$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: hu8yDTDoJIFyKYMfzT6wN838JzHALPVVO1auv0oTLbA= Subject key identifier: B0:EB:21:2F:50:8C:58:05:D7:CA:8E:02:FE:A0:A7:22:60:27:08:0D Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 0888 Signing time: Thu 16 Apr 2026 20:29:17 +0000 Manifest this update: Thu 16 Apr 2026 20:29:17 +0000 Manifest next update: Thu 23 Apr 2026 20:29:17 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: IGOuqV+d5S2CWcsM7uOKdy83WzFFuUZDvgPJyZ2Mrsk=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: vSMN7vA21QMy33UvTehc2BTEz+FGmUIUxczcI5GCg3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Apr 16 20:29:17 2026 GMT Not After : Apr 23 20:29:17 2026 GMT Subject: CN=69e1469d-5693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:ee:69:05:40:89:a3:26:8a:8d:40:26:b7: 86:1b:f5:83:8e:78:6c:30:a2:e4:52:f5:47:6c:0b: 6a:d5:fe:9d:f0:26:bb:df:75:21:0c:66:71:b6:6c: 26:b7:35:3b:11:04:d7:6c:ed:03:22:1d:1b:92:ae: b8:05:81:fe:68:c3:22:d7:bc:32:d7:3d:fd:7b:80: db:54:8b:3f:7b:8a:38:6c:e6:58:44:90:dc:9b:a3: f1:59:10:5c:b3:08:49:55:c5:0e:d7:74:a0:4e:fc: 18:bc:a9:70:52:b2:71:76:5a:73:2e:02:3e:c8:45: 2c:aa:2a:16:24:73:f1:2c:68:59:d9:48:f0:d3:1a: 32:d2:06:c9:2c:fe:e9:67:33:2c:a2:04:52:8b:86: 1a:1e:73:ba:f9:d7:1c:11:7a:37:6b:e9:52:92:97: bb:1f:53:ec:4d:79:d9:a5:a3:02:42:3a:40:f3:e4: 6a:60:18:76:bd:e6:85:d1:36:bc:b3:b5:4d:dd:0f: c9:39:28:d4:80:37:3e:68:fd:66:70:47:ed:58:29: 27:a0:7c:55:ff:21:5c:73:be:ba:ef:25:bf:c7:04: 97:04:3d:19:c5:8e:96:57:30:31:ae:3c:07:d6:23: 41:b0:c7:5f:f7:55:1a:a0:a3:6b:0e:dc:fe:e9:08: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EB:21:2F:50:8C:58:05:D7:CA:8E:02:FE:A0:A7:22:60:27:08:0D X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4c:47:ed:f9:d8:ef:43:98:9b:64:62:f7:43:7a:b5:20:db: 49:1b:59:b0:cf:ea:5c:a5:0f:4f:9d:d4:b9:ad:3b:db:b0:82: 10:91:24:68:1b:2a:14:89:5b:fc:dd:f4:40:ba:f8:a0:5d:12: fa:31:b5:03:70:42:ae:ac:96:a0:eb:22:02:ad:91:e0:a5:5e: ec:3a:99:78:0b:fc:51:56:8b:6c:74:ab:49:1a:38:eb:28:d2: cf:6d:2c:4e:a7:89:38:f5:48:3a:fa:6b:ad:e4:be:33:72:66: 7a:3e:41:04:ae:e2:57:c6:04:78:7e:56:2e:e9:cd:17:63:9e: 10:86:c5:e3:9c:df:10:fc:da:5a:55:ec:4e:09:57:c2:a6:5d: 40:f4:4a:05:08:5c:46:90:75:f5:86:5b:18:05:67:09:a3:1d: 31:99:ed:be:dc:54:52:2c:fe:03:69:98:01:c6:1b:90:4a:65: 62:a3:a5:b0:1b:9d:65:dd:f0:ad:2e:1d:76:68:8b:17:3b:f1: 66:b8:eb:1f:ca:a6:14:3e:2b:da:27:41:64:de:29:34:95:c1: 6a:53:f6:63:27:f0:aa:08:4f:20:bf:11:18:51:fb:40:50:9c: d4:d6:dd:91:2b:ee:bc:6d:f2:d5:33:3e:42:51:be:b7:20:a4: 0e:b4:38:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjYwNDE2MjAyOTE3WhcNMjYwNDIzMjAyOTE3WjAYMRYwFAYD VQQDEw02OWUxNDY5ZC01NjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYjuaQVAiaMmio1AJreGG/WDjnhsMKLkUvVHbAtq1f6d8Ca733UhDGZxtmwm tzU7EQTXbO0DIh0bkq64BYH+aMMi17wy1z39e4DbVIs/e4o4bOZYRJDcm6PxWRBc swhJVcUO13SgTvwYvKlwUrJxdlpzLgI+yEUsqioWJHPxLGhZ2Ujw0xoy0gbJLP7p ZzMsogRSi4YaHnO6+dccEXo3a+lSkpe7H1PsTXnZpaMCQjpA8+RqYBh2veaF0Ta8 s7VN3Q/JOSjUgDc+aP1mcEftWCknoHxV/yFcc7667yW/xwSXBD0ZxY6WVzAxrjwH 1iNBsMdf91UaoKNrDtz+6QjRgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDrIS9Q jFgF18qOAv6gpyJgJwgNMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArUxH7fnY70OYm2Ri90N6tSDbSRtZsM/qXKUPT53Uua0727CCEJEkaBsqFIlb /N30QLr4oF0S+jG1A3BCrqyWoOsiAq2R4KVe7DqZeAv8UVaLbHSrSRo46yjSz20s TqeJOPVIOvprreS+M3Jmej5BBK7iV8YEeH5WLunNF2OeEIbF45zfEPzaWlXsTglX wqZdQPRKBQhcRpB19YZbGAVnCaMdMZntvtxUUiz+A2mYAcYbkEplYqOlsBudZd3w rS4ddmiLFzvxZrjrH8qmFD4r2idBZN4pNJXBalP2YyfwqghPIL8RGFH7QFCc1Nbd kSvuvG3y1TM+QlG+tyCkDrQ4PA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:22:46 2026 by rpki-client