$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: RORJ0s84amxxQTr5MQQVUb4Uiem11IE2vk3rWqyxXIc= Subject key identifier: FC:B0:0E:AE:9F:1E:D5:C0:BA:C8:CC:E6:2D:9C:DB:5A:1C:A4:F0:55 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 489F Signing time: Sat 18 Apr 2026 14:21:05 +0000 Manifest this update: Sat 18 Apr 2026 14:21:05 +0000 Manifest next update: Sat 25 Apr 2026 14:21:05 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: UGOz5qUPZzGzeur0qaRIcOs/Bdyzf5Cstso4Jp+R5Hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Apr 18 14:21:05 2026 GMT Not After : Apr 25 14:21:05 2026 GMT Subject: CN=69e39351-c7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:1f:f6:10:20:cb:0a:71:5c:35:a6:21:ea: 74:60:42:f9:3b:a9:0c:92:2d:21:62:24:44:82:1b: 27:3e:80:91:09:df:28:ce:db:50:16:41:6f:9c:5a: 61:80:3e:a1:aa:8a:58:e0:d4:e4:04:6d:42:a4:1d: a7:27:a3:54:20:a4:14:3c:7c:2c:05:2b:01:e1:01: ef:26:b2:e8:17:4c:c6:a9:58:a6:1e:3a:17:8c:dd: f7:76:85:79:23:d0:00:40:2e:fa:0b:74:1c:ae:b6: 5f:e1:cb:ba:74:cc:25:1d:00:1b:25:37:d8:37:4f: 6e:52:53:4b:9e:77:5f:09:07:fc:c6:5e:76:a9:23: 13:57:e3:05:5d:6f:75:15:4c:f7:93:4b:fd:ce:ad: 4a:d9:b8:e5:30:2d:7e:cc:c3:4a:3d:24:ff:54:ad: 7e:1a:a9:ab:96:76:b3:ae:7a:f6:cb:75:1f:1d:5c: c3:ef:21:21:1d:2e:ce:aa:39:0d:9e:d9:17:29:26: 47:c6:2d:78:a5:3f:41:61:19:f5:ab:62:97:bb:26: 85:91:e5:62:cd:43:81:a4:53:6e:2f:5d:5c:30:98: f9:98:53:1a:9e:30:d6:f5:c6:4e:61:28:19:40:c9: c7:7e:ce:c8:3d:b0:57:ce:6b:9b:63:21:ab:61:fd: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B0:0E:AE:9F:1E:D5:C0:BA:C8:CC:E6:2D:9C:DB:5A:1C:A4:F0:55 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a0:5c:40:9b:f5:da:99:fb:67:18:b5:6d:2e:ac:95:fc:2c: 06:67:16:55:3a:3c:ef:97:57:9d:59:4a:35:e3:c3:0a:6e:47: 99:de:94:ed:a7:9d:3b:78:b3:3e:44:8b:ee:03:ab:6e:f0:19: 47:b1:53:81:d9:cf:ac:33:8c:30:09:db:ee:9a:c9:e1:f3:b0: 5e:1e:b7:3e:5c:f7:9f:c0:b0:7b:57:3a:c5:77:4a:b6:c5:38: 20:7a:b6:05:01:77:4d:04:96:7a:8b:3e:8e:76:26:da:d3:34: 20:1e:a9:60:bf:17:30:21:7b:1a:15:5b:2e:41:3d:9a:36:ad: 8a:7d:aa:f1:37:d0:86:1d:78:27:9e:b2:46:8b:ab:8d:15:97: 5c:f3:38:e0:b7:c0:93:b4:5b:ae:f4:42:70:71:c3:a5:36:cb: ff:96:26:4c:5d:2d:42:68:7e:06:aa:f6:f6:94:29:64:08:7d: eb:09:ce:e8:95:5e:dd:8c:9a:b0:35:40:da:c9:c0:a2:bf:8f: fe:a8:66:c9:a7:4a:83:f1:12:68:40:a7:cf:59:74:9b:23:4f: 5d:8f:c3:ba:09:a5:3a:59:8a:35:b2:2e:f6:20:c9:d5:08:86: 9d:9b:53:90:7a:74:b6:bc:19:b6:9b:54:d2:99:b9:fd:77:83: f6:5b:0a:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjYwNDE4MTQyMTA1WhcNMjYwNDI1MTQyMTA1WjAYMRYwFAYD VQQDEw02OWUzOTM1MS1jN2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZcf9hAgywpxXDWmIep0YEL5O6kMki0hYiREghsnPoCRCd8ozttQFkFvnFph gD6hqopY4NTkBG1CpB2nJ6NUIKQUPHwsBSsB4QHvJrLoF0zGqVimHjoXjN33doV5 I9AAQC76C3QcrrZf4cu6dMwlHQAbJTfYN09uUlNLnndfCQf8xl52qSMTV+MFXW91 FUz3k0v9zq1K2bjlMC1+zMNKPST/VK1+Gqmrlnazrnr2y3UfHVzD7yEhHS7OqjkN ntkXKSZHxi14pT9BYRn1q2KXuyaFkeVizUOBpFNuL11cMJj5mFManjDW9cZOYSgZ QMnHfs7IPbBXzmubYyGrYf0mTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPywDq6f HtXAusjM5i2c21ocpPBVMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMaBcQJv12pn7Zxi1bS6slfwsBmcWVTo875dXnVlKNePDCm5Hmd6U7aedO3iz PkSL7gOrbvAZR7FTgdnPrDOMMAnb7prJ4fOwXh63Plz3n8Cwe1c6xXdKtsU4IHq2 BQF3TQSWeos+jnYm2tM0IB6pYL8XMCF7GhVbLkE9mjatin2q8TfQhh14J56yRour jRWXXPM44LfAk7RbrvRCcHHDpTbL/5YmTF0tQmh+Bqr29pQpZAh96wnO6JVe3Yya sDVA2snAor+P/qhmyadKg/ESaECnz1l0myNPXY/DugmlOlmKNbIu9iDJ1QiGnZtT kHp0trwZtptU0pm5/XeD9lsKKQ== -----END CERTIFICATE-----Generated at Sat Apr 18 21:06:57 2026 by rpki-client