$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json) Hash identifier: XVdECWD6lUkEwnPKKID6yr6rZOQ4bB93ZMEMTixwVrA= Subject key identifier: 02:D1:98:9D:E0:5A:7A:F6:BB:12:E7:54:3A:83:22:DB:63:43:FA:69 Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft Manifest number: 65 Signing time: Fri 17 Apr 2026 07:39:21 +0000 Manifest this update: Fri 17 Apr 2026 07:39:21 +0000 Manifest next update: Fri 24 Apr 2026 07:39:21 +0000 Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: kWXNHsDmx8DC0rZ0UcgrxIGhTAr2OcKuh1SoYOz1oXQ=) 2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: r2L+5zqyZ6IXeM2mIQAiI2PNwo+tejqOC0YJpkywEYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Apr 17 07:39:21 2026 GMT Not After : Apr 24 07:39:21 2026 GMT Subject: CN=69e1e3a9-46e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:7d:9a:2c:bb:68:b7:fb:c7:be:b1:4f:22: 17:de:b6:a7:4b:da:94:cf:2f:23:81:12:ba:a6:19: 47:9b:7e:9c:e8:f6:98:e7:a4:db:6e:c0:61:6d:80: f3:55:9d:a3:3c:41:e8:6c:c0:48:9c:77:65:9e:0a: ba:bd:b9:63:77:e8:57:8d:cd:0c:37:dc:40:aa:e5: ad:76:58:9a:0c:7e:0e:6e:14:2d:87:a9:b8:56:85: 57:47:30:c2:85:14:ae:b8:89:57:49:02:37:0c:0e: 11:2a:20:4b:bf:3c:86:bf:4c:9c:58:0e:4f:46:66: f6:77:20:0a:d7:20:12:ff:43:0b:49:b1:e1:37:87: ed:77:12:9a:10:63:60:3c:7a:1c:4c:f6:d7:07:ba: 2a:3a:7a:1a:7c:c7:ea:19:33:0a:33:56:20:f6:98: 54:87:b1:e9:91:a8:a1:25:22:68:c6:80:82:72:9e: 23:ac:4f:b9:55:b9:28:98:00:53:6e:81:5a:51:28: 87:1c:ab:d1:2f:57:b6:ee:e9:67:df:9b:cc:03:f9: ce:af:fa:c2:9b:23:d4:a8:dc:1a:a3:86:f5:d8:1d: 7e:6b:b2:9b:8b:45:ae:cd:38:e7:c1:cf:55:07:de: 8e:9e:c1:da:e3:c5:70:27:bd:e4:0f:0a:de:87:7c: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D1:98:9D:E0:5A:7A:F6:BB:12:E7:54:3A:83:22:DB:63:43:FA:69 X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fa:5e:05:f3:78:44:64:5b:dd:1d:84:99:50:c0:7c:5a:0c: 93:ff:b3:29:a2:b5:a6:bc:b4:c6:76:48:80:5f:ae:64:62:97: 41:ad:06:44:9b:96:ab:a3:50:c7:40:ec:4f:70:78:27:bf:a5: 42:aa:f4:2a:67:11:ed:8d:ac:8c:56:b6:34:4a:39:89:54:a2: 62:08:1a:51:a1:eb:e1:c6:ab:66:ef:93:da:46:aa:c1:74:6b: 76:32:f3:ae:d6:a9:ed:4f:a5:13:70:0c:3b:b9:60:ec:47:85: 96:b2:07:74:03:be:c7:c3:7f:75:2b:6c:7a:3e:9d:b4:7a:a1: 43:53:c4:65:6b:b5:13:7e:2d:e2:23:22:a8:03:32:01:5b:86: 53:b0:f8:79:bf:47:fa:ea:a9:52:45:56:52:96:81:6d:d1:42: c9:17:39:56:34:45:5d:9c:6b:8c:fe:82:89:53:5c:81:d6:b8: a8:c1:6b:ee:1f:05:da:dd:16:65:ff:d4:ae:74:87:f0:bb:1f: 3e:f7:d7:08:e5:af:80:95:44:45:a1:79:43:4d:91:a1:a3:3d: dd:06:68:10:de:6c:08:8b:9b:14:b8:23:ca:31:35:8d:2f:bb: 86:33:1e:26:ba:78:8d:da:a9:45:ea:9d:a7:c2:c4:6c:52:d7: a0:46:62:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoODlCQTkwQ0I3RDQ0MkE4Mzg3QzZBQjkzMDczOENBMjAw RTEzN0JBRDAeFw0yNjA0MTcwNzM5MjFaFw0yNjA0MjQwNzM5MjFaMBgxFjAUBgNV BAMTDTY5ZTFlM2E5LTQ2ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0zH2aLLtot/vHvrFPIhfetqdL2pTPLyOBErqmGUebfpzo9pjnpNtuwGFtgPNV naM8QehswEicd2WeCrq9uWN36FeNzQw33ECq5a12WJoMfg5uFC2HqbhWhVdHMMKF FK64iVdJAjcMDhEqIEu/PIa/TJxYDk9GZvZ3IArXIBL/QwtJseE3h+13EpoQY2A8 ehxM9tcHuio6ehp8x+oZMwozViD2mFSHsemRqKElImjGgIJyniOsT7lVuSiYAFNu gVpRKIccq9EvV7bu6Wffm8wD+c6v+sKbI9So3BqjhvXYHX5rspuLRa7NOOfBz1UH 3o6ewdrjxXAnveQPCt6HfB2xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAtGYneBa eva7EudUOoMi22ND+mkwHwYDVR0jBBgwFoAUibqQy31EKoOHxquTBzjKIA4Te60w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzM1NUJFQzg2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWJxUXkzMUVLb09IeHF1VEJ6aktJQTRUZTYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzM1NUJFQzg2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29P SHhxdVRCempLSUE0VGU2MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAW+l4F83hEZFvdHYSZUMB8WgyT/7MporWmvLTGdkiAX65kYpdBrQZEm5aro1DH QOxPcHgnv6VCqvQqZxHtjayMVrY0SjmJVKJiCBpRoevhxqtm75PaRqrBdGt2MvOu 1qntT6UTcAw7uWDsR4WWsgd0A77Hw391K2x6Pp20eqFDU8Rla7UTfi3iIyKoAzIB W4ZTsPh5v0f66qlSRVZSloFt0ULJFzlWNEVdnGuM/oKJU1yB1riowWvuHwXa3RZl /9SudIfwux8+99cI5a+AlURFoXlDTZGhoz3dBmgQ3mwIi5sUuCPKMTWNL7uGMx4m uniN2qlF6p2nwsRsUtegRmKd -----END CERTIFICATE-----Generated at Sat Apr 18 21:07:00 2026 by rpki-client