$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json) Hash identifier: 0hbUJ1SR15k4Nt0mTFWJiNxFU8NscvvhpDSkAiw7xuA= Subject key identifier: 65:AC:90:5C:02:49:3C:49:5E:4E:73:2E:28:60:57:87:8D:BF:E6:BC Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft Manifest number: DF Signing time: Fri 17 Apr 2026 06:17:51 +0000 Manifest this update: Fri 17 Apr 2026 06:17:51 +0000 Manifest next update: Fri 24 Apr 2026 06:17:51 +0000 Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: IlzSDz3RqhWppkvK3vljElWvl97DWqJtywHrhBAWx20=) 2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Validity Not Before: Apr 17 06:17:51 2026 GMT Not After : Apr 24 06:17:51 2026 GMT Subject: CN=69e1d08f-b84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:b6:0a:b7:d4:c9:6a:75:cf:0f:67:9f:46: 45:52:66:c1:7d:ec:10:32:9f:c7:de:85:02:84:2e: d4:fd:72:12:03:82:e9:a8:58:fb:d9:6c:50:f8:71: 44:16:49:54:54:11:23:88:08:64:50:0f:5a:c2:5e: 96:d9:ec:ce:8f:95:74:c9:5b:73:0a:15:86:d4:35: 87:39:eb:c7:10:7c:c8:e4:65:0d:75:10:38:b9:21: 1a:32:af:a9:04:a0:93:1b:f3:91:dd:a5:f1:b1:87: e7:38:f5:4e:67:54:ac:52:a8:14:fd:55:e9:f6:ed: fc:af:a1:24:a1:a0:6a:e9:3d:37:80:e3:26:0c:09: db:ac:a7:0d:7c:f3:69:67:0c:8f:5c:79:04:22:40: 37:11:4e:4a:0f:d8:85:d6:78:fe:18:61:a4:36:8d: b6:ba:b5:a4:a6:20:48:42:7e:eb:56:b0:c7:7a:f2: 73:95:4a:c1:71:8f:13:e1:23:1a:31:77:9e:44:74: 81:aa:72:37:c0:89:9f:90:46:c0:95:6f:b6:5a:ed: e0:b0:bc:e4:85:a7:a5:06:c4:ba:12:e5:da:61:d7: af:ea:f2:b5:e5:b6:d9:e7:cb:f8:f5:fd:fa:9f:59: 1a:54:01:24:18:56:6d:9b:3e:fb:c0:48:f7:19:59: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AC:90:5C:02:49:3C:49:5E:4E:73:2E:28:60:57:87:8D:BF:E6:BC X509v3 Authority Key Identifier: keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:80:58:c9:96:67:f3:9c:c5:d1:5a:9a:25:98:de:ec:40:f2: fb:b1:23:38:88:6e:5a:06:c1:75:2e:9b:34:91:7f:2e:d4:4c: 12:8f:f5:b2:de:11:89:61:bc:42:16:da:15:13:e0:52:1c:7c: 11:b4:73:92:63:80:ba:ea:48:f8:04:2e:6e:70:6b:a9:8f:7c: bf:a4:d3:26:ff:19:32:45:d2:f5:93:fe:de:7c:43:fa:24:1d: e2:c0:e2:c8:53:c8:d6:c1:64:d7:6f:18:ea:e5:7e:2e:fe:72: 5e:6a:ee:55:5e:99:a8:9b:ae:a4:26:3a:6f:f3:0a:c9:00:4d: 82:56:b8:95:83:c4:2c:19:0e:19:93:81:8b:f8:d9:77:87:2b: 8a:d1:58:8b:c0:5b:dc:95:86:44:7a:a4:64:e0:1a:61:0e:69: f5:f5:9f:63:fb:ae:b0:78:c2:0c:a3:e1:7c:b8:76:93:b5:56: da:47:80:9b:b4:c6:34:8f:34:d5:77:61:d1:c6:4c:61:c0:86: 3e:b8:1d:38:7e:a5:c5:b6:b2:b3:2c:e3:1e:01:ad:c2:9c:2b: c2:ae:06:16:02:ad:8e:25:cd:78:35:a7:aa:56:a0:05:55:a9: 44:b0:79:22:18:c9:c9:db:80:74:cc:b6:3f:e7:f0:60:8b:31: dd:e0:c3:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQ0IxMTAvBgNVBAUTKDg5NjY0MjNFRTJBNDE1NjMxRjdBRjMxNEU0RDg4NDAw N0E4NDY4QjYwHhcNMjYwNDE3MDYxNzUxWhcNMjYwNDI0MDYxNzUxWjAYMRYwFAYD VQQDEw02OWUxZDA4Zi1iODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvle2CrfUyWp1zw9nn0ZFUmbBfewQMp/H3oUChC7U/XISA4LpqFj72WxQ+HFE FklUVBEjiAhkUA9awl6W2ezOj5V0yVtzChWG1DWHOevHEHzI5GUNdRA4uSEaMq+p BKCTG/OR3aXxsYfnOPVOZ1SsUqgU/VXp9u38r6EkoaBq6T03gOMmDAnbrKcNfPNp ZwyPXHkEIkA3EU5KD9iF1nj+GGGkNo22urWkpiBIQn7rVrDHevJzlUrBcY8T4SMa MXeeRHSBqnI3wImfkEbAlW+2Wu3gsLzkhaelBsS6EuXaYdev6vK15bbZ58v49f36 n1kaVAEkGFZtmz77wEj3GVmV5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWskFwC STxJXk5zLihgV4eNv+a8MB8GA1UdIwQYMBaAFIlmQj7ipBVjH3rzFOTYhAB6hGi2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi82NTBFNjAwQUVB NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZXTWZldk1VNU5pRUFIcUVh TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lXWkNQdUtrRldNZmV2TVU1TmlFQUhxRWFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFDQi82NTBFNjAwQUVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZX TWZldk1VNU5pRUFIcUVhTFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo4BYyZZn85zF0VqaJZje7EDy+7EjOIhuWgbBdS6bNJF/LtRMEo/1st4RiWG8 QhbaFRPgUhx8EbRzkmOAuupI+AQubnBrqY98v6TTJv8ZMkXS9ZP+3nxD+iQd4sDi yFPI1sFk128Y6uV+Lv5yXmruVV6ZqJuupCY6b/MKyQBNgla4lYPELBkOGZOBi/jZ d4critFYi8Bb3JWGRHqkZOAaYQ5p9fWfY/uusHjCDKPhfLh2k7VW2keAm7TGNI80 1Xdh0cZMYcCGPrgdOH6lxbaysyzjHgGtwpwrwq4GFgKtjiXNeDWnqlagBVWpRLB5 IhjJyduAdMy2P+fwYIsx3eDDmA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:40 2026 by rpki-client