$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: UGZ1qWcdT/vcfy0XegnrLXEo3rUVhYcmTrPeL/J4mo0= Subject key identifier: 07:4B:01:AF:DA:05:D4:DF:AD:30:3A:FA:84:96:E8:07:6D:37:40:0F Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 199F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 198F Signing time: Sat 04 Apr 2026 16:18:47 +0000 Manifest this update: Sat 04 Apr 2026 16:18:47 +0000 Manifest next update: Sat 11 Apr 2026 16:18:47 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: dap2fPBes8JSXtP2qpEUJGg6G3JLudoPRxS3APq+abo=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: sk/aWgMAKHJV+S5wciXhAIcHYQF2Px3Gvke4ka59rbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6559 (0x199f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Apr 4 16:18:47 2026 GMT Not After : Apr 11 16:18:47 2026 GMT Subject: CN=69d139e7-e101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:3f:7f:a3:5d:01:1b:21:48:73:0e:1e:03: 89:d8:4a:7b:b3:75:44:8e:22:4e:ef:bc:df:e2:c2: 31:52:ff:2f:8b:50:b0:f2:ee:c6:b0:2b:8f:15:ad: 74:c6:e2:df:4e:c6:fb:26:81:85:d4:88:fc:fe:e3: ac:5c:ce:b3:97:04:da:55:a0:05:05:de:80:73:5e: c3:aa:3a:a7:29:52:c6:ff:d1:1e:87:ea:a2:5b:1f: 60:8e:b4:96:b1:b2:54:c9:a5:5a:d2:9d:06:88:95: fd:76:7a:1e:8f:d9:6a:ce:f7:59:17:96:e5:34:2b: ef:b0:d5:10:c5:69:7c:10:2b:2e:0c:1a:34:a8:b6: ab:44:3e:b7:57:bd:b9:b5:f4:78:cb:3d:0f:c0:9e: f4:0d:ce:13:30:a9:35:50:4e:ce:00:dd:e7:97:f6: 04:80:b5:1c:8a:89:d1:ea:9f:23:fa:01:51:e3:f3: a4:e7:01:e7:f5:99:61:33:47:dd:5f:17:55:59:55: b1:97:1d:f3:d5:1e:91:0a:84:a0:3c:da:4b:1a:28: c8:11:9f:4e:7e:ee:c3:0e:d8:4f:cc:5e:08:48:5a: d2:8e:f7:b1:be:b2:ed:13:a2:10:55:f6:72:90:b7: 18:24:04:e8:4d:09:eb:77:9f:af:10:e6:06:cf:5f: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4B:01:AF:DA:05:D4:DF:AD:30:3A:FA:84:96:E8:07:6D:37:40:0F X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:87:b1:f8:49:af:8f:c7:6b:af:ba:7a:01:db:68:c0:d5:13: 99:2f:0d:1f:74:b7:a5:ad:d7:db:83:a9:26:c2:9c:47:59:5f: 80:b6:3e:81:d2:37:d2:47:06:a4:74:85:21:5c:ec:b6:08:73: 1f:0c:bf:c0:7f:af:21:76:b4:c3:01:80:b9:57:ec:27:ed:27: 49:12:fc:dc:e6:b0:9f:fe:83:26:e6:a5:55:9b:b9:c1:d7:d7: 89:92:78:33:4a:60:70:75:4e:93:f9:fb:22:57:2d:3f:4e:09: 31:6b:b5:15:6d:b8:5c:86:4f:01:92:e1:59:a5:8f:5b:dd:73: c7:63:ee:33:14:74:58:32:90:af:2e:65:8a:56:9f:c0:c0:f7: 4c:f5:00:a8:62:24:66:41:bc:b9:43:71:c0:24:28:ee:28:51: 25:0b:9e:2e:d7:b6:a7:e3:9b:14:05:c8:a1:d3:ff:76:7b:24: 9e:2e:90:61:1d:74:61:73:d9:64:4a:24:f8:a3:21:a0:d7:67: a2:c3:fa:18:9a:b3:a9:fe:1c:29:4d:3c:0f:a4:63:b1:10:3e: 23:7a:f0:50:bd:20:f2:3f:51:3a:1f:35:59:4f:b7:bd:cb:cc: b5:1f:c6:cb:60:24:5f:42:79:e5:54:de:a2:76:41:c9:40:0b: f4:39:0a:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYwNDA0MTYxODQ3WhcNMjYwNDExMTYxODQ3WjAYMRYwFAYD VQQDEw02OWQxMzllNy1lMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpI/f6NdARshSHMOHgOJ2Ep7s3VEjiJO77zf4sIxUv8vi1Cw8u7GsCuPFa10 xuLfTsb7JoGF1Ij8/uOsXM6zlwTaVaAFBd6Ac17DqjqnKVLG/9Eeh+qiWx9gjrSW sbJUyaVa0p0GiJX9dnoej9lqzvdZF5blNCvvsNUQxWl8ECsuDBo0qLarRD63V725 tfR4yz0PwJ70Dc4TMKk1UE7OAN3nl/YEgLUcionR6p8j+gFR4/Ok5wHn9ZlhM0fd XxdVWVWxlx3z1R6RCoSgPNpLGijIEZ9Ofu7DDthPzF4ISFrSjvexvrLtE6IQVfZy kLcYJAToTQnrd5+vEOYGz1/BbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdLAa/a BdTfrTA6+oSW6AdtN0APMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJIex+Emvj8drr7p6AdtowNUTmS8NH3S3pa3X24OpJsKcR1lfgLY+gdI30kcG pHSFIVzstghzHwy/wH+vIXa0wwGAuVfsJ+0nSRL83Oawn/6DJualVZu5wdfXiZJ4 M0pgcHVOk/n7IlctP04JMWu1FW24XIZPAZLhWaWPW91zx2PuMxR0WDKQry5lilaf wMD3TPUAqGIkZkG8uUNxwCQo7ihRJQueLte2p+ObFAXIodP/dnskni6QYR10YXPZ ZEok+KMhoNdnosP6GJqzqf4cKU08D6RjsRA+I3rwUL0g8j9ROh81WU+3vcvMtR/G y2AkX0J55VTeonZByUAL9DkKEg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:38 2026 by rpki-client