$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft File: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json) Hash identifier: j0z9ypt2zbhWkTqzreDOEWSX2g8nYt65fUWC1mYdHow= Subject key identifier: 7F:8D:C4:68:EA:D1:55:D8:32:69:43:68:97:94:5E:D2:25:E6:6A:B4 Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 Certificate issuer: /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft Manifest number: 5A Signing time: Sun 05 Apr 2026 07:28:38 +0000 Manifest this update: Sun 05 Apr 2026 07:28:37 +0000 Manifest next update: Sun 12 Apr 2026 07:28:37 +0000 Files and hashes: 1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: JURrQ5JSaiiRzY1+Ewd5UuB3QyuOw7nH2LPSRBzR3Eg=) 2: 06048736B08B11F087892851C4F9AE02.roa (hash: lH1PbCUckjd4Z/IAYvlhe3AJ9Dotnfr+gAbzTEeakhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Validity Not Before: Apr 5 07:28:37 2026 GMT Not After : Apr 12 07:28:37 2026 GMT Subject: CN=69d20f26-314c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:fa:32:3a:7b:cd:5f:4c:55:ea:59:35:a4: b7:a5:74:ca:95:1f:88:2f:90:d4:cc:da:f8:1a:e4: 69:c4:20:58:72:3a:fd:9e:d5:11:d9:21:08:01:b8: 56:6e:43:f3:28:b6:fe:bf:94:bd:b2:b1:13:db:83: b1:39:ad:ef:d7:cb:b4:ef:c4:90:13:2a:0e:12:d3: 76:48:61:c9:42:ca:48:48:63:0c:7f:8e:a2:64:a3: a0:71:56:10:a0:47:c7:e6:59:40:7b:f3:bb:53:c6: 34:fb:60:42:9b:9d:07:1e:39:3d:6e:f1:b8:63:f1: 9c:d6:2c:cd:6b:a8:2c:59:69:78:85:91:d8:bc:8f: b1:6b:bf:51:cd:d0:5f:78:5d:31:d5:9b:ab:11:a6: f3:e6:be:a0:ae:d9:16:5f:1b:84:4b:32:85:3a:e6: 0e:50:af:31:3d:fb:ea:60:8e:4b:bc:2a:45:71:2c: 82:cd:9b:de:c5:52:f0:fc:9b:4c:f5:2b:b9:8f:df: 97:ff:92:ef:a3:0b:3b:f9:a5:6f:d3:78:d5:a0:d7: 77:2a:3c:94:ee:6b:ef:74:1a:25:ed:d8:9d:23:11: 9b:cb:1e:e2:9b:bb:cd:08:ce:a8:56:dd:49:b0:fd: 9f:bd:9f:05:f8:53:5f:3d:a0:3b:70:2e:f6:92:77: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8D:C4:68:EA:D1:55:D8:32:69:43:68:97:94:5E:D2:25:E6:6A:B4 X509v3 Authority Key Identifier: keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:92:09:cb:7f:10:67:45:57:8d:04:59:4e:23:61:c5:4b:a4: 8c:d0:a9:b9:78:05:11:8e:b1:ad:ed:79:94:e7:c1:12:a3:f8: f9:e5:92:b9:f0:3e:c4:ae:73:8d:2a:bc:c6:a1:64:4a:f8:04: 33:37:4c:97:cf:5e:af:8d:9e:df:77:59:3e:13:08:d7:0f:44: 3b:3b:96:74:b8:16:ee:98:b7:2b:db:14:ad:3e:3f:a2:b7:e6: 9e:87:4c:f8:d2:e9:08:a7:c5:a9:b2:09:c3:c3:10:4b:3b:42: 5c:6b:cd:88:40:5e:99:60:f0:1a:4a:73:00:0e:de:75:32:de: be:49:a0:19:96:07:ba:63:a2:db:43:10:41:78:e3:39:e2:af: 30:2a:58:67:a8:61:eb:da:75:73:7c:b4:bb:8f:a2:a9:ce:cb: 26:17:eb:db:82:95:7a:3c:81:78:64:f3:d0:79:03:fa:0c:76: 28:da:1c:e5:8e:4a:b7:3f:64:d2:34:b5:4c:4b:ba:2a:74:8c: 3d:de:89:1c:fe:b3:cf:46:e6:88:f7:11:15:1f:5f:0c:2e:56: 4b:7f:8e:3b:a0:1f:59:29:41:a2:e2:08:8e:b8:33:43:3d:b5: 0e:0a:7a:30:51:67:df:ee:e2:d2:5d:a0:9c:82:66:03:b5:5d: 07:ba:0d:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTgxRTExMC8GA1UEBRMoMjE3NjA1QTVERURFMkQ2MjJGOThBRUE2QzJGNkY5NUQ4 RkFFMUI2NjAeFw0yNjA0MDUwNzI4MzdaFw0yNjA0MTIwNzI4MzdaMBgxFjAUBgNV BAMTDTY5ZDIwZjI2LTMxNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfg/oyOnvNX0xV6lk1pLeldMqVH4gvkNTM2vga5GnEIFhyOv2e1RHZIQgBuFZu Q/Motv6/lL2ysRPbg7E5re/Xy7TvxJATKg4S03ZIYclCykhIYwx/jqJko6BxVhCg R8fmWUB787tTxjT7YEKbnQceOT1u8bhj8ZzWLM1rqCxZaXiFkdi8j7Frv1HN0F94 XTHVm6sRpvPmvqCu2RZfG4RLMoU65g5QrzE9++pgjku8KkVxLILNm97FUvD8m0z1 K7mP35f/ku+jCzv5pW/TeNWg13cqPJTua+90GiXt2J0jEZvLHuKbu80IzqhW3Umw /Z+9nwX4U189oDtwLvaSd9xPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf43EaOrR VdgyaUNol5Re0iXmarQwHwYDVR0jBBgwFoAUIXYFpd7eLWIvmK6mwvb5XY+uG2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFODFFL0VBNzgyMEQ4QjA4 ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJdm1LNm13dmI1WFktdUcy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVhZRnBkN2VMV0l2bUs2bXd2YjVYWS11RzJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF ODFFL0VBNzgyMEQ4QjA4ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJ dm1LNm13dmI1WFktdUcyWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkkgnLfxBnRVeNBFlOI2HFS6SM0Km5eAURjrGt7XmU58ESo/j55ZK58D7ErnON KrzGoWRK+AQzN0yXz16vjZ7fd1k+EwjXD0Q7O5Z0uBbumLcr2xStPj+it+aeh0z4 0ukIp8WpsgnDwxBLO0Jca82IQF6ZYPAaSnMADt51Mt6+SaAZlge6Y6LbQxBBeOM5 4q8wKlhnqGHr2nVzfLS7j6KpzssmF+vbgpV6PIF4ZPPQeQP6DHYo2hzljkq3P2TS NLVMS7oqdIw93okc/rPPRuaI9xEVH18MLlZLf447oB9ZKUGi4giOuDNDPbUOCnow UWff7uLSXaCcgmYDtV0Hug0q -----END CERTIFICATE-----Generated at Mon Apr 6 08:26:03 2026 by rpki-client