$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: roPcJS+FsHeMYdn50llkPj0iqKCdJeK3S+yO3fa7dkw= Subject key identifier: F8:92:F9:08:B3:53:4F:30:3E:10:D8:5C:81:EF:D3:4F:E7:9A:B2:A1 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 0290 Signing time: Fri 17 Apr 2026 01:31:36 +0000 Manifest this update: Fri 17 Apr 2026 01:31:36 +0000 Manifest next update: Fri 24 Apr 2026 01:31:36 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: xNDT6oG6XDi7hJpTGtj9/pwqIf1SyFIeH0+s+nm5WWA=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: Ot9ybUKOEhuNzPb2fA0AHKITpD0tgf/ehRwyWkuwPQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Apr 17 01:31:36 2026 GMT Not After : Apr 24 01:31:36 2026 GMT Subject: CN=69e18d78-812a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:70:fc:60:41:da:0a:50:4b:a3:dc:68:e4: 9a:fa:35:ab:3c:af:d3:74:95:ed:09:93:cd:af:e2: bd:fe:ff:85:14:57:8d:6a:17:ad:40:3b:9e:27:64: 94:3c:46:21:34:64:16:81:49:6d:71:2a:aa:ed:c3: 52:99:4a:1e:01:a9:7b:69:f8:73:43:d9:52:d1:9f: 09:80:da:86:80:f4:43:a9:b1:bb:9d:19:67:e0:84: 36:39:73:a7:13:0a:0d:8d:8d:82:34:52:42:ab:78: b3:72:0f:b1:bb:2f:b7:ab:39:43:03:9d:a4:d5:25: a2:30:af:f7:4d:ae:80:82:da:87:7c:df:3e:b2:97: f1:e4:79:96:fa:55:f3:4f:7b:fe:b6:e1:d1:e5:e8: 3c:d4:d6:9e:db:33:db:4f:81:ff:eb:81:5e:99:c0: c9:fd:8e:96:6e:65:c2:f1:ab:ec:32:70:00:95:7a: 50:39:1a:1d:4a:e4:c1:b3:6e:c3:93:04:0f:f7:c5: 77:4c:ec:86:43:f3:8c:38:64:4a:ad:8c:4b:72:d1: 45:07:63:fc:02:d6:64:ba:da:22:10:56:3f:16:67: 62:1c:c7:ae:ba:63:18:90:fb:25:fe:85:3a:70:f0: 0f:2a:5b:12:a3:7f:8b:90:b5:96:d5:d9:34:22:68: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:F9:08:B3:53:4F:30:3E:10:D8:5C:81:EF:D3:4F:E7:9A:B2:A1 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:75:0b:55:a1:b4:14:08:5d:35:fa:d8:63:18:f6:93:5d:9c: 27:87:8e:e2:eb:39:ed:6a:4d:8a:8d:e6:84:80:5b:4e:ea:de: 2d:bf:26:34:7a:7c:ad:03:4a:c2:82:c3:27:75:f0:5b:08:d8: 96:b1:a1:09:a7:05:42:3a:42:de:7c:8c:2e:16:3a:8b:6a:d7: e2:4f:68:68:86:e1:a0:6c:17:93:9e:f8:71:cd:59:44:73:24: d3:28:71:78:bd:39:2e:39:48:ab:99:d8:d7:13:91:72:ca:a1: 72:0c:d5:e4:c0:8b:f0:28:c1:d1:6d:ff:e7:d5:c5:a2:16:bd: 9a:d9:f5:87:6c:51:21:15:bd:7c:23:84:bf:c4:b5:5a:6d:e3: a2:34:83:56:ad:e6:27:c2:1a:48:43:17:75:7f:d2:e4:2a:17: 53:04:bb:3c:3d:b0:ab:96:cb:f1:56:e7:1c:63:18:6b:b0:48: 82:81:64:df:a3:52:28:c7:8e:5c:ed:e1:14:87:43:56:79:bb: ec:dd:7b:bd:1c:0b:63:8f:f6:c2:34:59:9d:7b:2e:46:18:7b: dc:16:1a:5c:f5:95:98:79:86:46:4c:71:46:03:70:f4:dc:a4: c7:b4:31:9b:58:66:96:a0:81:05:76:36:0f:7e:5a:28:48:2f: 7e:b1:79:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjYwNDE3MDEzMTM2WhcNMjYwNDI0MDEzMTM2WjAYMRYwFAYD VQQDEw02OWUxOGQ3OC04MTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfRw/GBB2gpQS6PcaOSa+jWrPK/TdJXtCZPNr+K9/v+FFFeNahetQDueJ2SU PEYhNGQWgUltcSqq7cNSmUoeAal7afhzQ9lS0Z8JgNqGgPRDqbG7nRln4IQ2OXOn EwoNjY2CNFJCq3izcg+xuy+3qzlDA52k1SWiMK/3Ta6AgtqHfN8+spfx5HmW+lXz T3v+tuHR5eg81Nae2zPbT4H/64FemcDJ/Y6WbmXC8avsMnAAlXpQORodSuTBs27D kwQP98V3TOyGQ/OMOGRKrYxLctFFB2P8AtZkutoiEFY/FmdiHMeuumMYkPsl/oU6 cPAPKlsSo3+LkLWW1dk0ImhWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiS+Qiz U08wPhDYXIHv00/nmrKhMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3ULVaG0FAhdNfrYYxj2k12cJ4eO4us57WpNio3mhIBbTureLb8mNHp8rQNK woLDJ3XwWwjYlrGhCacFQjpC3nyMLhY6i2rX4k9oaIbhoGwXk574cc1ZRHMk0yhx eL05LjlIq5nY1xORcsqhcgzV5MCL8CjB0W3/59XFoha9mtn1h2xRIRW9fCOEv8S1 Wm3jojSDVq3mJ8IaSEMXdX/S5CoXUwS7PD2wq5bL8VbnHGMYa7BIgoFk36NSKMeO XO3hFIdDVnm77N17vRwLY4/2wjRZnXsuRhh73BYaXPWVmHmGRkxxRgNw9Nykx7Qx m1hmlqCBBXY2D35aKEgvfrF5aA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:59:27 2026 by rpki-client