$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: Fyr1JJPutsyTpaGyzRtfjzXZ1TC7kDLOWhpfKFOl34Y= Subject key identifier: C1:4D:33:76:21:DF:CD:DA:49:70:EF:4B:A9:B5:B3:5F:0C:32:CC:FA Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 054F Signing time: Sat 04 Apr 2026 23:13:46 +0000 Manifest this update: Sat 04 Apr 2026 23:13:45 +0000 Manifest next update: Sat 11 Apr 2026 23:13:45 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: Ss89E1kkZzO4W0fLVPLvhhZ2QVJz+G6Oy6yQgKJ+s0o=) 2: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: IekuGWz95qJq1RkERKwpFfkq5YP338H+OPjlC3vFHYE=) 3: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: mMzlkdBS5l7zH1NqOtcSGsyrLWVpyJgkzBlaJ0LOo5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Apr 4 23:13:45 2026 GMT Not After : Apr 11 23:13:45 2026 GMT Subject: CN=69d19b2a-1a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:18:55:38:ab:b5:9e:41:13:13:13:08:94: 8d:36:38:9e:47:cd:28:64:69:14:9d:e1:30:53:0b: f2:f1:16:10:5d:7c:7a:5a:59:55:20:61:03:79:41: 0c:ad:50:fd:a9:46:aa:de:d4:43:cb:12:8b:44:b2: 50:58:3c:cd:8c:e2:84:a6:75:02:db:1d:93:e8:7d: ed:e9:9b:b1:b7:64:89:04:cc:64:6d:46:a0:e4:3c: d0:e7:e5:f6:f7:c6:6f:b9:02:57:70:39:69:63:64: 11:e8:54:12:25:26:3a:5d:ad:60:ff:18:0c:05:ee: 7b:6e:c0:59:a8:36:a4:7c:c7:3d:63:3e:bd:e3:2c: d4:e8:d3:46:a6:f1:48:7b:31:12:50:b0:9e:f1:73: b7:f4:a4:a5:30:e6:40:3e:67:02:a7:b3:29:a3:7f: 87:d9:98:e2:1c:13:e6:41:1c:31:a3:50:2d:da:10: aa:45:47:a5:92:1f:9e:4f:05:7c:e4:5d:7b:28:23: b5:fd:26:2d:c1:28:fa:26:50:18:b4:6e:c7:3a:1a: e9:b0:b5:be:28:53:63:71:7e:bd:95:b1:be:88:c1: 0b:b6:8d:1c:09:e1:1f:9e:1f:02:4b:f0:73:d5:e3: 15:cb:bc:ee:25:76:0b:4e:74:0f:0f:15:38:b6:c4: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:33:76:21:DF:CD:DA:49:70:EF:4B:A9:B5:B3:5F:0C:32:CC:FA X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ce:9a:c2:e8:63:59:20:d5:72:eb:ad:aa:cf:35:47:f8:7e: 6b:1d:0a:22:6a:0a:e1:a5:c2:9e:79:08:cf:cc:43:68:27:9c: 6d:a3:62:85:46:de:aa:30:e3:48:d5:a1:e6:15:bb:57:4e:5c: eb:82:54:c8:98:bb:4f:4c:56:43:8d:d6:7c:08:98:4d:a9:08: f2:f1:e3:20:f1:0a:f7:9d:e9:8d:f1:87:b9:3c:35:50:1b:eb: ca:7b:f3:80:6d:e1:6d:ae:29:0f:01:75:f5:d1:c7:6d:75:b4: ab:5d:91:96:cf:0b:88:b5:9c:70:d4:fc:cf:2c:7f:7b:5b:83: 06:9f:9e:4f:dc:d2:b1:df:6b:48:58:12:95:1f:41:f1:b5:a2: 4f:fd:a5:68:70:24:b9:bc:9d:59:8e:49:ea:b4:70:36:49:54: b7:ca:0e:a9:c0:bb:dc:f2:c0:96:e0:aa:38:1c:0b:94:e1:78: b3:41:60:4c:87:e3:cc:4e:c8:1b:64:b8:8f:74:22:bd:05:7a: 0b:1e:c8:77:2b:59:ee:a3:da:7b:e4:41:09:c5:a4:dd:bf:e4: 72:73:45:b7:ec:1b:c7:a4:d5:01:c9:13:61:7e:6a:bd:8f:2b: 4d:61:0b:f4:27:db:5b:f8:a8:3e:ce:e5:df:26:26:fc:20:7a: a7:b4:3d:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjYwNDA0MjMxMzQ1WhcNMjYwNDExMjMxMzQ1WjAYMRYwFAYD VQQDEw02OWQxOWIyYS0xYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwkYVTirtZ5BExMTCJSNNjieR80oZGkUneEwUwvy8RYQXXx6WllVIGEDeUEM rVD9qUaq3tRDyxKLRLJQWDzNjOKEpnUC2x2T6H3t6Zuxt2SJBMxkbUag5DzQ5+X2 98ZvuQJXcDlpY2QR6FQSJSY6Xa1g/xgMBe57bsBZqDakfMc9Yz694yzU6NNGpvFI ezESULCe8XO39KSlMOZAPmcCp7Mpo3+H2ZjiHBPmQRwxo1At2hCqRUelkh+eTwV8 5F17KCO1/SYtwSj6JlAYtG7HOhrpsLW+KFNjcX69lbG+iMELto0cCeEfnh8CS/Bz 1eMVy7zuJXYLTnQPDxU4tsRDBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFNM3Yh 383aSXDvS6m1s18MMsz6MB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANM6awuhjWSDVcuutqs81R/h+ax0KImoK4aXCnnkIz8xDaCecbaNihUbeqjDj SNWh5hW7V05c64JUyJi7T0xWQ43WfAiYTakI8vHjIPEK953pjfGHuTw1UBvrynvz gG3hba4pDwF19dHHbXW0q12Rls8LiLWccNT8zyx/e1uDBp+eT9zSsd9rSFgSlR9B 8bWiT/2laHAkubydWY5J6rRwNklUt8oOqcC73PLAluCqOBwLlOF4s0FgTIfjzE7I G2S4j3QivQV6Cx7IdytZ7qPae+RBCcWk3b/kcnNFt+wbx6TVAckTYX5qvY8rTWEL 9CfbW/ioPs7l3yYm/CB6p7Q9aw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:40:58 2026 by rpki-client