$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: 1FAaL3ZfrTfBD/Plonan5uPwav7onHXMsxvzI+fLLlA= Subject key identifier: 29:90:88:3C:94:E5:90:F6:E3:3D:64:BB:69:77:2E:2D:20:CD:29:0D Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1D6B Signing time: Sat 04 Apr 2026 16:03:02 +0000 Manifest this update: Sat 04 Apr 2026 16:03:02 +0000 Manifest next update: Sat 11 Apr 2026 16:03:02 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: BUumBFJ8AQUUNFJCUs2LI78S+qZLLH9nCgks7/CeRcI=) 2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: SMMdB5FfbHvQ8XxRMRHHqZDp8nFnCc1tqnhGm5C6OOg=) 3: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: uLWtAzm0T2XZ8XrHmk3i4Qv1rCDDVOMUdZgDRK+R9AY=) 4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: 8mj54azzqhjHXfOWyNFC53u9e3MBttuOm97GXb6TaYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7561 (0x1d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Apr 4 16:03:02 2026 GMT Not After : Apr 11 16:03:02 2026 GMT Subject: CN=69d13636-2c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:68:e0:0f:eb:31:68:54:75:fd:e0:00:5e: 5d:38:d6:b0:2e:a9:66:4b:75:2e:11:a2:c4:82:90: 46:01:f3:26:97:bd:cd:22:8a:4e:54:70:c7:be:e7: 47:a7:cb:f4:44:53:e5:db:79:88:47:83:3c:cb:8a: cf:09:f4:89:20:7b:12:e0:8a:a1:f3:77:ac:1e:49: 7d:3b:54:ca:49:20:b3:c5:2d:79:7d:e9:b2:36:5a: bf:85:5e:88:30:e3:03:e6:9e:c3:5f:b9:41:8e:88: 85:35:63:e8:d0:3e:21:15:d9:32:8b:8b:00:f0:7c: 76:1d:23:67:a0:73:54:fc:b4:66:1e:cf:fb:9d:35: 24:84:9e:52:b7:bd:31:c7:47:fd:34:88:d9:6f:d4: 53:97:c2:be:7a:94:c9:51:6b:eb:35:fc:04:0d:f4: d9:8f:af:72:2c:2d:f7:c8:5a:b7:eb:ec:2b:fd:2f: e4:17:4b:6c:7c:08:97:cb:f7:bc:9b:e6:22:2d:34: 40:2f:17:2c:78:2c:02:5d:8e:f1:22:2f:e0:af:df: b5:1e:b9:a2:80:2f:28:47:34:57:1d:b9:a8:8a:59: c9:65:df:f2:06:10:92:4b:75:35:97:d3:b3:91:5e: 54:5c:cc:9c:04:88:ab:9c:37:3f:16:27:fd:a4:f5: 82:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:90:88:3C:94:E5:90:F6:E3:3D:64:BB:69:77:2E:2D:20:CD:29:0D X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:65:91:59:09:db:19:a8:de:6d:d1:12:d3:4e:a9:97:5c:85: b6:52:08:f7:e1:5e:63:c0:1b:12:65:34:cc:7a:d3:0f:11:fc: 87:8d:be:11:76:6f:3f:98:dd:fc:fb:72:87:b3:4b:3e:95:30: 27:0e:85:79:3c:f9:fe:e2:ba:2f:b8:c5:7c:c0:10:a5:ea:a6: be:ca:5a:26:fc:38:a5:f9:e2:be:ea:71:d4:42:9a:2b:2f:fd: 84:0e:b0:fa:74:09:bf:fe:4e:84:4b:87:fd:4e:03:0b:24:bb: d9:ab:90:e5:69:8c:cb:c9:24:6d:31:16:6d:db:f9:c0:cc:0a: e5:19:73:01:13:99:80:9d:0d:ef:52:81:b7:b0:9f:01:4e:31: a0:37:5a:ad:f0:de:35:c8:a6:6a:26:b5:51:96:bd:cd:f2:1e: 0e:d6:9c:69:92:d8:1e:77:fc:88:a3:7f:4b:cf:31:cb:70:52: b3:71:be:de:ae:8c:7f:3d:cb:f0:8f:1f:2a:0e:c0:73:b0:b8: eb:e9:65:ee:19:87:2b:7a:44:d2:dd:ae:c3:d8:16:d7:51:b1: a3:65:df:26:06:31:58:20:73:6f:e5:22:2f:b9:f5:3b:e7:dd: 3b:8e:19:66:72:e3:31:2b:e2:28:04:92:b5:ef:d6:b3:78:a5: cd:ba:4f:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjYwNDA0MTYwMzAyWhcNMjYwNDExMTYwMzAyWjAYMRYwFAYD VQQDEw02OWQxMzYzNi0yYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx9o4A/rMWhUdf3gAF5dONawLqlmS3UuEaLEgpBGAfMml73NIopOVHDHvudH p8v0RFPl23mIR4M8y4rPCfSJIHsS4Iqh83esHkl9O1TKSSCzxS15femyNlq/hV6I MOMD5p7DX7lBjoiFNWPo0D4hFdkyi4sA8Hx2HSNnoHNU/LRmHs/7nTUkhJ5St70x x0f9NIjZb9RTl8K+epTJUWvrNfwEDfTZj69yLC33yFq36+wr/S/kF0tsfAiXy/e8 m+YiLTRALxcseCwCXY7xIi/gr9+1HrmigC8oRzRXHbmoilnJZd/yBhCSS3U1l9Oz kV5UXMycBIirnDc/Fif9pPWCBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmQiDyU 5ZD24z1ku2l3Li0gzSkNMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwWWRWQnbGajebdES006pl1yFtlII9+FeY8AbEmU0zHrTDxH8h42+EXZvP5jd /Ptyh7NLPpUwJw6FeTz5/uK6L7jFfMAQpeqmvspaJvw4pfnivupx1EKaKy/9hA6w +nQJv/5OhEuH/U4DCyS72auQ5WmMy8kkbTEWbdv5wMwK5RlzAROZgJ0N71KBt7Cf AU4xoDdarfDeNcimaia1UZa9zfIeDtacaZLYHnf8iKN/S88xy3BSs3G+3q6Mfz3L 8I8fKg7Ac7C46+ll7hmHK3pE0t2uw9gW11Gxo2XfJgYxWCBzb+UiL7n1O+fdO44Z ZnLjMSviKASSte/Ws3ilzbpP4A== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:07 2026 by rpki-client