$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: BNkzaDUghsBw0RLoepmXckRfUYP79OSugWOPXCXMkms= Subject key identifier: A4:A6:3E:7F:34:71:06:61:67:12:A2:CF:27:72:1D:97:3C:FC:DC:5C Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: 013E Signing time: Fri 17 Apr 2026 05:04:59 +0000 Manifest this update: Fri 17 Apr 2026 05:04:59 +0000 Manifest next update: Fri 24 Apr 2026 05:04:59 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: wVfQCc86iSWdKacP6ltCftdzOfoNEP7uzsOL0dNpF4w=) 2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: EDFQEdiEmOIwcAFLSsj8eYAZyjqk/sVRS9qA9gJE9Ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Apr 17 05:04:59 2026 GMT Not After : Apr 24 05:04:59 2026 GMT Subject: CN=69e1bf7b-bd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:88:39:da:3f:85:53:35:ad:31:12:90:5c: 51:a9:ca:41:e2:ac:27:8e:2c:7f:da:ee:12:2c:14: 6d:4f:f8:ca:9a:b2:a2:ce:a3:e7:c9:ae:d3:91:31: b7:b2:3d:a7:8f:18:03:06:3a:51:c9:24:a2:29:d4: 8b:b2:63:6d:d9:0a:6e:1f:85:e7:a2:73:d0:79:eb: cf:e9:6a:8f:40:be:83:83:a6:ca:4d:80:b7:5a:1b: cf:9f:7f:64:f6:7e:33:8e:cf:a6:b0:e6:2b:f3:36: 76:fe:dd:e3:37:a4:b7:21:04:d6:b6:15:b0:05:42: 95:29:88:7b:24:1a:fa:87:5b:04:fe:e8:2f:38:01: ea:fb:67:50:8d:fb:72:c6:10:21:2c:9d:5c:76:6e: 40:d0:01:a1:de:b0:96:0a:6e:14:c7:5c:c1:9b:5b: 4c:27:5b:0b:b5:5e:ed:05:96:5a:33:7c:01:8a:ba: e5:4d:09:b6:28:a3:65:54:1a:f2:2e:42:d6:f0:77: 3b:98:23:ad:e1:0e:e0:43:f6:54:2d:46:f5:8e:4d: 50:ee:16:dd:c1:53:5e:7e:c0:c9:2e:58:b7:49:d7: 0f:19:10:ff:6e:e8:37:a1:82:c3:fc:3c:01:cb:aa: a6:c7:70:6d:56:fa:59:ad:d6:7a:f9:ab:fc:90:c9: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:3E:7F:34:71:06:61:67:12:A2:CF:27:72:1D:97:3C:FC:DC:5C X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b9:30:0b:dc:be:79:98:67:ea:34:9c:4d:7a:50:a7:63:7f: 0e:77:8a:fa:3e:b9:4b:0b:4a:53:a5:df:bc:08:1d:d3:81:8b: 65:28:5d:58:22:f5:1d:69:1c:ee:21:c4:18:d8:e7:02:f1:7f: a4:53:b7:8e:75:df:4b:29:6f:af:37:0a:5e:be:81:33:11:d4: f1:8e:3b:df:7d:10:9f:8b:8b:52:ba:e1:ea:b3:50:29:33:fb: 45:28:87:2c:6b:82:d0:80:0d:28:f4:e9:5a:9d:7b:b9:42:c5: dc:e6:99:08:0d:b2:1d:28:bd:8e:4c:25:ef:48:f5:d2:48:18: 7e:c4:ab:76:28:6b:66:8f:b1:21:00:c1:b3:8d:18:40:88:37: 70:9f:a5:b0:af:f2:77:e0:b4:5c:5a:30:94:de:f6:32:11:90: 90:70:ec:1e:c5:c9:65:68:b8:91:f6:af:be:bb:8d:f6:3a:fd: 01:1c:57:f8:d5:f3:b7:3e:fa:5a:89:29:bd:d4:76:22:2d:4b: c3:4c:2d:ec:de:cc:be:fd:9e:8a:81:1f:90:c9:e8:45:3b:c2: a1:53:5e:35:22:c0:10:eb:88:58:2e:a8:96:c5:98:81:66:c0: 7e:77:aa:95:5f:4d:e9:b1:6a:fa:89:e4:1b:2f:e3:72:18:6b: a1:cd:24:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjYwNDE3MDUwNDU5WhcNMjYwNDI0MDUwNDU5WjAYMRYwFAYD VQQDEw02OWUxYmY3Yi1iZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzomIOdo/hVM1rTESkFxRqcpB4qwnjix/2u4SLBRtT/jKmrKizqPnya7TkTG3 sj2njxgDBjpRySSiKdSLsmNt2QpuH4XnonPQeevP6WqPQL6Dg6bKTYC3WhvPn39k 9n4zjs+msOYr8zZ2/t3jN6S3IQTWthWwBUKVKYh7JBr6h1sE/ugvOAHq+2dQjfty xhAhLJ1cdm5A0AGh3rCWCm4Ux1zBm1tMJ1sLtV7tBZZaM3wBirrlTQm2KKNlVBry LkLW8Hc7mCOt4Q7gQ/ZULUb1jk1Q7hbdwVNefsDJLli3SdcPGRD/bug3oYLD/DwB y6qmx3BtVvpZrdZ6+av8kMmNmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSmPn80 cQZhZxKizydyHZc8/NxcMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLkwC9y+eZhn6jScTXpQp2N/DneK+j65SwtKU6XfvAgd04GLZShdWCL1HWkc 7iHEGNjnAvF/pFO3jnXfSylvrzcKXr6BMxHU8Y47330Qn4uLUrrh6rNQKTP7RSiH LGuC0IANKPTpWp17uULF3OaZCA2yHSi9jkwl70j10kgYfsSrdihrZo+xIQDBs40Y QIg3cJ+lsK/yd+C0XFowlN72MhGQkHDsHsXJZWi4kfavvruN9jr9ARxX+NXztz76 WokpvdR2Ii1Lw0wt7N7Mvv2eioEfkMnoRTvCoVNeNSLAEOuIWC6olsWYgWbAfneq lV9N6bFq+onkGy/jchhroc0k+A== -----END CERTIFICATE-----Generated at Fri Apr 17 18:44:39 2026 by rpki-client