$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: TqZhGyG0/tsHjJU5xmSRRiq3c3D6Q2Fy/R7Ftg5WK34= Subject key identifier: B2:7A:CF:91:94:E8:9E:10:2C:B8:71:24:C6:58:8D:6C:C8:8F:D7:D2 Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: DD Signing time: Fri 17 Apr 2026 06:20:17 +0000 Manifest this update: Fri 17 Apr 2026 06:20:17 +0000 Manifest next update: Fri 24 Apr 2026 06:20:17 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: Ct1Gf/xbTLpkAulR5m772n20Ve1KGZErg2gFMkGSJgw=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: wgm/K3czk438q8wY+F8Senpx6ebVl18VJSckLP4XIDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Apr 17 06:20:17 2026 GMT Not After : Apr 24 06:20:17 2026 GMT Subject: CN=69e1d121-4d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:9e:d1:82:cd:a2:2d:a9:fb:59:81:02:40: 67:f5:6f:36:ad:9a:fc:6e:4a:1f:81:65:79:30:9d: 42:06:20:ac:04:20:4f:6f:a5:7d:05:ab:95:32:8d: 0b:3f:bb:44:a4:ee:0e:f2:a2:1a:f2:e8:83:06:03: 61:1b:be:f3:ba:e7:e6:e8:94:1d:f1:1f:60:ce:28: 06:1f:2a:e5:2e:44:2e:2d:74:e9:7b:58:0a:1a:ed: 8c:e5:25:9e:56:85:e6:aa:0a:10:79:b5:94:11:e0: 2e:a2:e7:21:f3:11:1c:4c:9e:52:60:bd:77:04:58: b6:7a:89:1e:9a:cd:89:7d:e2:db:70:ca:73:d0:40: 5f:59:be:59:61:a8:60:71:b0:24:e2:ca:49:d7:65: c9:cd:7b:71:3c:d8:a7:e5:ea:45:8b:92:50:08:9e: 49:2d:dd:56:2d:2c:eb:0e:2d:3d:bd:b1:d0:7a:7b: 64:17:2b:b2:69:0a:86:bb:50:44:ce:fe:49:7f:85: be:9c:17:4b:03:0f:59:3c:dd:d8:ed:f0:29:b1:81: 94:93:53:9d:d1:8a:56:13:da:b1:f5:97:1d:5f:84: 89:f6:4f:97:86:eb:e3:91:4c:07:2b:bb:6d:8d:1c: df:b3:21:b9:bd:d2:e9:65:99:e2:4e:48:29:2c:a2: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:CF:91:94:E8:9E:10:2C:B8:71:24:C6:58:8D:6C:C8:8F:D7:D2 X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1d:fa:77:38:ec:2f:af:aa:71:e8:f8:28:71:85:0b:9e:68: 15:af:b2:38:31:c5:08:dc:3d:4f:6e:a5:61:64:28:52:31:a5: 59:ed:b9:24:8b:f3:b9:69:f7:d6:b0:a8:f0:dc:eb:38:b6:b4: e9:67:60:6a:23:00:73:9a:66:48:d1:17:a9:c2:b4:09:3e:f2: 15:ce:3e:fc:20:13:73:84:8e:bf:a1:d3:56:f0:9c:51:cb:a9: b8:3e:ab:ee:ab:f0:19:69:1c:f3:a8:7d:eb:5b:e3:56:8e:6e: ef:0d:d9:a1:40:45:2d:40:ae:4c:ef:fa:d5:21:dc:c6:46:af: 44:aa:59:17:da:14:b7:01:19:93:a6:f2:77:31:2f:84:84:ae: c3:d4:0e:94:76:16:b9:5d:0a:78:7b:e1:b9:7f:2a:68:95:7e: 73:cb:6d:af:05:c2:ae:69:6e:da:d6:3b:60:d1:30:2a:de:0e: 1f:c4:06:13:a3:5f:e0:48:b2:30:8c:29:48:b3:d7:69:fd:ae: 81:17:ab:78:47:eb:1d:ae:b0:a1:de:b7:51:01:ac:9e:d0:50: ab:d6:77:9f:6f:a5:ed:27:af:06:9d:42:23:96:f1:e7:ee:a9: a9:57:f2:ad:2a:71:85:90:60:14:29:5f:5e:ba:27:99:dd:91: 36:d6:a9:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRTExMTAvBgNVBAUTKDg5OTM5MzhDODU3NTAwMjgwRThGNUU1M0RDMEIzRTkz MDdBRUQ0QTcwHhcNMjYwNDE3MDYyMDE3WhcNMjYwNDI0MDYyMDE3WjAYMRYwFAYD VQQDEw02OWUxZDEyMS00ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58Oe0YLNoi2p+1mBAkBn9W82rZr8bkofgWV5MJ1CBiCsBCBPb6V9BauVMo0L P7tEpO4O8qIa8uiDBgNhG77zuufm6JQd8R9gzigGHyrlLkQuLXTpe1gKGu2M5SWe VoXmqgoQebWUEeAuouch8xEcTJ5SYL13BFi2eokems2JfeLbcMpz0EBfWb5ZYahg cbAk4spJ12XJzXtxPNin5epFi5JQCJ5JLd1WLSzrDi09vbHQentkFyuyaQqGu1BE zv5Jf4W+nBdLAw9ZPN3Y7fApsYGUk1Od0YpWE9qx9ZcdX4SJ9k+XhuvjkUwHK7tt jRzfsyG5vdLpZZniTkgpLKJhbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJ6z5GU 6J4QLLhxJMZYjWzIj9fSMB8GA1UdIwQYMBaAFImTk4yFdQAoDo9eU9wLPpMHrtSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNFMS83Q0YwN0JDNkVG NDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFDZ09qMTVUM0FzLWt3ZXUx S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNFMS83Q0YwN0JDNkVGNDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFD Z09qMTVUM0FzLWt3ZXUxS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWR36dzjsL6+qcej4KHGFC55oFa+yODHFCNw9T26lYWQoUjGlWe25JIvzuWn3 1rCo8NzrOLa06WdgaiMAc5pmSNEXqcK0CT7yFc4+/CATc4SOv6HTVvCcUcupuD6r 7qvwGWkc86h961vjVo5u7w3ZoUBFLUCuTO/61SHcxkavRKpZF9oUtwEZk6bydzEv hISuw9QOlHYWuV0KeHvhuX8qaJV+c8ttrwXCrmlu2tY7YNEwKt4OH8QGE6Nf4Eiy MIwpSLPXaf2ugRereEfrHa6wod63UQGsntBQq9Z3n2+l7SevBp1CI5bx5+6pqVfy rSpxhZBgFClfXronmd2RNtap7w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:09 2026 by rpki-client