$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json) Hash identifier: JxHqSL9lKxRVSTL4pq23j7C15PICa/CG96r4Jzw6Qdg= Subject key identifier: 6C:22:F4:3B:8D:57:FE:46:4D:CB:5D:EF:FD:77:86:36:B0:B3:53:23 Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft Manifest number: 0699 Signing time: Sat 04 Apr 2026 23:57:01 +0000 Manifest this update: Sat 04 Apr 2026 23:57:01 +0000 Manifest next update: Sat 11 Apr 2026 23:57:01 +0000 Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: hSwwjvwv137JMKWzViPC6aooolMF5GdcMQ/u7fn9SwI=) 2: C7492CAEFB5D11F0B51531C0496F56BC.roa (hash: Cu6/ZN4pLVVwgFBXhJX48sJtoPNZuRZAmRy+tg9HKHM=) 3: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: Apr 4 23:57:01 2026 GMT Not After : Apr 11 23:57:01 2026 GMT Subject: CN=69d1a54d-3f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:04:9b:b7:f4:bb:ca:c4:0b:6f:99:7f:39: 48:aa:34:1e:8b:6a:f4:b2:fd:f1:6b:df:d8:08:a1: 27:03:0c:10:06:0d:9d:80:b3:40:0a:f3:32:ad:08: 3a:53:29:d5:16:4e:60:28:c7:e8:8f:76:8a:62:cb: 90:4e:c1:94:45:30:8c:c2:46:21:84:98:2e:11:46: 1f:1f:eb:ea:ce:33:6f:72:e1:49:c5:eb:be:d9:6b: 29:5f:3b:d7:4f:ec:1f:9f:4e:7f:5d:bd:68:45:20: d1:c8:ef:d2:07:9b:e4:98:35:3c:f2:52:0f:1c:d5: fa:90:99:b5:3d:cb:67:e2:98:5f:5c:9e:b2:f1:5e: 75:d3:d1:6d:d5:cf:07:43:8b:58:93:97:db:24:d7: 19:89:37:67:d0:73:3a:46:e3:f0:89:0b:a2:5e:49: 3d:6f:26:d8:ef:e2:f0:8b:d1:1e:78:a1:00:0b:bf: a6:92:5f:84:7f:19:0d:98:85:43:87:5d:18:15:91: 00:3e:ed:5c:8a:0b:fe:57:89:9b:e1:80:d0:72:12: cf:9f:ff:95:24:2c:98:d4:81:0a:49:49:22:2d:6b: cf:21:78:5b:cc:91:6a:8e:90:8d:30:87:52:60:84: d0:30:0d:85:f6:da:3f:89:62:2d:e2:28:7f:b5:3c: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:22:F4:3B:8D:57:FE:46:4D:CB:5D:EF:FD:77:86:36:B0:B3:53:23 X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5e:6a:06:63:07:e0:ec:b4:42:95:ee:68:ec:10:0a:d2:e4: 83:9a:e8:82:7d:7e:82:ad:83:88:ac:c9:3d:f7:cc:9d:65:b8: 60:d4:9d:1a:03:48:bc:f2:70:d3:1d:b5:ff:9c:9f:af:8f:ec: c5:92:31:26:ee:b3:4c:bd:58:10:a6:6a:14:83:84:1f:4c:a5: 4a:64:1c:2c:79:a8:66:8e:71:16:98:35:9a:ef:38:20:19:f2: e3:fb:4f:45:dc:85:77:6b:fa:97:46:28:63:02:ad:2c:38:36: 7f:b8:45:d1:36:d7:20:c0:6a:13:99:23:c8:f1:1d:28:02:db: da:02:01:6b:a8:59:f6:29:18:37:d6:30:3f:1e:7d:e5:84:1f: 5d:79:98:9b:4d:55:26:dc:24:21:8f:e3:56:05:c2:93:8a:2b: e4:93:3b:48:ab:14:f3:e6:a0:58:8f:73:fe:dd:87:6b:16:2b: 36:4d:31:2b:17:b2:53:bb:2d:65:81:4d:60:f3:ac:16:23:df: f7:6e:68:03:c7:9f:93:92:98:15:fa:38:76:e3:90:c7:a6:78: 8d:49:a6:10:3d:ed:57:b6:d9:ed:54:04:1f:80:6d:4c:76:72: 76:9d:d0:e1:52:2c:19:56:9c:7e:b2:94:c5:18:6d:89:1f:9f: fd:ef:5e:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjYwNDA0MjM1NzAxWhcNMjYwNDExMjM1NzAxWjAYMRYwFAYD VQQDEw02OWQxYTU0ZC0zZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNAEm7f0u8rEC2+ZfzlIqjQei2r0sv3xa9/YCKEnAwwQBg2dgLNACvMyrQg6 UynVFk5gKMfoj3aKYsuQTsGURTCMwkYhhJguEUYfH+vqzjNvcuFJxeu+2WspXzvX T+wfn05/Xb1oRSDRyO/SB5vkmDU88lIPHNX6kJm1Pctn4phfXJ6y8V5109Ft1c8H Q4tYk5fbJNcZiTdn0HM6RuPwiQuiXkk9bybY7+Lwi9EeeKEAC7+mkl+EfxkNmIVD h10YFZEAPu1cigv+V4mb4YDQchLPn/+VJCyY1IEKSUkiLWvPIXhbzJFqjpCNMIdS YITQMA2F9to/iWIt4ih/tTyvzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwi9DuN V/5GTctd7/13hjaws1MjMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0 c25xRzM1aWFkVXYxY20zWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtl5qBmMH4Oy0QpXuaOwQCtLkg5rogn1+gq2DiKzJPffMnWW4YNSdGgNIvPJw 0x21/5yfr4/sxZIxJu6zTL1YEKZqFIOEH0ylSmQcLHmoZo5xFpg1mu84IBny4/tP RdyFd2v6l0YoYwKtLDg2f7hF0TbXIMBqE5kjyPEdKALb2gIBa6hZ9ikYN9YwPx59 5YQfXXmYm01VJtwkIY/jVgXCk4or5JM7SKsU8+agWI9z/t2HaxYrNk0xKxeyU7st ZYFNYPOsFiPf925oA8efk5KYFfo4duOQx6Z4jUmmED3tV7bZ7VQEH4BtTHZydp3Q 4VIsGVacfrKUxRhtiR+f/e9eCw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:09 2026 by rpki-client