$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json) Hash identifier: oxqaKkB5FpF+7iP5ySkl+oiJZs21jYVQ7ShDdb2rRAU= Subject key identifier: AC:D4:1E:2C:9B:34:AD:DA:D5:AC:7B:51:88:52:05:40:18:C5:79:2E Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft Manifest number: 072A Signing time: Thu 16 Apr 2026 21:45:43 +0000 Manifest this update: Thu 16 Apr 2026 21:45:42 +0000 Manifest next update: Thu 23 Apr 2026 21:45:42 +0000 Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: bxA2SE3I7vHnd4y4yiygjVx7rVZdTANlFMhNkjAJCVw=) 2: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=) 3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=) 4: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Apr 16 21:45:42 2026 GMT Not After : Apr 23 21:45:42 2026 GMT Subject: CN=69e15887-ffba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:5b:5c:69:e5:03:30:1c:82:6b:c0:9f:25: 4c:96:8c:91:e3:56:5d:09:82:46:ed:48:04:2e:e3: 96:00:9b:de:1d:ce:d5:cb:cd:a7:5f:ca:68:cf:f6: d6:ca:67:b4:ed:e0:81:7e:73:bc:74:03:db:f1:51: fd:e7:d0:92:70:70:a9:e2:9e:4b:b9:a2:fa:65:12: 8b:36:2b:13:47:7b:3d:7e:93:41:a1:cb:36:7b:b9: 31:e3:cd:ae:32:73:8c:77:be:63:d6:14:9a:fe:50: 51:27:95:52:79:70:c8:6f:5c:49:a3:52:8c:18:31: 53:e2:29:e6:05:42:df:fb:85:d4:54:8a:f7:bc:1b: e1:14:8a:f3:ce:52:bb:b4:f4:2b:b4:9c:6a:03:80: 8b:1e:ad:01:d9:c7:e6:c1:19:83:e3:26:ea:12:5f: e4:c4:b6:5d:99:c7:c4:99:e1:17:e4:41:f9:32:ee: eb:62:b5:33:b7:8f:6c:39:78:89:a2:4a:b4:0e:6c: bc:3a:a7:45:6f:9b:96:bc:77:f8:d6:f3:7c:fc:65: 72:11:cc:4b:89:9f:a9:0a:d1:f7:54:9f:a3:be:3e: 2f:6f:68:2a:ae:6b:88:fd:8c:e1:6f:bc:22:41:f5: 77:87:e1:0f:f3:e4:b0:86:81:f0:bb:5d:1c:cd:58: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D4:1E:2C:9B:34:AD:DA:D5:AC:7B:51:88:52:05:40:18:C5:79:2E X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e8:ea:1b:7d:43:72:54:b7:05:20:8c:6c:1c:cb:48:44:13: ff:49:29:aa:23:16:93:e8:70:e4:41:66:c2:5f:4d:2f:76:47: 37:96:a6:7a:cf:e1:78:da:63:6a:83:b3:a1:f9:54:79:56:56: 94:ff:79:a9:02:77:07:cd:1c:fa:06:91:77:78:d3:e2:cf:4f: 88:c1:52:c8:7d:4d:d8:e2:a0:1f:52:7a:0d:a2:2f:76:d2:1c: a0:a9:d8:46:b2:c1:a1:35:65:38:98:d1:c0:61:a9:0b:aa:92: 2b:ef:46:ab:58:46:b8:f4:c6:0e:47:72:eb:2c:9d:cc:9c:ec: 2d:e3:58:bf:df:02:20:6a:5e:7c:a0:8e:b7:5f:04:f5:41:4c: 4b:83:9e:f7:e1:e7:0b:a1:64:d0:29:54:9c:e7:6d:e6:6e:b1: 9f:96:19:85:07:54:76:ea:6f:89:76:af:43:30:21:e0:cb:99: 05:8f:48:4d:4f:eb:80:9b:83:8d:81:cb:cc:00:d8:36:e2:0a: dc:b5:5c:bc:1e:25:43:39:3d:c9:7a:ce:b9:c5:12:0b:d6:11: e1:4f:e2:79:22:6f:d3:22:93:da:1b:e1:c4:dc:16:33:93:b0: b7:01:62:27:6b:a0:c3:8b:b7:77:f4:26:c2:50:83:5d:d3:0e: 24:a6:d9:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjYwNDE2MjE0NTQyWhcNMjYwNDIzMjE0NTQyWjAYMRYwFAYD VQQDEw02OWUxNTg4Ny1mZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupxbXGnlAzAcgmvAnyVMloyR41ZdCYJG7UgELuOWAJveHc7Vy82nX8poz/bW yme07eCBfnO8dAPb8VH959CScHCp4p5LuaL6ZRKLNisTR3s9fpNBocs2e7kx482u MnOMd75j1hSa/lBRJ5VSeXDIb1xJo1KMGDFT4inmBULf+4XUVIr3vBvhFIrzzlK7 tPQrtJxqA4CLHq0B2cfmwRmD4ybqEl/kxLZdmcfEmeEX5EH5Mu7rYrUzt49sOXiJ okq0Dmy8OqdFb5uWvHf41vN8/GVyEcxLiZ+pCtH3VJ+jvj4vb2gqrmuI/Yzhb7wi QfV3h+EP8+SwhoHwu10czVhCjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzUHiyb NK3a1ax7UYhSBUAYxXkuMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w YjVlYUpZWFBKenlSYkh0UDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAOjqG31DclS3BSCMbBzLSEQT/0kpqiMWk+hw5EFmwl9NL3ZHN5ames/heNpj aoOzoflUeVZWlP95qQJ3B80c+gaRd3jT4s9PiMFSyH1N2OKgH1J6DaIvdtIcoKnY RrLBoTVlOJjRwGGpC6qSK+9Gq1hGuPTGDkdy6yydzJzsLeNYv98CIGpefKCOt18E 9UFMS4Oe9+HnC6Fk0ClUnOdt5m6xn5YZhQdUdupviXavQzAh4MuZBY9ITU/rgJuD jYHLzADYNuIK3LVcvB4lQzk9yXrOucUSC9YR4U/ieSJv0yKT2hvhxNwWM5OwtwFi J2ugw4u3d/QmwlCDXdMOJKbZ6Q== -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:38 2026 by rpki-client