$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: iJ8110+QKEox74VozF1GOsWJ6npLBjoM92nL7NnaYWI= Subject key identifier: F3:C8:14:18:9D:52:E3:96:21:6D:50:DE:7E:5A:F3:D0:7A:7F:19:2F Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0286 Signing time: Sun 05 Apr 2026 01:33:48 +0000 Manifest this update: Sun 05 Apr 2026 01:33:47 +0000 Manifest next update: Sun 12 Apr 2026 01:33:47 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: HKYxXxzRbbhRDQLBbHxRLNovjZ/Jy84O/Rz24e33qrU=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Apr 5 01:33:47 2026 GMT Not After : Apr 12 01:33:47 2026 GMT Subject: CN=69d1bbfb-13b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:9a:da:af:da:96:e9:3b:46:5d:84:06:31: a9:5c:28:70:9b:66:8c:e2:59:b7:37:6b:19:5e:61: 38:e4:bb:90:e8:fb:23:c5:a5:ee:64:27:6a:f6:bd: da:03:b1:e3:21:41:53:06:1c:7a:38:b2:ed:35:62: 3c:f8:79:31:44:53:fe:76:f0:23:6c:19:1e:de:72: 5c:25:8d:2b:2e:65:e7:0d:5f:d0:98:55:40:5b:9f: ce:94:98:e0:7c:33:10:a4:2a:14:8f:f8:e8:3e:ff: a7:0b:2f:ad:d0:71:dc:b7:6b:9a:74:de:70:91:1b: b2:70:5a:d4:a6:90:86:39:e1:bc:4f:fd:2c:a3:06: ff:ac:0f:81:c1:ab:c5:8c:90:b7:83:f2:3f:2f:f2: 10:ff:16:60:4c:82:bc:0c:58:ab:b9:0d:60:34:0f: 38:a0:a1:87:46:70:a0:d3:c9:b0:d4:90:75:be:bc: ab:3f:f5:22:7a:d7:93:3f:dd:be:6e:13:8d:8b:3b: ce:ad:75:33:0f:55:03:5c:52:d5:d1:a1:a8:15:03: 58:d6:08:d1:dc:a7:fc:c4:9a:75:9a:1c:2d:26:fa: d1:01:95:90:13:70:95:9e:23:a2:bc:c6:ab:ac:b7: a4:8b:04:f5:5b:bd:22:78:ab:24:ec:ad:d0:bb:92: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C8:14:18:9D:52:E3:96:21:6D:50:DE:7E:5A:F3:D0:7A:7F:19:2F X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1a:83:27:91:ef:30:cc:6b:ff:19:81:07:51:bd:d8:6c:77: 77:8f:34:1b:56:66:cd:b1:e4:62:f5:b4:ed:c8:70:f0:ad:79: 36:3e:92:0e:d1:66:29:38:2b:95:e6:cc:a6:06:5f:8f:31:6f: 6f:64:82:c5:59:ed:de:3e:b8:68:6d:db:27:5e:10:c5:d0:88: dc:02:8b:27:5f:6d:ce:74:7c:f7:bb:2e:c0:86:31:7a:aa:9d: d5:25:37:7b:bd:58:c0:70:65:80:52:04:7d:7a:dd:65:8b:8c: 1a:ca:22:b7:69:38:e0:37:1d:50:bf:34:08:37:6b:40:54:47: cd:e2:68:75:84:25:3e:cb:ab:14:a7:5a:95:aa:1f:f5:79:62: f3:54:9f:1e:77:59:47:7d:cc:cc:15:71:b7:2d:31:01:8a:33: 0c:8b:9d:ec:72:61:2c:82:e6:4c:b6:14:7c:61:04:1f:74:41: a5:c8:c3:38:1e:40:f6:46:64:0b:ae:94:33:bf:83:4f:5c:80: 98:f2:bd:4a:52:d3:84:fb:81:f2:c7:3e:eb:3b:77:72:42:6e: 92:fb:c8:3c:4d:3f:7b:da:1e:8c:08:44:6d:e8:c5:13:f0:db: 26:2d:46:0e:ee:55:69:6c:3a:e9:29:70:d2:a6:03:c3:cd:13: 0e:ab:c8:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwNDA1MDEzMzQ3WhcNMjYwNDEyMDEzMzQ3WjAYMRYwFAYD VQQDEw02OWQxYmJmYi0xM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUua2q/aluk7Rl2EBjGpXChwm2aM4lm3N2sZXmE45LuQ6PsjxaXuZCdq9r3a A7HjIUFTBhx6OLLtNWI8+HkxRFP+dvAjbBke3nJcJY0rLmXnDV/QmFVAW5/OlJjg fDMQpCoUj/joPv+nCy+t0HHct2uadN5wkRuycFrUppCGOeG8T/0sowb/rA+BwavF jJC3g/I/L/IQ/xZgTIK8DFiruQ1gNA84oKGHRnCg08mw1JB1vryrP/UieteTP92+ bhONizvOrXUzD1UDXFLV0aGoFQNY1gjR3Kf8xJp1mhwtJvrRAZWQE3CVniOivMar rLekiwT1W70ieKsk7K3Qu5JXAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPIFBid UuOWIW1Q3n5a89B6fxkvMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKRqDJ5HvMMxr/xmBB1G92Gx3d480G1ZmzbHkYvW07chw8K15Nj6SDtFmKTgr lebMpgZfjzFvb2SCxVnt3j64aG3bJ14QxdCI3AKLJ19tznR897suwIYxeqqd1SU3 e71YwHBlgFIEfXrdZYuMGsoit2k44DcdUL80CDdrQFRHzeJodYQlPsurFKdalaof 9Xli81SfHndZR33MzBVxty0xAYozDIud7HJhLILmTLYUfGEEH3RBpcjDOB5A9kZk C66UM7+DT1yAmPK9SlLThPuB8sc+6zt3ckJukvvIPE0/e9oejAhEbejFE/DbJi1G Du5VaWw66Slw0qYDw80TDqvIZA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:18 2026 by rpki-client