$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: jxRJl+oIdl8Fd0oAOJqQ0uj50FpaY9BuQdaMpGavKl4= Subject key identifier: EA:4C:AC:94:65:A5:08:DC:5D:9B:20:DB:9E:40:B2:8A:A9:63:3B:9B Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 01F7 Signing time: Sun 05 Apr 2026 02:47:47 +0000 Manifest this update: Sun 05 Apr 2026 02:47:47 +0000 Manifest next update: Sun 12 Apr 2026 02:47:47 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: WtyWpsDFkjFBHT4W22SwNYJcFsnxzEG3DFmjox7Led0=) 2: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) 3: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Apr 5 02:47:47 2026 GMT Not After : Apr 12 02:47:47 2026 GMT Subject: CN=69d1cd53-5ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d2:1f:3b:0b:cd:1f:ad:57:52:8d:53:69:12: e1:0e:7c:39:d7:36:3b:c7:a2:d0:63:a6:e3:18:31: 15:c6:cf:37:1d:36:b0:43:82:73:9e:5f:65:6d:96: d2:eb:a6:96:54:63:8b:35:48:26:8a:c0:9a:30:f4: 8b:7b:35:c0:3f:89:69:fe:47:d9:86:c7:21:dc:e5: 47:46:54:49:24:cc:6e:ab:db:73:8d:97:3d:7b:7b: 7d:42:2b:cd:ce:ed:f0:c4:2d:3d:25:9f:a3:24:74: 3f:f4:23:3f:57:c8:c8:0e:c1:d4:2d:60:aa:84:f3: 0c:8e:8b:80:5f:af:75:a6:29:bb:b3:d7:a2:91:73: 25:ae:ea:60:d9:62:38:1b:10:f0:b9:64:9d:e0:4b: aa:38:3a:bd:0d:4d:27:02:7e:4c:20:e9:bc:10:b0: 9e:e3:8d:b0:46:71:05:ff:53:0c:c3:21:2a:74:39: 10:ba:7c:da:80:76:cf:c6:a1:4b:c3:cc:4f:cf:41: eb:0e:bb:32:e5:c0:ed:5f:94:3d:9f:55:24:64:03: 5f:76:a3:71:c2:af:df:7e:15:e0:50:4f:b7:8a:8e: be:a1:b9:54:9d:b4:9d:c5:1d:7f:c9:d3:75:d5:0b: b7:a0:fe:78:2f:42:b8:93:a7:2b:f8:c6:84:29:84: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:AC:94:65:A5:08:DC:5D:9B:20:DB:9E:40:B2:8A:A9:63:3B:9B X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:22:17:fd:ff:c9:ea:13:b3:f5:5f:1a:b7:e7:d3:48:9a: 3a:b4:65:7b:15:61:fd:72:26:10:62:9b:58:ab:90:62:73:98: f2:88:90:59:ab:7c:11:b2:8b:a4:6b:94:3f:08:e2:f8:d1:a5: 4a:96:54:2f:52:6a:f3:96:2e:18:4c:a1:93:b7:59:48:44:d3: 07:c3:b3:24:22:26:55:d8:a7:fe:5e:be:b3:61:24:24:b2:55: 16:c2:93:36:4b:76:39:24:6b:99:db:cc:d7:dd:3e:e2:60:6e: f1:be:68:b8:0c:12:8c:35:f4:62:f3:dd:6a:8f:c7:a5:ac:28: 8a:5f:f2:ec:00:19:ac:5b:94:42:5c:94:09:cf:d5:d4:78:1c: 35:e8:7c:a3:07:86:f9:7b:39:0f:a0:dd:97:1b:7c:b4:22:c4: 25:6e:73:ef:e4:a6:31:e7:47:38:37:4d:f4:2e:27:0c:71:09: 64:76:41:a9:66:2f:5f:f4:fc:f4:bd:a7:d8:4c:c3:42:5c:03: 67:dc:d6:a2:a5:21:b0:0a:a2:c6:f1:17:c3:e6:d2:3d:45:2d: 83:f8:b8:0b:ff:4f:f6:6b:68:29:52:bf:e7:ec:f1:39:7c:cb: 47:2f:88:0e:f4:2b:17:42:a1:cd:9b:d0:e4:ea:a8:59:40:cd: c1:07:87:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwNDA1MDI0NzQ3WhcNMjYwNDEyMDI0NzQ3WjAYMRYwFAYD VQQDEw02OWQxY2Q1My01YWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79IfOwvNH61XUo1TaRLhDnw51zY7x6LQY6bjGDEVxs83HTawQ4Jznl9lbZbS 66aWVGOLNUgmisCaMPSLezXAP4lp/kfZhsch3OVHRlRJJMxuq9tzjZc9e3t9QivN zu3wxC09JZ+jJHQ/9CM/V8jIDsHULWCqhPMMjouAX691pim7s9eikXMlrupg2WI4 GxDwuWSd4EuqODq9DU0nAn5MIOm8ELCe442wRnEF/1MMwyEqdDkQunzagHbPxqFL w8xPz0HrDrsy5cDtX5Q9n1UkZANfdqNxwq/ffhXgUE+3io6+oblUnbSdxR1/ydN1 1Qu3oP54L0K4k6cr+MaEKYQqhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpMrJRl pQjcXZsg255AsoqpYzubMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATf8iF/3/yeoTs/VfGrfn00iaOrRlexVh/XImEGKbWKuQYnOY8oiQWat8EbKL pGuUPwji+NGlSpZUL1Jq85YuGEyhk7dZSETTB8OzJCImVdin/l6+s2EkJLJVFsKT Nkt2OSRrmdvM190+4mBu8b5ouAwSjDX0YvPdao/Hpawoil/y7AAZrFuUQlyUCc/V 1HgcNeh8oweG+Xs5D6Ddlxt8tCLEJW5z7+SmMedHODdN9C4nDHEJZHZBqWYvX/T8 9L2n2EzDQlwDZ9zWoqUhsAqixvEXw+bSPUUtg/i4C/9P9mtoKVK/5+zxOXzLRy+I DvQrF0KhzZvQ5OqoWUDNwQeHeQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:50 2026 by rpki-client