$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: hjRXij2v5EGbJI/BE5j2eboIwRuNp5SZjO+QYTPzH1A= Subject key identifier: BF:44:29:58:78:D0:73:1E:1C:0D:AE:DC:A0:76:24:D2:2E:B6:C4:6D Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 07F4 Signing time: Tue 28 Apr 2026 21:34:51 +0000 Manifest this update: Tue 28 Apr 2026 21:34:51 +0000 Manifest next update: Tue 05 May 2026 21:34:51 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: U9jCfjwlDDV6BWQRWtd7gsyz7CmRufF1H3D1HDCXIIs=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: wEVKzo/06lgCcRwDbGVatHG5G3Gc2ADy2oBpbkeEK8Y=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: pYQQWevua0AS/DnR7jQgYAc7go0rrhJf56jb391i7kE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 21:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: Apr 28 21:34:51 2026 GMT Not After : May 5 21:34:51 2026 GMT Subject: CN=69f127fb-03f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:d7:8a:de:bd:b2:a1:95:a8:45:7d:92:be: 55:ef:b2:bf:49:85:ba:d2:3a:ac:11:f6:32:f9:af: 28:e5:d0:65:17:ef:55:c2:3a:e5:ef:84:2a:d3:16: 98:c5:5c:ce:b5:0f:9e:03:3a:4c:83:91:cf:a0:69: 49:12:0c:45:75:e7:96:75:8d:35:c1:0b:e8:5e:58: ec:ad:d1:cd:65:52:14:05:0c:53:55:2b:5d:49:f7: 9a:bc:41:8b:e4:c6:02:34:16:6b:39:ea:85:e1:15: bd:1a:56:fa:da:ff:62:b2:15:65:66:78:2a:21:e0: 56:cc:49:64:60:4f:5d:7c:84:dc:3d:9f:e9:cf:c4: 76:c8:5b:d1:04:e3:d2:0d:31:2f:46:e5:f6:6a:f3: 78:18:e0:b2:bc:e0:3e:fb:1b:42:6d:7a:c8:73:0e: 65:7f:46:2d:93:4e:7c:95:f0:3b:38:cf:2e:76:6a: a4:5f:d2:02:de:70:ba:69:9e:f6:0d:7b:de:2b:8f: 48:b3:bc:76:65:61:f3:ba:13:d4:08:a9:1c:a4:9c: 61:17:89:82:01:9f:ea:5b:1b:4e:fe:8c:58:ba:bd: 65:3e:75:6b:11:2b:53:46:79:3b:95:fa:51:28:46: e4:aa:15:f9:20:02:46:71:10:e1:26:b6:2e:5b:11: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:29:58:78:D0:73:1E:1C:0D:AE:DC:A0:76:24:D2:2E:B6:C4:6D X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:73:76:b1:15:55:45:0c:53:f2:19:2f:5d:a9:77:1d:51:3f: 21:00:78:ab:c7:ce:7a:f7:75:bd:93:8c:1e:07:cd:af:dd:56: 9b:ea:2d:93:43:4b:a1:2d:5a:b6:90:6c:87:b4:16:9e:49:00: 99:14:21:70:ac:9b:c0:4a:b8:06:41:02:30:2d:41:15:59:04: 73:45:60:c9:55:57:69:3e:bf:b4:c2:fe:8d:d4:26:e6:07:5f: 2e:47:0c:13:24:f7:aa:1c:02:34:ec:2c:8d:b5:95:ef:56:0a: 12:d9:9d:20:90:16:56:e5:f6:81:3c:fb:b8:56:e3:2f:de:3e: b1:ab:e2:e7:38:c4:f7:3e:93:3b:53:2f:43:00:b8:64:0e:d9: 1b:5d:24:ea:b9:e2:71:38:21:65:d8:d1:35:06:2d:ee:b7:d0: b2:a7:4a:b9:e7:91:c2:d2:0c:bd:d0:e6:ba:18:25:64:7b:fc: 83:39:eb:91:cd:6c:7f:0a:bb:17:d4:6d:ae:e1:4b:38:79:ee: d0:07:9f:77:5e:fe:10:5a:10:a9:de:a2:31:92:47:25:39:da: b8:f6:5b:00:78:93:6e:b3:f0:89:ac:ad:f4:a4:b2:e3:90:7a: 3c:fd:88:24:5b:86:bb:c9:71:9a:aa:98:dc:80:71:3a:c3:98: 5d:37:06:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjYwNDI4MjEzNDUxWhcNMjYwNTA1MjEzNDUxWjAYMRYwFAYD VQQDEw02OWYxMjdmYi0wM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh5XXit69sqGVqEV9kr5V77K/SYW60jqsEfYy+a8o5dBlF+9Vwjrl74Qq0xaY xVzOtQ+eAzpMg5HPoGlJEgxFdeeWdY01wQvoXljsrdHNZVIUBQxTVStdSfeavEGL 5MYCNBZrOeqF4RW9Glb62v9ishVlZngqIeBWzElkYE9dfITcPZ/pz8R2yFvRBOPS DTEvRuX2avN4GOCyvOA++xtCbXrIcw5lf0Ytk058lfA7OM8udmqkX9IC3nC6aZ72 DXveK49Is7x2ZWHzuhPUCKkcpJxhF4mCAZ/qWxtO/oxYur1lPnVrEStTRnk7lfpR KEbkqhX5IAJGcRDhJrYuWxHpbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9EKVh4 0HMeHA2u3KB2JNIutsRtMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKXN2sRVVRQxT8hkvXal3HVE/IQB4q8fOevd1vZOMHgfNr91Wm+otk0NLoS1a tpBsh7QWnkkAmRQhcKybwEq4BkECMC1BFVkEc0VgyVVXaT6/tML+jdQm5gdfLkcM EyT3qhwCNOwsjbWV71YKEtmdIJAWVuX2gTz7uFbjL94+savi5zjE9z6TO1MvQwC4 ZA7ZG10k6rnicTghZdjRNQYt7rfQsqdKueeRwtIMvdDmuhglZHv8gznrkc1sfwq7 F9RtruFLOHnu0Aefd17+EFoQqd6iMZJHJTnauPZbAHiTbrPwiayt9KSy45B6PP2I JFuGu8lxmqqY3IBxOsOYXTcGeg== -----END CERTIFICATE-----Generated at Wed Apr 29 14:08:40 2026 by rpki-client