$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: ut7VCOoWJkzyQWVKYzrhDUfN5cCdXtKBKeC8bdooe8A= Subject key identifier: AE:F5:8B:BB:D5:58:DE:AC:72:BA:8E:7C:26:26:75:4B:E2:AB:40:E4 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 0281 Signing time: Fri 17 Apr 2026 01:39:47 +0000 Manifest this update: Fri 17 Apr 2026 01:39:46 +0000 Manifest next update: Fri 24 Apr 2026 01:39:46 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: 9jlPIXNQ/mlwzV7mEe/dardo0rsqqx72hgo4oTlaLC8=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Apr 17 01:39:46 2026 GMT Not After : Apr 24 01:39:46 2026 GMT Subject: CN=69e18f63-4844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:09:26:19:18:33:06:25:bf:e8:d6:3a:2a: 74:78:ca:bc:80:ac:93:0c:a5:5f:e1:7c:a6:df:da: f7:5e:b0:20:5d:ef:33:70:8d:28:1c:af:01:98:4d: 51:30:30:ed:85:72:c1:04:03:53:5d:83:75:b4:b8: 86:60:01:15:c4:23:f7:b1:e4:54:48:66:47:a4:7d: f1:1e:e7:3a:74:02:3a:ba:9e:ac:84:74:7d:9b:dd: db:e5:70:78:da:20:4d:ce:40:23:ac:f5:54:48:30: f0:dc:1d:0a:c0:b7:58:e7:07:06:79:58:8a:29:3c: 97:a5:ce:27:a4:6c:a5:57:a6:ce:b3:0f:02:49:db: c9:77:12:a6:38:5e:d2:87:9b:a8:65:e2:0f:bc:d8: 14:c7:2a:f7:7b:46:b4:d8:b4:9e:e7:b4:67:c0:55: 11:aa:8c:f0:2c:9d:c9:75:27:ef:c5:24:5b:a4:8c: d2:45:56:35:b2:92:17:af:23:96:b8:5b:79:17:04: 10:03:ba:0c:54:30:f2:ee:64:b0:23:cb:16:8b:bc: e1:2c:2c:18:7b:d1:63:a2:22:b2:0d:50:89:c3:04: 6f:0a:86:ec:51:f0:0a:5c:27:e6:72:bf:e6:a0:85: 78:ef:eb:6d:a4:d0:ca:c9:6d:98:7d:76:bb:e5:da: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:8B:BB:D5:58:DE:AC:72:BA:8E:7C:26:26:75:4B:E2:AB:40:E4 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:53:84:17:ee:ec:71:70:08:db:1a:27:94:71:b8:8d:2a:1b: ef:09:95:f7:00:6b:b2:4d:ef:2d:4c:f2:02:83:a6:4c:a3:0f: bd:b0:28:6e:5c:5f:b3:99:0a:7f:9c:21:08:2a:dc:3a:96:d1: 83:9b:6d:d4:1e:3f:ff:f7:33:d1:39:05:21:4c:34:f9:3e:d9: 26:9e:63:7f:c8:d3:d2:36:9b:3f:c3:94:85:92:6a:ad:d0:57: 2a:fd:a2:57:77:1f:0f:67:5c:0d:40:ed:19:fc:b2:fc:55:7d: 8b:43:2b:13:e6:01:9d:bb:82:dc:3c:21:57:1b:0f:3b:cb:63: 57:1e:c4:a2:c1:ba:26:e9:cb:cd:c7:b5:82:93:e6:05:99:f8: a5:e6:4f:c5:37:84:5b:de:4e:fc:39:5b:4c:bf:31:45:99:57: 85:f6:04:0b:31:69:26:5b:92:2d:c8:64:a7:cb:c7:98:22:fa: f0:94:ff:ab:c5:ef:55:4e:ed:34:1e:2f:60:71:18:e5:66:d4: 6d:45:bf:a6:96:65:4c:80:f0:83:79:24:d7:43:e4:dd:b9:57: 2d:ef:5f:a7:97:9c:8d:66:71:08:23:71:bb:a3:21:0d:27:89: 40:45:83:3c:c2:66:e6:57:cf:d0:f3:50:f5:8b:54:36:0d:28: 2a:a4:37:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjYwNDE3MDEzOTQ2WhcNMjYwNDI0MDEzOTQ2WjAYMRYwFAYD VQQDEw02OWUxOGY2My00ODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyacJJhkYMwYlv+jWOip0eMq8gKyTDKVf4Xym39r3XrAgXe8zcI0oHK8BmE1R MDDthXLBBANTXYN1tLiGYAEVxCP3seRUSGZHpH3xHuc6dAI6up6shHR9m93b5XB4 2iBNzkAjrPVUSDDw3B0KwLdY5wcGeViKKTyXpc4npGylV6bOsw8CSdvJdxKmOF7S h5uoZeIPvNgUxyr3e0a02LSe57RnwFURqozwLJ3JdSfvxSRbpIzSRVY1spIXryOW uFt5FwQQA7oMVDDy7mSwI8sWi7zhLCwYe9FjoiKyDVCJwwRvCobsUfAKXCfmcr/m oIV47+ttpNDKyW2YfXa75dov+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK71i7vV WN6scrqOfCYmdUviq0DkMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr1OEF+7scXAI2xonlHG4jSob7wmV9wBrsk3vLUzyAoOmTKMPvbAoblxfs5kK f5whCCrcOpbRg5tt1B4///cz0TkFIUw0+T7ZJp5jf8jT0jabP8OUhZJqrdBXKv2i V3cfD2dcDUDtGfyy/FV9i0MrE+YBnbuC3DwhVxsPO8tjVx7EosG6JunLzce1gpPm BZn4peZPxTeEW95O/DlbTL8xRZlXhfYECzFpJluSLchkp8vHmCL68JT/q8XvVU7t NB4vYHEY5WbUbUW/ppZlTIDwg3kk10Pk3blXLe9fp5ecjWZxCCNxu6MhDSeJQEWD PMJm5lfP0PNQ9YtUNg0oKqQ3vg== -----END CERTIFICATE-----Generated at Fri Apr 17 04:27:20 2026 by rpki-client