$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft File: I3Q0S3Gynw44NSDK_GyINQw1YWg.mft (raw, json) Hash identifier: ZVdH2czlV+kQVdcI6GCxXt4nyGNT8mVDl/GjB7ZVgmM= Subject key identifier: 08:0A:B4:E0:F2:ED:62:65:0A:26:31:4B:BE:02:6B:F7:FD:64:C5:FC Authority key identifier: 23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 Certificate issuer: /CN=A91A58AA/serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft Manifest number: B0 Signing time: Sun 05 Apr 2026 06:29:55 +0000 Manifest this update: Sun 05 Apr 2026 06:29:54 +0000 Manifest next update: Sun 12 Apr 2026 06:29:54 +0000 Files and hashes: 1: I3Q0S3Gynw44NSDK_GyINQw1YWg.crl (hash: rlBO4lpHBCY+olWinT8URi7IuCEtWvvVvzmrc5Zh7MQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Validity Not Before: Apr 5 06:29:54 2026 GMT Not After : Apr 12 06:29:54 2026 GMT Subject: CN=69d20162-8e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:c0:ae:2f:cb:b0:12:78:ff:20:dc:52:f8: 1c:e0:64:57:e4:c7:32:4d:60:01:0e:2c:6e:13:34: 6a:07:d0:94:82:cf:26:73:f4:ea:81:23:f4:72:c4: 03:39:ab:de:6f:02:40:b5:ab:c0:fc:cc:90:9a:fc: ae:c6:4c:d6:80:12:d1:a1:c9:eb:a9:30:4c:79:74: 3d:78:a8:a0:f0:21:84:b9:e1:55:ad:39:8c:ad:be: ea:0c:69:d3:d6:fb:08:bb:66:49:93:51:68:fd:97: e0:b8:2b:48:7d:e0:17:78:ba:3b:a4:db:16:a5:d4: 5c:de:39:7a:6f:66:55:e7:12:bb:6c:44:c7:1b:6b: 1b:a1:41:4e:2d:70:4f:a3:35:48:22:7b:e0:63:9e: 03:cd:df:23:41:26:09:3a:5a:81:56:83:f9:5d:f9: 1e:37:f0:9e:70:51:cc:52:9a:00:14:61:f9:7e:eb: 05:db:f2:45:02:37:72:e9:bc:41:e8:ef:ac:de:e5: b9:60:a3:6e:36:04:6f:b5:6e:f8:6c:d3:67:f0:59: 30:d7:26:8a:72:65:52:8c:74:a4:a3:d1:6a:53:46: 37:28:b3:0d:de:21:cc:23:17:5c:ce:3a:54:58:30: db:09:ef:2d:b6:e1:48:64:27:8e:bc:5d:e5:e6:c7: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:B4:E0:F2:ED:62:65:0A:26:31:4B:BE:02:6B:F7:FD:64:C5:FC X509v3 Authority Key Identifier: keyid:23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cc:00:bd:1d:0e:7e:48:bd:28:e6:96:57:56:27:39:c1:72: 11:e0:74:63:0b:61:b9:5d:5f:86:84:fc:b9:6d:4e:34:59:3a: a4:15:1a:0c:3a:6a:fd:a2:13:18:8f:36:70:15:fe:d8:73:c7: 9a:63:0f:10:35:6c:92:be:eb:4e:8f:8e:b6:3f:ca:dd:e1:ee: e3:ab:7b:26:8a:67:3c:e3:66:3d:43:ee:dd:3e:64:d0:ea:b3: 56:e2:7a:eb:6e:80:17:c6:9f:7d:2b:43:99:f8:a2:24:13:40: e7:7c:d5:46:9f:32:db:6b:e7:1b:2c:ce:3a:5f:58:cb:53:7f: 2f:cc:37:7b:f5:2a:88:91:09:5d:ea:1f:f2:2b:03:35:d5:49: 09:2d:e8:b3:82:55:f1:70:84:08:1c:6b:3e:33:9d:da:e7:d6: 82:6e:9d:16:94:4e:9d:5f:fc:2d:f5:cc:c5:b9:f7:b8:c9:1c: 0d:d3:35:da:76:13:a0:f2:e0:80:53:f4:55:36:2a:12:f2:eb: 0e:e9:96:58:2f:d0:96:42:ce:43:56:09:5d:38:d5:26:48:dc: 0b:4a:6b:21:ae:62:e6:3f:5b:85:2b:ef:4d:79:59:89:0a:d0: b9:1a:db:a5:b1:7b:2b:a6:d0:c8:7f:ee:66:52:f8:fc:fa:07: 1c:8e:d9:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4QUExMTAvBgNVBAUTKDIzNzQzNDRCNzFCMjlGMEUzODM1MjBDQUZDNkM4ODM1 MEMzNTYxNjgwHhcNMjYwNDA1MDYyOTU0WhcNMjYwNDEyMDYyOTU0WjAYMRYwFAYD VQQDEw02OWQyMDE2Mi04ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5/Ari/LsBJ4/yDcUvgc4GRX5McyTWABDixuEzRqB9CUgs8mc/TqgSP0csQD OavebwJAtavA/MyQmvyuxkzWgBLRocnrqTBMeXQ9eKig8CGEueFVrTmMrb7qDGnT 1vsIu2ZJk1Fo/ZfguCtIfeAXeLo7pNsWpdRc3jl6b2ZV5xK7bETHG2sboUFOLXBP ozVIInvgY54Dzd8jQSYJOlqBVoP5XfkeN/CecFHMUpoAFGH5fusF2/JFAjdy6bxB 6O+s3uW5YKNuNgRvtW74bNNn8Fkw1yaKcmVSjHSko9FqU0Y3KLMN3iHMIxdczjpU WDDbCe8ttuFIZCeOvF3l5sc5VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgKtODy 7WJlCiYxS74Ca/f9ZMX8MB8GA1UdIwQYMBaAFCN0NEtxsp8OODUgyvxsiDUMNWFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DQTUwQzkyNjI0 MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9JM1EwUzNHeW53NDROU0RLX0d5SU5RdzFZ V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzUTBTM0d5bnc0NE5TREtfR3lJTlF3MVlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NThBQS9DQTUwQzkyNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9JM1EwUzNHeW53 NDROU0RLX0d5SU5RdzFZV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm8wAvR0Ofki9KOaWV1YnOcFyEeB0YwthuV1fhoT8uW1ONFk6pBUaDDpq/aIT GI82cBX+2HPHmmMPEDVskr7rTo+Otj/K3eHu46t7JopnPONmPUPu3T5k0OqzVuJ6 626AF8affStDmfiiJBNA53zVRp8y22vnGyzOOl9Yy1N/L8w3e/UqiJEJXeof8isD NdVJCS3os4JV8XCECBxrPjOd2ufWgm6dFpROnV/8LfXMxbn3uMkcDdM12nYToPLg gFP0VTYqEvLrDumWWC/QlkLOQ1YJXTjVJkjcC0prIa5i5j9bhSvvTXlZiQrQuRrb pbF7K6bQyH/uZlL4/PoHHI7ZBg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:15 2026 by rpki-client