$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: XBvl7Ppk+LKMuGJR7s8h+1gEb0M4iLMgapU7FpsPUFg= Subject key identifier: 38:F3:E0:4F:27:52:DE:5C:AE:C9:96:8C:BB:90:0A:AE:A9:C0:6E:D8 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 0789 Signing time: Mon 20 Apr 2026 21:59:03 +0000 Manifest this update: Mon 20 Apr 2026 21:59:02 +0000 Manifest next update: Mon 27 Apr 2026 21:59:02 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 3Tbu3nzZtLfXnmyTRath4UA4aiwUD1MgLUuFdgshSQM=) 2: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=) 4: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=) 5: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=) 6: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=) 7: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=) 9: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Apr 20 21:59:02 2026 GMT Not After : Apr 27 21:59:02 2026 GMT Subject: CN=69e6a1a7-2def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:23:84:fc:2b:e9:72:f3:5b:e2:82:62:d5: 84:72:62:2a:fe:91:80:da:c9:72:01:aa:2f:42:e2: f9:a1:d3:d3:c5:79:8e:5a:87:8f:53:27:2d:2d:a6: 62:fc:0f:e0:39:8e:f5:8f:00:03:4c:6e:3c:df:6f: 6d:8b:9d:21:a7:6e:5e:29:b8:56:71:71:fb:97:15: 77:63:a2:ba:0f:9a:92:23:0e:ad:11:68:89:30:61: b1:8a:4b:e6:29:ab:29:8a:70:86:ae:2f:48:e4:0d: ba:3f:b0:07:b6:6d:4b:1b:df:91:ff:2c:d9:8d:05: 56:d6:2e:d4:0a:ad:e5:9b:55:29:b5:6a:37:3b:19: c7:82:5c:d9:b7:12:fa:9f:c3:f0:fd:7c:9f:a9:2e: cc:af:3f:d2:dc:6e:3b:e5:d0:a3:52:2d:4f:2c:4c: b2:25:13:6e:56:ec:f4:11:b4:09:3d:7f:12:e7:65: 08:bf:05:b8:84:75:b8:01:0a:88:bc:4a:8c:5e:06: 2f:4b:b6:d6:60:8b:c6:2a:cd:e7:d9:8b:06:79:fc: 05:e3:71:3a:ab:30:5d:dc:50:d4:5f:8f:99:a1:bb: b1:54:3f:84:4e:d6:ce:4a:49:46:7e:cb:4f:b7:14: 61:a4:84:f4:7a:82:68:c3:4e:d2:f7:f1:f3:16:bf: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F3:E0:4F:27:52:DE:5C:AE:C9:96:8C:BB:90:0A:AE:A9:C0:6E:D8 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0f:3b:63:9b:c8:b3:51:8c:a5:ee:a4:27:ea:df:56:c0:38: f0:17:d2:29:c3:85:89:08:8f:a1:03:c5:b9:0b:97:c9:41:c6: de:6d:78:14:84:53:2c:27:a9:ba:e5:30:93:e8:ce:31:58:a6: f6:7e:fb:04:4f:5f:8e:9d:55:47:fa:88:4f:95:a5:10:df:51: 34:ef:9f:db:96:45:af:89:ca:21:83:a9:46:fa:c9:d2:d5:1f: f1:66:de:a4:6a:0c:65:b0:a7:6c:4b:b5:8d:8b:42:95:1d:25: e4:72:84:9c:d7:3b:20:8f:e5:60:77:01:aa:12:a5:58:cb:67: 99:de:7a:a2:bb:76:d0:58:ae:1e:b9:13:d7:01:23:8e:08:09: 0a:94:55:a4:ae:30:c4:dc:41:88:10:2c:05:9f:0a:bb:f6:1c: 42:5d:3a:7e:de:34:39:f3:1b:6d:d6:bb:c0:7e:29:88:19:17: f3:84:40:26:79:88:6e:33:25:33:28:31:b8:bd:fe:f3:a3:92: 15:84:47:c4:1c:cd:36:ef:c1:ea:e7:e6:d0:47:54:42:1b:7e: 93:c8:ea:f3:90:7a:e0:e0:d7:fb:7d:0c:05:87:65:8e:3a:fe: 99:27:3e:86:7b:f6:a7:f5:92:2e:24:86:b9:f3:3a:ee:65:8b: 18:0f:4f:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjYwNDIwMjE1OTAyWhcNMjYwNDI3MjE1OTAyWjAYMRYwFAYD VQQDEw02OWU2YTFhNy0yZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRcjhPwr6XLzW+KCYtWEcmIq/pGA2slyAaovQuL5odPTxXmOWoePUyctLaZi /A/gOY71jwADTG48329ti50hp25eKbhWcXH7lxV3Y6K6D5qSIw6tEWiJMGGxikvm KaspinCGri9I5A26P7AHtm1LG9+R/yzZjQVW1i7UCq3lm1UptWo3OxnHglzZtxL6 n8Pw/XyfqS7Mrz/S3G475dCjUi1PLEyyJRNuVuz0EbQJPX8S52UIvwW4hHW4AQqI vEqMXgYvS7bWYIvGKs3n2YsGefwF43E6qzBd3FDUX4+ZobuxVD+ETtbOSklGfstP txRhpIT0eoJow07S9/HzFr88swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjz4E8n Ut5crsmWjLuQCq6pwG7YMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADg87Y5vIs1GMpe6kJ+rfVsA48BfSKcOFiQiPoQPFuQuXyUHG3m14FIRTLCep uuUwk+jOMVim9n77BE9fjp1VR/qIT5WlEN9RNO+f25ZFr4nKIYOpRvrJ0tUf8Wbe pGoMZbCnbEu1jYtClR0l5HKEnNc7II/lYHcBqhKlWMtnmd56ort20FiuHrkT1wEj jggJCpRVpK4wxNxBiBAsBZ8Ku/YcQl06ft40OfMbbda7wH4piBkX84RAJnmIbjMl MygxuL3+86OSFYRHxBzNNu/B6ufm0EdUQht+k8jq85B64ODX+30MBYdljjr+mSc+ hnv2p/WSLiSGufM67mWLGA9PEQ== -----END CERTIFICATE-----Generated at Wed Apr 22 01:46:13 2026 by rpki-client