:06:2e:26:c6:9a:57:0f:1c:43:ef:93:a2:04:59: db:1e:d7:c8:bf:c1:0f:b8:2a:f7:1d:1f:06:8d:22:35:0e:7a: 07:9e:10:81:8a:1b:64:01:7e:5a:62:07:c3:3d:0d:3c:b2:e8: f3:f7:fa:49:99:de:9b:c3:71:e2:b1:60:3f:bf:7a:7a:33:20: be:da:13:a0:20:3f:a1:bc:1f:8a:e2:a0:ec:3b:36:de:00:67: 1d:21:3a:10:ad:fc:02:94:a4:cf:98:7d:1f:a4:f2:0f:be:55: cd:5f:bd:10:c7:3b:45:dc:76:0c:29:04:b6:cc:38:b3:47:64: 8f:47:5f:b4:54:ba:4b:e3:9c:bc:c8:74:a7:49:5e:b3:7e:11: 3d:55:ce:c7:01:e0:22:0a:49:85:75:de:60:d1:dd:d0:8d:b2: 60:2f:25:a7:b8:9b:fa:b3:37:17:d8:ab:22:44:dc:bd:6f:b2: f4:f6:36:80:87:25:b8:72:4f:22:75:30:bf:c3:4c:7a:8e:19: 21:12:c1:44:a5:33:84:a6:6c:3a:3f:65:39:65:24:8a:7c:cd: b4:46:7d:57 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMjJEQzkzNjU4REM2RTk3MDMwN0FCN0FFRjFFMjU1REUz RDQzRjVCNzAeFw0yNjA0MDUwNzEyMTJaFw0yNjA0MTIwNzEyMTJaMBgxFjAUBgNV BAMTDTY5ZDIwYjRjLTdmZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChunUjmcSRoRiHIccIWLI0xQFyee4P4hv662z7nyCScxpXhKNhj+5QABGprZNC 1MjxuGbmIgihMILCcJxkRSO/NTeYLTMkt8xrE02/sFKi/7RAyB/6ulgHYCdH10Sf 0Q4aNfu8cJzxX2n9kQ5u5iAitStBC1Dvr33dc3LLqEkznv8Zv4fQ1FOjBZr9NpxE tJet+RRkgoJ1Kj/PHLVplPnpdeT92+VOWbarw+ahzdW6mJKDRQJkfQuvdltU65Dg 67uqKzBzfjLnex28kwY4hdZLbYQJJefAObomcWUFy9fjQvJO4b6Lj84cGN67zUnT ze7PrpOI/Y9TW+IfTxjDXP/LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1KP5ghF0 cbIwyp3q7uLRvLbIQbIwHwYDVR0jBBgwFoAUItyTZY3G6XAwereu8eJV3j1D9bcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1LzkxQTE4OTlFODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0l0eVRaWTNHNlhBd2VyZXU4ZUpWM2oxRDli Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXR5VFpZM0c2WEF3ZXJldThlSlYzajFEOWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1LzkxQTE4OTlFODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0l0eVRaWTNHNlhB d2VyZXU4ZUpWM2oxRDliYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChawq+53n46XJ+1Nk7yzlsSUWWNk5LXSKT5f6pvz1HDfKLna2eJPqmBi4mxppX DxxD75OiBFnbHtfIv8EPuCr3HR8GjSI1DnoHnhCBihtkAX5aYgfDPQ08sujz9/pJ md6bw3HisWA/v3p6MyC+2hOgID+hvB+K4qDsOzbeAGcdIToQrfwClKTPmH0fpPIP vlXNX70QxztF3HYMKQS2zDizR2SPR1+0VLpL45y8yHSnSV6zfhE9Vc7HAeAiCkmF dd5g0d3QjbJgLyWnuJv6szcX2KsiRNy9b7L09jaAhyW4ck8idTC/w0x6jhkhEsFE pTOEpmw6P2U5ZSSKfM20Rn1X -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:55 2026 by rpki-client