$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: Hayy7MXFPh37MNreMVRJvL/GsmkUCj7kIrXQePPKG94= Subject key identifier: 8E:C3:F5:AE:01:40:9C:64:6F:35:80:8E:F2:2E:08:44:0B:1C:2F:26 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 01E7 Signing time: Sun 05 Apr 2026 02:54:10 +0000 Manifest this update: Sun 05 Apr 2026 02:54:09 +0000 Manifest next update: Sun 12 Apr 2026 02:54:09 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: DuKKxrWnP49m310QmF5xF6rsHFt5EADFyDiagKro2SI=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Apr 5 02:54:09 2026 GMT Not After : Apr 12 02:54:09 2026 GMT Subject: CN=69d1ced2-3817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:44:bc:c5:a9:d4:5c:b8:16:17:17:ee:5f:60: 53:3b:ba:61:73:c9:44:78:3d:5f:a9:09:53:9c:66: 04:f7:13:7d:82:74:08:54:fd:a0:e4:96:25:56:ea: c8:bb:59:1c:b1:1f:32:24:85:7e:47:8d:17:85:0b: 60:32:50:37:1b:9d:08:03:11:44:b2:a9:10:83:df: 82:a4:ac:38:7b:51:0c:e1:0f:ec:e4:2e:28:af:75: 19:1f:31:1d:f3:22:cd:3e:ee:9e:39:ae:47:bb:17: d2:fa:20:4b:a3:47:80:66:b9:9d:e2:cc:b5:b5:83: 6e:73:8c:ad:9e:ec:77:d2:19:2f:1d:ff:cc:a3:55: 6f:1c:ee:f4:18:2d:5d:23:be:99:2f:fc:b5:db:7f: ce:f5:a1:3a:6d:78:a2:fb:58:50:1e:80:9c:93:51: ba:73:79:9e:b5:7f:0c:e7:2a:f1:df:ee:46:04:da: 0e:b6:da:68:c6:da:86:3e:fd:70:af:ce:85:8e:8c: 6c:01:b7:4a:14:46:47:7f:93:0d:5f:ac:91:18:98: a3:77:61:af:33:ce:cc:39:11:9d:ed:21:7f:b3:0f: 0d:67:18:b0:ad:cc:04:85:ef:c5:77:3d:74:d5:4f: b3:3a:06:0d:c1:a9:72:d1:51:0b:ab:8a:c3:40:5b: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C3:F5:AE:01:40:9C:64:6F:35:80:8E:F2:2E:08:44:0B:1C:2F:26 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a6:97:2d:7d:43:f6:87:8f:d9:95:17:e4:20:b4:47:3a:81: 66:72:66:4e:26:3d:07:bc:fc:24:4d:4a:01:e2:f1:cf:25:24: 95:63:47:f6:21:f1:01:87:3a:e8:de:b6:2a:61:43:bc:48:b7: 2a:15:49:dd:b4:24:26:0a:7c:39:d1:d0:fc:12:97:27:14:1c: de:bc:cd:f7:4a:f7:73:a9:03:fa:9d:d5:93:97:16:4a:20:a4: b5:05:21:29:bf:79:c2:b4:60:2c:20:e6:85:e1:27:34:cb:bc: 67:23:e3:a3:86:02:1d:52:cf:be:6b:3b:7b:37:ae:ab:7e:01: 8e:71:27:6b:66:0b:3a:d9:b3:0a:1e:99:ae:65:8f:30:33:c0: 05:70:f6:08:7b:c2:8f:e2:09:39:8b:59:e6:74:3a:80:b1:ee: a2:32:73:4c:85:5c:97:15:3c:0c:42:c3:03:9c:1d:bb:b0:f3: b8:18:b0:08:aa:03:f8:42:84:36:91:9b:c1:c9:2e:de:b0:24: ab:52:60:91:1e:ad:e2:97:01:55:0d:8f:b1:f9:27:ea:1e:3c: 23:7a:a3:d0:b1:c8:d5:ad:bf:f9:bf:4d:01:a5:72:00:1a:97: e5:4c:7a:fb:2b:9d:60:c6:dd:e0:41:3a:1d:18:74:56:b5:0e: d1:b7:19:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjYwNDA1MDI1NDA5WhcNMjYwNDEyMDI1NDA5WjAYMRYwFAYD VQQDEw02OWQxY2VkMi0zODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0S8xanUXLgWFxfuX2BTO7phc8lEeD1fqQlTnGYE9xN9gnQIVP2g5JYlVurI u1kcsR8yJIV+R40XhQtgMlA3G50IAxFEsqkQg9+CpKw4e1EM4Q/s5C4or3UZHzEd 8yLNPu6eOa5HuxfS+iBLo0eAZrmd4sy1tYNuc4ytnux30hkvHf/Mo1VvHO70GC1d I76ZL/y123/O9aE6bXii+1hQHoCck1G6c3metX8M5yrx3+5GBNoOttpoxtqGPv1w r86FjoxsAbdKFEZHf5MNX6yRGJijd2GvM87MORGd7SF/sw8NZxiwrcwEhe/Fdz10 1U+zOgYNwaly0VELq4rDQFvsswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7D9a4B QJxkbzWAjvIuCEQLHC8mMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEaaXLX1D9oeP2ZUX5CC0RzqBZnJmTiY9B7z8JE1KAeLxzyUklWNH9iHxAYc6 6N62KmFDvEi3KhVJ3bQkJgp8OdHQ/BKXJxQc3rzN90r3c6kD+p3Vk5cWSiCktQUh Kb95wrRgLCDmheEnNMu8ZyPjo4YCHVLPvms7ezeuq34BjnEna2YLOtmzCh6ZrmWP MDPABXD2CHvCj+IJOYtZ5nQ6gLHuojJzTIVclxU8DELDA5wdu7DzuBiwCKoD+EKE NpGbwcku3rAkq1JgkR6t4pcBVQ2Psfkn6h48I3qj0LHI1a2/+b9NAaVyABqX5Ux6 +yudYMbd4EE6HRh0VrUO0bcZvg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:11 2026 by rpki-client