$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json) Hash identifier: SE88XUaUf04p0ZYawx1A9Eb5WYGRm1fW4zAK1Y/UfAI= Subject key identifier: 3D:33:E4:8A:CD:C8:D7:56:BB:D1:70:F4:D6:14:A9:4F:A9:98:62:3F Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Certificate serial: 15AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft Manifest number: 2D76 Signing time: Sat 04 Apr 2026 16:39:13 +0000 Manifest this update: Sat 04 Apr 2026 16:39:13 +0000 Manifest next update: Sat 11 Apr 2026 16:39:13 +0000 Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: XxPikDDJzPXmeNJQTD161AEgfVEsHTDwKRIUSn+1SyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5549 (0x15ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Validity Not Before: Apr 4 16:39:13 2026 GMT Not After : Apr 11 16:39:13 2026 GMT Subject: CN=69d13eb1-a9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:ce:a5:33:62:81:da:69:ce:21:f1:ba:ef: 37:72:39:ff:e3:07:75:d1:3c:20:f0:c9:8f:d5:0d: 01:52:06:c2:18:b2:c6:b8:75:32:4c:e8:bb:3d:51: f6:45:ee:51:92:d3:7a:6f:85:dd:07:fa:c9:23:85: 3c:06:16:6c:90:ad:bd:44:1b:42:9d:98:a5:44:32: 53:64:b5:ae:d2:3d:77:29:0f:98:b3:56:19:91:08: ea:f9:c3:47:a2:c1:a2:ba:61:b2:e7:16:24:65:fd: 7e:4a:73:e7:a1:f1:2a:3f:59:85:2f:de:30:1e:94: 1d:cb:a3:c2:38:e0:97:e6:c0:60:25:e3:6f:30:51: ce:43:0b:81:cf:da:36:c6:16:cf:6f:df:1a:aa:99: 68:8d:8c:3a:8a:73:fa:80:8d:74:00:49:1a:14:c1: f3:e6:ca:ad:31:dd:74:4e:ad:c1:b4:76:05:03:df: 88:49:82:27:bb:80:b0:f9:6f:08:94:cd:4d:48:b8: f2:11:68:04:e8:cb:bb:38:57:52:c3:9c:55:c2:ae: 7b:e1:93:00:d7:47:13:d4:44:6a:d2:8b:88:31:43: 0c:a5:3d:6b:e6:66:8a:dd:77:ff:6b:83:ca:24:8a: ce:43:4f:f6:57:eb:c4:f0:a4:eb:b0:5d:69:05:63: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:E4:8A:CD:C8:D7:56:BB:D1:70:F4:D6:14:A9:4F:A9:98:62:3F X509v3 Authority Key Identifier: keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fc:c5:53:8c:33:b8:af:8c:31:01:ce:02:44:54:d0:d1:1f: ba:47:c5:28:9e:80:7a:a0:0a:a4:8d:eb:cc:4d:76:e9:e1:d1: cd:eb:dc:e9:4e:f9:ea:f3:9e:3f:a2:1f:d8:eb:f0:7a:fd:12: 16:26:90:07:fb:01:72:d2:e5:d6:2e:1a:e5:08:e5:f3:ab:50: 17:24:29:b1:59:4c:4d:31:b1:2e:e1:15:5d:61:37:e5:64:84: f2:8f:78:ac:82:dd:3e:36:cb:d4:ac:94:65:3c:82:c0:32:79: 36:29:d4:f5:93:5c:c4:cf:a1:7c:57:6b:dc:6c:fe:34:e5:dc: 2f:7d:0b:66:68:2c:cb:a4:84:14:8f:70:33:b0:fc:54:1f:0f: 10:5d:3b:a1:e8:be:c6:e9:e7:96:67:ee:26:64:69:03:b8:7f: fd:2c:76:c3:90:7c:89:b2:27:da:e0:15:b9:b2:37:e5:2d:53: f2:25:25:a4:28:c0:d5:25:20:a7:27:c2:cf:f0:de:9e:33:71: 4c:6f:1a:49:a9:1a:06:d3:e2:92:db:ad:9b:c0:ae:4d:9d:47: 1a:d6:d2:a6:6b:34:ff:a1:6d:db:94:b0:80:7d:ed:b4:a5:5f: 9f:97:c4:db:ab:b7:f5:42:04:2e:39:1e:ed:57:3e:2a:b8:8b: 57:7e:a9:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKDIyODg2RDE3NkE3M0MwQkUzQ0RENTg4OUMyQThCMzIz RTNCOTQxMkMwHhcNMjYwNDA0MTYzOTEzWhcNMjYwNDExMTYzOTEzWjAYMRYwFAYD VQQDEw02OWQxM2ViMS1hOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGfOpTNigdppziHxuu83cjn/4wd10Twg8MmP1Q0BUgbCGLLGuHUyTOi7PVH2 Re5RktN6b4XdB/rJI4U8BhZskK29RBtCnZilRDJTZLWu0j13KQ+Ys1YZkQjq+cNH osGiumGy5xYkZf1+SnPnofEqP1mFL94wHpQdy6PCOOCX5sBgJeNvMFHOQwuBz9o2 xhbPb98aqplojYw6inP6gI10AEkaFMHz5sqtMd10Tq3BtHYFA9+ISYInu4Cw+W8I lM1NSLjyEWgE6Mu7OFdSw5xVwq574ZMA10cT1ERq0ouIMUMMpT1r5maK3Xf/a4PK JIrOQ0/2V+vE8KTrsF1pBWNslQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0z5IrN yNdWu9Fw9NYUqU+pmGI/MB8GA1UdIwQYMBaAFCKIbRdqc8C+PN1YicKosyPjuUEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendMNDgzVmlKd3FpekktTzVR U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvaHRGMnB6d0w0ODNWaUp3cWl6SS1PNVFTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendM NDgzVmlKd3FpekktTzVRU3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhfzFU4wzuK+MMQHOAkRU0NEfukfFKJ6AeqAKpI3rzE126eHRzevc6U756vOe P6If2Ovwev0SFiaQB/sBctLl1i4a5Qjl86tQFyQpsVlMTTGxLuEVXWE35WSE8o94 rILdPjbL1KyUZTyCwDJ5NinU9ZNcxM+hfFdr3Gz+NOXcL30LZmgsy6SEFI9wM7D8 VB8PEF07oei+xunnlmfuJmRpA7h//Sx2w5B8ibIn2uAVubI35S1T8iUlpCjA1SUg pyfCz/DenjNxTG8aSakaBtPiktutm8CuTZ1HGtbSpms0/6Ft25SwgH3ttKVfn5fE 26u39UIELjke7Vc+KriLV36pWg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:17 2026 by rpki-client