$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: JfxeMk0TbS5OdulEyFW8jDq5h8n1YqdiCxzw/zYsxgs= Subject key identifier: A8:B8:CE:7B:F9:79:48:59:CB:2F:38:D4:63:35:02:D1:CD:04:49:F4 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 08D5 Signing time: Sun 26 Apr 2026 20:26:09 +0000 Manifest this update: Sun 26 Apr 2026 20:26:08 +0000 Manifest next update: Sun 03 May 2026 20:26:08 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: FmPSz1KwFkgYFqtm67uhABdLy98vyHX0jKLZ73Tzwus=) 2: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=) 3: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=) 4: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=) 5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=) 7: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=) 8: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Apr 26 20:26:08 2026 GMT Not After : May 3 20:26:08 2026 GMT Subject: CN=69ee74e1-a472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:92:51:c2:cc:2d:17:99:fb:33:70:07:c5: 22:f5:1c:f2:9e:31:4f:c6:a8:a8:f1:e3:11:00:e4: d9:49:51:ad:08:dd:1e:23:86:b1:c2:03:1f:ae:90: 57:82:1c:dd:c0:09:31:ae:3f:9b:7d:d2:c9:35:95: 52:be:18:d8:c7:0d:c6:a2:7d:d0:77:5d:cd:c0:df: ba:9f:de:76:01:57:c1:e1:53:d9:85:bb:19:5a:46: 70:bc:f2:b6:5f:ad:d1:77:da:7f:d5:a3:e2:9f:81: f5:bc:d1:50:b2:62:2f:df:fc:b6:61:68:d0:28:6b: b3:a8:b1:fd:c7:5a:dc:e2:7e:91:d0:08:a8:dd:a8: 56:73:b5:8b:bc:c9:58:e5:17:2a:6e:0f:18:1a:11: 71:9d:ee:06:9b:03:82:f7:8c:e2:81:9c:19:1d:c8: 78:e1:a1:53:7d:26:2a:68:1d:b2:89:f9:ae:93:95: 3a:a0:4f:76:1e:2b:fb:4f:98:be:2b:85:4a:30:c0: fe:7d:1c:d8:ae:61:45:bd:8a:1e:0a:5f:f8:bd:e2: 1a:c1:9d:f0:0a:1f:d6:3c:bd:0f:63:d3:94:e5:06: 60:2f:b6:bb:1c:29:b1:5e:2d:56:bd:ef:26:34:1b: 25:8f:99:d6:b6:10:09:77:7a:33:f0:88:8a:39:23: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B8:CE:7B:F9:79:48:59:CB:2F:38:D4:63:35:02:D1:CD:04:49:F4 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:29:07:aa:c8:73:1f:09:9a:bc:46:b3:f0:72:79:d3:09:32: 25:1f:a8:8c:f2:26:c5:e8:4e:de:51:a9:9b:db:e0:ff:5b:11: 26:c2:bc:46:b7:e3:3a:e0:ac:93:87:b7:e8:d2:64:20:a6:bd: 92:1b:b3:7d:5f:e3:d7:49:df:84:92:61:a5:9d:18:4d:4c:46: 3f:ac:d4:25:4c:73:ac:95:d0:2b:ea:99:7e:d3:2a:33:8b:dc: 8b:be:39:4e:af:f3:c1:db:5d:5a:5e:a1:17:c9:4b:c0:cf:ed: ff:26:6c:0e:98:0c:f7:f0:91:15:91:a3:8a:61:e8:48:cc:1a: 36:b4:0c:2d:eb:0f:9d:68:5b:0e:8f:50:cb:a8:eb:9e:50:dc: 32:cd:2a:f8:30:74:db:d4:ed:7d:e3:3c:53:24:2d:18:07:e1: a3:a9:69:9b:4f:55:51:39:e2:f6:b3:d7:20:eb:fc:bd:b9:5d: cb:ce:60:94:04:0a:7a:06:78:04:36:cc:1a:e6:d3:04:b2:de: 8e:31:c9:3a:76:1a:57:3f:cd:1c:c5:fe:fd:97:aa:c9:08:87: 37:1c:00:29:44:36:85:db:e5:76:c2:25:cd:10:41:2e:a7:6b: 0a:47:95:eb:2e:e1:ff:62:71:83:db:05:6e:c6:eb:4c:5e:8e: 1b:60:be:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwNDI2MjAyNjA4WhcNMjYwNTAzMjAyNjA4WjAYMRYwFAYD VQQDEw02OWVlNzRlMS1hNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y+SUcLMLReZ+zNwB8Ui9RzynjFPxqio8eMRAOTZSVGtCN0eI4axwgMfrpBX ghzdwAkxrj+bfdLJNZVSvhjYxw3Gon3Qd13NwN+6n952AVfB4VPZhbsZWkZwvPK2 X63Rd9p/1aPin4H1vNFQsmIv3/y2YWjQKGuzqLH9x1rc4n6R0Aio3ahWc7WLvMlY 5Rcqbg8YGhFxne4GmwOC94zigZwZHch44aFTfSYqaB2yifmuk5U6oE92Hiv7T5i+ K4VKMMD+fRzYrmFFvYoeCl/4veIawZ3wCh/WPL0PY9OU5QZgL7a7HCmxXi1Wve8m NBslj5nWthAJd3oz8IiKOSNlywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKi4znv5 eUhZyy841GM1AtHNBEn0MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEikHqshzHwmavEaz8HJ50wkyJR+ojPImxehO3lGpm9vg/1sRJsK8RrfjOuCs k4e36NJkIKa9khuzfV/j10nfhJJhpZ0YTUxGP6zUJUxzrJXQK+qZftMqM4vci745 Tq/zwdtdWl6hF8lLwM/t/yZsDpgM9/CRFZGjimHoSMwaNrQMLesPnWhbDo9Qy6jr nlDcMs0q+DB029TtfeM8UyQtGAfho6lpm09VUTni9rPXIOv8vbldy85glAQKegZ4 BDbMGubTBLLejjHJOnYaVz/NHMX+/ZeqyQiHNxwAKUQ2hdvldsIlzRBBLqdrCkeV 6y7h/2Jxg9sFbsbrTF6OG2C+Yg== -----END CERTIFICATE-----Generated at Mon Apr 27 21:05:41 2026 by rpki-client