$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft File: iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json) Hash identifier: 1BpghWsnrjFTTHNhFCJL4u8gMIxGTjTK6hmhY6gps4A= Subject key identifier: 44:F4:80:E8:ED:3C:D9:53:AE:4F:A4:1A:CB:D5:02:86:D7:00:4D:19 Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft Manifest number: 4F Signing time: Fri 17 Apr 2026 07:59:47 +0000 Manifest this update: Fri 17 Apr 2026 07:59:46 +0000 Manifest next update: Fri 24 Apr 2026 07:59:46 +0000 Files and hashes: 1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: vn3np0cB714L7DiyF+gfXbPjRF6Wtj9az/Ugl4ukwXY=) 2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Apr 17 07:59:46 2026 GMT Not After : Apr 24 07:59:46 2026 GMT Subject: CN=69e1e873-993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:2f:fc:8b:a2:9a:03:5c:7f:de:2f:1d:83: 1e:7e:e8:d3:9e:65:e3:33:b0:cc:2d:20:a3:80:64: 2a:fa:9e:e5:5a:85:c7:1e:f1:5e:84:bf:ac:95:c7: 84:df:be:9b:45:b8:23:b1:f4:ee:4c:94:30:e7:1f: 67:e1:ac:5f:c0:45:48:69:07:02:d9:db:fa:08:cc: d6:e7:12:42:27:3f:43:a3:69:1a:a9:d2:c1:6a:9a: e2:58:fe:c1:2b:1f:1a:da:8a:b5:52:71:93:a3:b2: e5:a3:4d:49:5c:07:2e:a9:9d:30:b0:1a:3b:6f:71: f2:7a:50:f6:7f:ae:10:b4:51:13:77:0e:1c:04:6c: 18:67:b4:2f:0e:d2:02:42:31:75:d8:1e:ac:0f:a6: 76:7f:a3:2b:58:4d:b2:aa:e3:3f:c0:c8:d3:f1:59: b0:11:ac:c4:85:8d:8e:c2:f8:6d:34:98:92:f1:83: e1:1b:f9:3e:00:f1:68:56:14:dc:6c:ce:71:7b:90: 5b:c6:26:4f:c1:d8:97:6a:a0:90:7a:cd:41:2b:7a: e6:8c:8e:b1:c0:4e:f2:73:ec:3c:81:8e:89:2f:2f: ef:3a:54:00:ad:87:08:3c:b2:62:1b:4b:89:28:05: 29:76:d5:ff:e4:26:21:b4:62:6a:a2:7b:bd:f4:83: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F4:80:E8:ED:3C:D9:53:AE:4F:A4:1A:CB:D5:02:86:D7:00:4D:19 X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c0:70:d0:2d:4e:f7:c4:cc:fa:2c:25:3e:c2:8e:8a:67:e7: af:21:b3:90:92:c8:da:3d:9d:46:69:0c:9d:36:b7:62:05:0f: ab:c2:b5:ac:1b:39:6b:5d:36:92:36:f2:df:17:5d:2c:d4:1b: fe:93:94:f8:2c:a5:f8:5b:f5:d4:83:03:11:16:46:e8:8f:aa: d5:49:3b:8b:c3:f4:55:c4:4f:cd:fe:09:bd:72:a0:c4:a8:74: 42:1d:99:0e:c0:03:24:54:12:72:e7:ba:f5:0d:1f:f9:e5:41: 17:68:72:c2:47:8e:a0:5a:ad:2d:25:0b:d0:f2:35:51:a1:9c: 5c:4a:88:d1:8a:22:a6:6c:b7:b0:75:53:c9:06:e6:ce:03:bb: e0:8a:a2:d4:a6:33:e8:df:3a:08:29:8b:0d:79:75:fc:b9:d1: 7c:c1:24:40:0b:46:73:fe:cd:6c:ab:30:72:ae:28:0e:90:af: 3c:17:e5:1b:e4:01:39:63:6f:82:14:26:13:d5:82:9d:08:6a: ba:01:5c:8e:c2:95:4d:44:bb:0a:5a:89:f2:d0:77:8b:ca:0a: 59:35:15:c1:8a:fd:32:16:e5:a3:7b:b5:7f:a0:ca:20:3c:ab: e0:67:5f:80:90:07:1b:a0:d1:e2:16:02:6e:70:7d:98:41:e7: 11:3f:f0:1d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkEwNDExMC8GA1UEBRMoODhGQjFEMjFDQjg4M0M5N0MyOUFDQjc3RDRENjg4ODRC M0E3QTYwODAeFw0yNjA0MTcwNzU5NDZaFw0yNjA0MjQwNzU5NDZaMBgxFjAUBgNV BAMTDTY5ZTFlODczLTk5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL6C/8i6KaA1x/3i8dgx5+6NOeZeMzsMwtIKOAZCr6nuVahcce8V6Ev6yVx4Tf vptFuCOx9O5MlDDnH2fhrF/ARUhpBwLZ2/oIzNbnEkInP0OjaRqp0sFqmuJY/sEr HxrairVScZOjsuWjTUlcBy6pnTCwGjtvcfJ6UPZ/rhC0URN3DhwEbBhntC8O0gJC MXXYHqwPpnZ/oytYTbKq4z/AyNPxWbARrMSFjY7C+G00mJLxg+Eb+T4A8WhWFNxs znF7kFvGJk/B2JdqoJB6zUEreuaMjrHATvJz7DyBjokvL+86VACthwg8smIbS4ko BSl21f/kJiG0Ymqie730g9cTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURPSA6O08 2VOuT6Qay9UChtcATRkwHwYDVR0jBBgwFoAUiPsdIcuIPJfCmst31NaIhLOnpggw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzI1QzUyNzdFQzlB RTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBn Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVBzZEljdUlQSmZDbXN0MzFOYUloTE9ucGdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QTA0LzI1QzUyNzdFQzlBRTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpm Q21zdDMxTmFJaExPbnBnZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDwHDQLU73xMz6LCU+wo6KZ+evIbOQksjaPZ1GaQydNrdiBQ+rwrWsGzlrXTaS NvLfF10s1Bv+k5T4LKX4W/XUgwMRFkboj6rVSTuLw/RVxE/N/gm9cqDEqHRCHZkO wAMkVBJy57r1DR/55UEXaHLCR46gWq0tJQvQ8jVRoZxcSojRiiKmbLewdVPJBubO A7vgiqLUpjPo3zoIKYsNeXX8udF8wSRAC0Zz/s1sqzByrigOkK88F+Ub5AE5Y2+C FCYT1YKdCGq6AVyOwpVNRLsKWony0HeLygpZNRXBiv0yFuWje7V/oMogPKvgZ1+A kAcboNHiFgJucH2YQecRP/Ad -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:32 2026 by rpki-client