$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: 8K5VzRU0xObSh3cWXa1lTY37EEZ7fWku8XdRVR5pAyk= Subject key identifier: C2:1E:CA:3F:97:4C:8E:95:6A:22:D3:76:7F:CA:07:87:F2:04:3E:F9 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 0217 Signing time: Fri 17 Apr 2026 02:35:51 +0000 Manifest this update: Fri 17 Apr 2026 02:35:50 +0000 Manifest next update: Fri 24 Apr 2026 02:35:50 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: xRkzZNRNy1Arvr4ZaSaXnp4tD3Q16qrRn6muuF9hxVA=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: vru24/oQ0e7YAXwvhdGxx83zVPravQOQbMh4gNlzMKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Apr 17 02:35:50 2026 GMT Not After : Apr 24 02:35:50 2026 GMT Subject: CN=69e19c87-6f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:ef:e3:f3:23:1a:b0:d3:ae:67:81:e4:81: d6:62:c8:90:76:b5:b8:a8:cb:07:e4:bc:c3:59:e9: 55:52:10:51:e6:4f:4b:19:78:8b:95:04:a5:7f:2a: 7a:ec:68:20:1e:86:2d:d9:52:0a:53:8e:86:fb:fd: 04:4e:38:4a:b5:16:7f:34:2f:bc:4f:41:96:d0:79: cf:bd:85:57:46:0a:49:0c:90:de:fe:64:51:6e:cf: 8c:1a:15:2f:b5:ce:b1:84:e7:15:dd:88:30:73:a1: 59:be:14:cc:9d:22:b8:13:78:ab:b9:f9:e4:5f:c4: c6:8d:92:b1:04:03:08:c1:a1:0e:05:f7:79:be:fd: d8:8f:94:08:a7:bb:9d:78:d5:24:ed:05:24:9c:29: 5c:ae:e1:26:64:c1:e9:a0:17:43:1b:73:b1:3e:6a: 11:7f:7e:b7:8b:c5:89:30:6b:a1:7b:8f:8c:c6:99: 23:51:45:e6:76:13:3a:61:6b:a4:ed:0b:53:3f:dc: 91:d0:63:88:bc:ad:76:7c:80:ba:c5:50:d8:35:d1: da:b0:79:78:75:81:90:27:37:98:ed:ba:ee:c1:16: 4f:2d:9a:b2:93:e9:47:5f:2c:22:e9:50:e7:a9:de: 2f:85:39:19:d9:0f:67:de:09:f2:e2:85:f5:85:c9: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:CA:3F:97:4C:8E:95:6A:22:D3:76:7F:CA:07:87:F2:04:3E:F9 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:ac:d2:61:59:07:5d:14:61:c6:10:29:95:b8:20:66:9d: 65:81:d1:a0:25:51:6c:65:5e:ef:2f:f7:45:9e:3c:fb:c5:c6: ee:bd:d9:40:cd:55:d7:8d:47:08:72:e6:1b:fa:fd:e2:53:52: cd:6a:2d:f0:8e:a5:aa:27:d2:07:75:12:aa:5d:8a:02:fe:ff: 30:ac:6b:66:8a:e9:2e:37:4a:74:e2:a5:5f:75:13:f8:52:41: b5:d3:b5:08:6e:bc:48:60:48:a1:c7:b7:14:34:12:c6:7e:39: c5:c3:84:bb:f9:00:93:c3:89:46:a6:8c:41:d2:eb:ec:ae:f3: 50:6b:cc:dd:83:4b:f5:52:0a:b2:aa:14:4a:a9:4a:e1:f4:36: 8a:76:58:fd:10:94:cd:de:93:9a:8a:3e:44:8b:9d:f0:71:37: 0e:ca:53:24:30:81:fc:fd:77:ee:a6:3f:c0:91:c0:38:b3:b5: 14:8b:37:26:ba:63:da:69:52:25:83:47:a1:4b:9d:aa:28:de: c9:c8:dc:ad:10:1e:08:1e:c1:b7:80:5e:31:ab:e7:91:05:03: 74:07:bd:50:5e:9e:02:a4:e1:e6:7d:ab:bc:8c:f2:39:81:ae: 35:cd:8d:d0:06:23:d2:5a:6f:29:b9:81:72:fb:fd:2e:76:44: 01:8c:06:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjYwNDE3MDIzNTUwWhcNMjYwNDI0MDIzNTUwWjAYMRYwFAYD VQQDEw02OWUxOWM4Ny02ZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Nrv4/MjGrDTrmeB5IHWYsiQdrW4qMsH5LzDWelVUhBR5k9LGXiLlQSlfyp6 7GggHoYt2VIKU46G+/0ETjhKtRZ/NC+8T0GW0HnPvYVXRgpJDJDe/mRRbs+MGhUv tc6xhOcV3Ygwc6FZvhTMnSK4E3irufnkX8TGjZKxBAMIwaEOBfd5vv3Yj5QIp7ud eNUk7QUknClcruEmZMHpoBdDG3OxPmoRf363i8WJMGuhe4+MxpkjUUXmdhM6YWuk 7QtTP9yR0GOIvK12fIC6xVDYNdHasHl4dYGQJzeY7bruwRZPLZqyk+lHXywi6VDn qd4vhTkZ2Q9n3gny4oX1hckQ2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIeyj+X TI6VaiLTdn/KB4fyBD75MB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgO+s0mFZB10UYcYQKZW4IGadZYHRoCVRbGVe7y/3RZ48+8XG7r3ZQM1V141H CHLmG/r94lNSzWot8I6lqifSB3USql2KAv7/MKxrZorpLjdKdOKlX3UT+FJBtdO1 CG68SGBIoce3FDQSxn45xcOEu/kAk8OJRqaMQdLr7K7zUGvM3YNL9VIKsqoUSqlK 4fQ2inZY/RCUzd6Tmoo+RIud8HE3DspTJDCB/P137qY/wJHAOLO1FIs3Jrpj2mlS JYNHoUudqijeycjcrRAeCB7Bt4BeMavnkQUDdAe9UF6eAqTh5n2rvIzyOYGuNc2N 0AYj0lpvKbmBcvv9LnZEAYwGKQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:27 2026 by rpki-client