$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json) Hash identifier: 2pU0/7W9XF5wwYZZi+CrAPe5HkoIQCcdHhr+HAjs3lw= Subject key identifier: CA:2D:0E:28:85:0C:07:0B:12:6B:98:62:00:53:72:70:4E:D4:95:0E Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft Manifest number: 42 Signing time: Fri 17 Apr 2026 08:09:35 +0000 Manifest this update: Fri 17 Apr 2026 08:09:34 +0000 Manifest next update: Fri 24 Apr 2026 08:09:34 +0000 Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: qt2iwQsGJsMYV1YZw4IfU044cYVJVJfrO0pE6++3Hl0=) 2: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=) 3: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Validity Not Before: Apr 17 08:09:34 2026 GMT Not After : Apr 24 08:09:34 2026 GMT Subject: CN=69e1eabe-b32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:ce:d6:46:fa:99:88:81:da:d0:22:88:4e: e4:03:59:7c:b2:b0:2c:a7:b3:49:c1:ff:e3:3b:11: 16:39:06:38:91:b5:e1:d9:d4:d6:90:80:99:f7:d1: 7d:e3:14:de:20:c2:26:63:78:fb:92:26:51:df:b3: 69:53:75:cb:63:d9:c8:02:a4:29:a8:b8:a1:67:cc: df:16:7a:74:00:51:37:34:24:fb:ed:34:49:9b:ba: 52:cb:58:34:7a:f5:e9:cf:ee:b3:db:de:3c:f3:5c: 5e:b7:d8:10:4e:41:0e:84:70:ac:a7:37:f5:44:b7: 99:28:37:d7:f5:aa:95:10:0d:98:15:2a:5e:b4:e4: ac:c9:b1:e1:36:77:92:7c:f6:d5:e3:37:60:4d:16: c6:e1:84:a2:df:15:69:0e:91:02:73:3a:8d:ad:1b: 30:ae:dc:df:dd:c5:58:99:a0:a3:8e:96:26:5d:94: 21:f9:e1:24:29:7a:14:6e:6e:e8:0a:74:44:f3:8b: 69:95:d3:57:b0:0a:bf:ca:fc:1e:43:63:13:20:20: f6:ed:6f:68:7c:f3:bd:78:b1:45:3d:df:b4:26:13: 39:6b:ac:af:3e:a1:bb:e8:24:99:d4:0e:09:69:6c: 89:0e:9e:1a:d7:ab:f0:ab:7d:34:90:15:d1:dc:80: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2D:0E:28:85:0C:07:0B:12:6B:98:62:00:53:72:70:4E:D4:95:0E X509v3 Authority Key Identifier: keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ae:7e:7e:ab:ef:95:11:85:45:a0:f4:69:73:aa:98:1b:17: 65:ae:3f:74:3f:c0:7a:25:81:31:2d:f6:9e:3c:b5:2b:80:42: cd:31:c2:c2:10:95:bb:3e:75:f9:09:8e:36:8b:62:da:94:9e: 90:67:6c:d2:81:da:a0:92:aa:c8:3d:c9:ce:7a:93:06:0f:8f: 21:b3:9d:29:00:51:44:bb:f0:33:7f:99:e1:d7:59:f3:62:31: 14:34:a5:85:bd:ac:af:ab:aa:1c:94:36:f3:10:dd:9b:b2:02: 28:3a:78:96:54:e6:68:b9:83:91:53:f4:a1:74:d5:12:13:ea: 8a:f8:3f:a0:f5:e8:68:90:06:aa:1a:ee:c9:cc:f7:e2:32:96: 08:18:c9:7f:d7:ab:f7:5c:fa:2e:69:7a:58:a5:b0:89:17:82: 2a:83:42:16:31:93:c6:8e:01:41:04:1b:9b:a9:39:76:68:ab: 22:cf:be:7d:33:e8:3a:93:c2:00:d7:21:23:a9:ff:a8:00:94: 37:42:b1:e0:50:1b:99:fb:58:06:fa:1a:fe:af:5d:e4:95:c2: 6c:37:d6:af:39:a0:d8:9d:cc:52:f4:0a:3d:28:b9:41:ed:d4: 95:f8:93:1f:c7:c0:2b:7e:83:ca:b5:18:e8:73:40:6f:d4:1b: 3a:77:1f:7b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoOEIwNkRERkNFNkYxOUM0MUJFMzk5RDNCQzdCRTJBRTNF M0JGRDQ1RjAeFw0yNjA0MTcwODA5MzRaFw0yNjA0MjQwODA5MzRaMBgxFjAUBgNV BAMTDTY5ZTFlYWJlLWIzMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb0s7WRvqZiIHa0CKITuQDWXyysCyns0nB/+M7ERY5BjiRteHZ1NaQgJn30X3j FN4gwiZjePuSJlHfs2lTdctj2cgCpCmouKFnzN8WenQAUTc0JPvtNEmbulLLWDR6 9enP7rPb3jzzXF632BBOQQ6EcKynN/VEt5koN9f1qpUQDZgVKl605KzJseE2d5J8 9tXjN2BNFsbhhKLfFWkOkQJzOo2tGzCu3N/dxViZoKOOliZdlCH54SQpehRubugK dETzi2mV01ewCr/K/B5DYxMgIPbtb2h88714sUU937QmEzlrrK8+obvoJJnUDglp bIkOnhrXq/CrfTSQFdHcgFZpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyi0OKIUM BwsSa5hiAFNycE7UlQ4wHwYDVR0jBBgwFoAUiwbd/ObxnEG+OZ07x74q4+O/1F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0I2NzEwMTMwREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVHLU9aMDd4NzRxNC1PXzFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXdiZF9PYnhuRUctT1owN3g3NHE0LU9fMUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OTQ2L0I2NzEwMTMwREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVH LU9aMDd4NzRxNC1PXzFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAMrn5+q++VEYVFoPRpc6qYGxdlrj90P8B6JYExLfaePLUrgELNMcLCEJW7PnX5 CY42i2LalJ6QZ2zSgdqgkqrIPcnOepMGD48hs50pAFFEu/Azf5nh11nzYjEUNKWF vayvq6oclDbzEN2bsgIoOniWVOZouYORU/ShdNUSE+qK+D+g9ehokAaqGu7JzPfi MpYIGMl/16v3XPouaXpYpbCJF4Iqg0IWMZPGjgFBBBubqTl2aKsiz759M+g6k8IA 1yEjqf+oAJQ3QrHgUBuZ+1gG+hr+r13klcJsN9avOaDYncxS9Ao9KLlB7dSV+JMf x8ArfoPKtRjoc0Bv1Bs6dx97 -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:02 2026 by rpki-client