$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: gWVrctboX1YOfQJX9qaG/SVw0ShIR4wWb3sCnLQeDE4= Subject key identifier: A6:C9:25:74:50:12:C5:09:24:EE:51:D9:D1:EF:20:16:13:98:7C:DF Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 0535 Signing time: Sat 18 Apr 2026 20:20:14 +0000 Manifest this update: Sat 18 Apr 2026 20:20:14 +0000 Manifest next update: Sat 25 Apr 2026 20:20:14 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: 1egcrAxdVrcYlhJA02bvn6kK0Xy9MY7ho+4j1K0S0Wg=) 2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: Q9fK/HIBESDBwerI+LGeuA1a/3ibrPdtmUfxDWX3vMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Apr 18 20:20:14 2026 GMT Not After : Apr 25 20:20:14 2026 GMT Subject: CN=69e3e77e-67f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:07:db:64:3a:51:03:17:e5:95:1c:ce:7b: b6:89:fe:32:a9:34:31:6b:94:88:c7:44:42:5e:54: e0:9d:e1:ce:81:c5:fb:81:a8:6a:d4:ca:6f:f1:50: 34:4d:83:33:47:ff:4b:2d:bd:62:c9:14:38:92:9f: e9:0c:0c:bf:ed:98:9a:1c:50:d6:5e:98:e3:3a:bd: 9e:92:6e:18:b0:ae:3e:3e:2d:ed:26:5b:59:a2:de: 89:b6:53:07:4c:2f:da:b1:63:3d:98:19:da:67:40: 23:da:e4:f7:c5:88:18:35:a9:ab:9e:48:a9:d7:d4: c5:ee:6e:85:8b:31:b6:d6:c7:af:aa:8c:13:f7:55: 46:78:74:c2:f2:d9:af:67:0c:ef:4b:45:74:26:1e: b1:39:5e:59:75:47:65:d6:2f:20:97:27:2b:44:11: 76:72:db:77:4c:39:a3:b0:91:71:0a:cb:eb:0e:bc: 84:d9:1a:6a:5c:fa:92:ba:b2:5e:5b:8d:83:f3:5b: 7c:df:9d:89:2c:c2:9c:31:2b:f8:3e:18:0c:c2:db: 31:93:4b:40:ab:84:da:c3:88:5e:a8:70:5b:45:54: 4a:7e:90:03:63:81:91:6f:be:3d:0d:f1:62:fc:fd: b4:db:f7:06:a5:91:55:3d:76:da:38:38:6e:1c:8c: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C9:25:74:50:12:C5:09:24:EE:51:D9:D1:EF:20:16:13:98:7C:DF X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:bd:b4:99:39:20:17:c1:a8:cd:d5:06:bb:a9:5b:d4:7a:1f: 29:71:f9:00:93:ba:d8:41:76:fb:3b:68:df:06:ee:2d:72:2e: f0:3e:b9:65:cb:bc:ab:53:0e:f9:d9:19:fb:0f:5b:f1:40:6b: 35:27:6a:52:34:1f:c7:af:e0:da:ea:20:4d:74:92:0f:e7:0f: ff:59:7d:82:26:17:87:da:4c:ed:d1:34:0f:8b:12:a4:70:77: 62:e4:e0:33:da:f9:4c:91:f1:7a:e8:73:90:f1:43:ad:47:13: fe:4c:68:7c:b6:e8:21:b3:35:34:8a:c0:82:7e:1d:11:ba:46: 36:78:20:3d:fa:cf:37:d7:79:ec:2d:c1:bf:13:9d:61:d0:cf: 02:9c:2c:71:28:dc:71:12:49:a9:10:8e:0a:1e:9a:1e:7b:ad: d6:e8:0e:f3:79:01:d0:86:df:d5:78:16:e3:f9:d7:d8:1c:a2: 96:cd:5d:ed:02:7f:8e:06:fc:95:e0:0a:3a:be:18:e5:3c:00: 1a:bc:7a:88:38:0d:aa:16:07:be:fe:c0:e2:87:2c:69:51:92: 42:ea:02:ab:4e:f6:f3:31:fb:ba:98:7b:81:4c:0e:98:c1:87: 3b:89:d4:dc:35:fb:bb:ae:72:a1:50:cc:70:8f:08:4c:30:0f: e5:e3:f9:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjYwNDE4MjAyMDE0WhcNMjYwNDI1MjAyMDE0WjAYMRYwFAYD VQQDEw02OWUzZTc3ZS02N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoroH22Q6UQMX5ZUcznu2if4yqTQxa5SIx0RCXlTgneHOgcX7gahq1Mpv8VA0 TYMzR/9LLb1iyRQ4kp/pDAy/7ZiaHFDWXpjjOr2ekm4YsK4+Pi3tJltZot6JtlMH TC/asWM9mBnaZ0Aj2uT3xYgYNamrnkip19TF7m6FizG21sevqowT91VGeHTC8tmv ZwzvS0V0Jh6xOV5ZdUdl1i8glycrRBF2ctt3TDmjsJFxCsvrDryE2RpqXPqSurJe W42D81t8352JLMKcMSv4PhgMwtsxk0tAq4Taw4heqHBbRVRKfpADY4GRb749DfFi /P202/cGpZFVPXbaODhuHIwBcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbJJXRQ EsUJJO5R2dHvIBYTmHzfMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAib20mTkgF8GozdUGu6lb1HofKXH5AJO62EF2+zto3wbuLXIu8D65Zcu8q1MO +dkZ+w9b8UBrNSdqUjQfx6/g2uogTXSSD+cP/1l9giYXh9pM7dE0D4sSpHB3YuTg M9r5TJHxeuhzkPFDrUcT/kxofLboIbM1NIrAgn4dEbpGNnggPfrPN9d57C3BvxOd YdDPApwscSjccRJJqRCOCh6aHnut1ugO83kB0Ibf1XgW4/nX2Byils1d7QJ/jgb8 leAKOr4Y5TwAGrx6iDgNqhYHvv7A4ocsaVGSQuoCq0728zH7uph7gUwOmMGHO4nU 3DX7u65yoVDMcI8ITDAP5eP56Q== -----END CERTIFICATE-----Generated at Sat Apr 18 22:24:23 2026 by rpki-client