$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: POyzTZ//pxUezgLbdpBSu5Wpc+b0CCNwKJBITUC3Oyk= Subject key identifier: 78:8E:E7:1C:0D:59:C7:49:6C:C3:B0:D5:65:83:6C:3E:F4:27:CF:3C Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 01ED Signing time: Fri 17 Apr 2026 03:03:26 +0000 Manifest this update: Fri 17 Apr 2026 03:03:26 +0000 Manifest next update: Fri 24 Apr 2026 03:03:26 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: umt8VLs6Tk9PT531FHcyBbncf8D7pGxUExYnB3ah+BI=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Apr 17 03:03:26 2026 GMT Not After : Apr 24 03:03:26 2026 GMT Subject: CN=69e1a2fe-58c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:82:43:06:05:2d:17:ee:a3:f0:56:2e:9e: 43:a0:cf:83:03:dc:31:9d:75:71:f0:6c:ea:04:58: ce:d5:78:7c:78:f9:1c:af:c7:18:ce:a2:8c:3c:ae: 27:5d:d2:d9:a7:2b:08:70:a5:96:1d:e4:0a:ce:d0: 71:db:10:39:a3:cc:d6:86:41:79:26:f7:ff:ea:ae: 8f:dd:9a:2e:5a:76:1a:cc:6b:7e:e1:45:31:64:3f: 13:d7:5b:a3:ad:40:cc:9e:68:4f:e0:89:e3:4f:00: 1c:78:c3:b0:66:3e:2c:dd:66:48:fa:2b:75:c8:58: 77:d1:6f:57:70:ed:aa:7f:f4:b0:d6:ec:88:f9:cd: f9:64:eb:e9:b9:a0:3b:10:d1:e5:c2:8e:17:54:c6: 07:13:0a:f5:ca:7b:ea:f5:1c:76:ec:87:14:e6:c1: ec:87:35:8f:fb:9d:b4:cd:e9:6f:27:b7:e2:84:b5: bd:f2:ff:d0:3a:59:27:53:1a:70:46:80:2b:7e:58: 96:ea:66:9e:40:b6:2c:20:cd:bc:ed:29:fe:ee:97: 86:f8:ca:42:ae:1b:13:88:1f:fb:ef:d2:e6:bb:8e: fb:db:ae:d0:35:12:20:62:32:e6:43:55:eb:73:6f: d2:f9:ee:3e:c0:50:e4:94:6b:92:25:5d:72:9a:0e: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:E7:1C:0D:59:C7:49:6C:C3:B0:D5:65:83:6C:3E:F4:27:CF:3C X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0c:da:2b:33:d5:c4:14:24:72:d2:79:59:25:97:c9:e7:fb: ff:fb:bd:1a:dd:1b:86:8f:83:0f:08:37:b5:80:bc:80:55:b5: ca:7a:b6:2f:dd:59:23:b1:4f:52:ca:30:c3:c5:f6:85:bc:af: e4:c3:5b:6a:4c:48:2a:97:01:71:8c:6b:33:2c:f4:d7:fe:13: a0:a6:e6:49:ba:d3:58:09:1c:73:37:12:fe:ab:5c:02:08:8f: 56:d9:1c:bb:77:11:ca:8c:65:b3:f6:ee:91:aa:50:4e:31:cf: a3:fa:69:f7:8e:b6:5a:0b:5f:ea:d2:65:e5:69:23:1b:27:3b: 8d:ee:fc:0a:b9:06:ad:d4:54:44:f2:71:3c:61:d7:ab:2e:24: 48:ca:05:72:7c:a6:6a:7b:b4:f6:ee:1c:36:6c:a6:0d:0b:ba: 30:a1:24:6d:be:5c:fb:48:c2:e5:40:76:ac:cf:37:f2:8e:7f: 92:92:9c:9d:a5:5b:b8:d3:b9:d7:ca:b3:66:25:4d:3f:d5:2a: 41:93:09:b9:09:a8:2b:86:43:25:25:8c:fa:8a:f3:c7:b5:69: 98:a9:13:5a:71:34:15:6f:c4:48:ba:49:f7:18:db:e8:4a:90: 45:c5:5e:15:b2:77:b8:a9:2e:d2:4f:de:86:21:4a:3b:22:43: 1d:ff:f6:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjYwNDE3MDMwMzI2WhcNMjYwNDI0MDMwMzI2WjAYMRYwFAYD VQQDEw02OWUxYTJmZS01OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva+CQwYFLRfuo/BWLp5DoM+DA9wxnXVx8GzqBFjO1Xh8ePkcr8cYzqKMPK4n XdLZpysIcKWWHeQKztBx2xA5o8zWhkF5Jvf/6q6P3ZouWnYazGt+4UUxZD8T11uj rUDMnmhP4InjTwAceMOwZj4s3WZI+it1yFh30W9XcO2qf/Sw1uyI+c35ZOvpuaA7 ENHlwo4XVMYHEwr1ynvq9Rx27IcU5sHshzWP+520zelvJ7fihLW98v/QOlknUxpw RoArfliW6maeQLYsIM287Sn+7peG+MpCrhsTiB/779Lmu477267QNRIgYjLmQ1Xr c2/S+e4+wFDklGuSJV1ymg52fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiO5xwN WcdJbMOw1WWDbD70J888MB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQgzaKzPVxBQkctJ5WSWXyef7//u9Gt0bho+DDwg3tYC8gFW1ynq2L91ZI7FP Usoww8X2hbyv5MNbakxIKpcBcYxrMyz01/4ToKbmSbrTWAkcczcS/qtcAgiPVtkc u3cRyoxls/bukapQTjHPo/pp9462Wgtf6tJl5WkjGyc7je78CrkGrdRURPJxPGHX qy4kSMoFcnymanu09u4cNmymDQu6MKEkbb5c+0jC5UB2rM838o5/kpKcnaVbuNO5 18qzZiVNP9UqQZMJuQmoK4ZDJSWM+orzx7VpmKkTWnE0FW/ESLpJ9xjb6EqQRcVe FbJ3uKku0k/ehiFKOyJDHf/2kA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:26:29 2026 by rpki-client