$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft File: 1icW92HxiNVvoRf53JS-QUEEpoE.mft (raw, json) Hash identifier: tkqnm0uq7XnjHOk9yy4EJjTbKrIKdJ5K6XRzrNODzX4= Subject key identifier: FB:73:97:E8:8F:52:1E:E6:50:8A:C3:B2:87:85:0D:F7:61:46:4F:DF Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 Certificate issuer: /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft Manifest number: 0107 Signing time: Fri 17 Apr 2026 05:48:07 +0000 Manifest this update: Fri 17 Apr 2026 05:48:07 +0000 Manifest next update: Fri 24 Apr 2026 05:48:07 +0000 Files and hashes: 1: 1icW92HxiNVvoRf53JS-QUEEpoE.crl (hash: /T5CDff6TthIJpDtkxJKJcWvJSblaaPtWc7u0jkrD/c=) 2: BB5954CE241111F094390A32C4F9AE02.roa (hash: ILuNQjwNhW0PKN+i94dgKZ8uTmGwmDnJT50xUUvXJAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681 Validity Not Before: Apr 17 05:48:07 2026 GMT Not After : Apr 24 05:48:07 2026 GMT Subject: CN=69e1c997-d2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:71:36:e3:fd:ea:a7:a6:61:bd:7b:6e:45: de:1f:3b:33:25:10:85:b2:3a:54:02:12:de:6e:05: 9e:cf:58:c5:63:ac:42:ef:1d:a8:0d:d9:eb:fd:12: 1b:90:1b:d2:55:a0:aa:94:ae:7f:be:12:7c:7d:e5: c4:86:2c:db:44:57:e3:c4:e0:1a:b1:e4:e0:f7:f1: f8:d8:41:3c:77:ea:e2:f5:42:b1:09:d3:5d:8c:a4: 32:f6:95:fd:e1:51:91:4e:32:0b:e2:a4:99:9a:6b: a7:6d:00:ac:3e:25:1e:48:13:ae:04:72:70:a0:2b: a9:ef:6d:f7:be:f3:85:a5:e2:15:17:b1:a8:3b:a9: 79:b3:7f:96:60:9e:83:c9:ae:8f:cd:51:cc:fe:be: 8c:36:4b:1e:93:33:74:9f:2a:1b:e1:a8:0b:34:75: 9a:fb:f2:9f:7c:da:45:0c:a5:36:d0:63:c6:73:49: 19:62:ad:6d:47:d8:ff:8d:bf:99:6b:d0:d1:82:da: 3b:0a:60:77:cf:86:7a:81:8f:89:79:9d:7e:b1:32: 9e:f5:a9:75:93:ff:53:a6:6b:6e:a8:52:ec:a2:23: d4:25:c3:58:11:12:8b:3b:49:f4:e9:43:d9:55:b8: 0b:eb:d7:d5:e8:4b:52:be:84:5c:93:e9:65:07:29: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:73:97:E8:8F:52:1E:E6:50:8A:C3:B2:87:85:0D:F7:61:46:4F:DF X509v3 Authority Key Identifier: keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:68:8e:c5:6a:22:49:f3:db:4b:f2:98:0b:be:45:b2:5b:dd: a3:6b:f4:5d:dc:55:9e:92:bb:e6:2d:e5:7e:a0:1f:83:8f:8f: 42:7f:a1:7c:ed:17:1f:63:cc:ab:eb:0d:20:34:cc:a2:87:11: 6d:4b:d4:9e:7d:f6:14:45:8f:39:98:10:b8:a7:a8:bb:13:02: ef:70:f6:44:9c:5b:3c:a0:74:9d:ce:97:f1:45:8a:bb:04:e3: f4:a5:96:40:8b:91:36:53:33:f2:d7:a8:0a:7a:4b:5a:64:50: e9:2e:89:e8:69:b3:40:b5:18:87:26:43:47:55:bd:af:e9:24: 0b:a6:f1:5f:e9:6c:b1:6b:1f:10:48:ef:1b:4a:63:3a:bb:44: 13:3a:42:a6:bb:90:de:6d:0b:2a:1a:ee:27:f2:8d:37:42:31: 7a:a8:03:6f:de:6c:30:11:35:a0:2e:7a:64:ea:7e:66:5d:35: e5:5e:16:ac:34:f5:33:49:5f:e3:d2:b5:3c:94:41:15:69:1d: fe:70:e9:eb:99:0b:14:0a:50:17:d5:17:19:eb:04:1d:c5:85: 9d:19:af:f0:70:93:ad:1e:13:aa:7e:e6:9d:7f:c0:cd:90:6b: 7c:3d:0d:1f:1f:80:6e:df:66:c2:e2:5c:48:87:ff:e7:44:76: 68:29:d7:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx NDEwNEE2ODEwHhcNMjYwNDE3MDU0ODA3WhcNMjYwNDI0MDU0ODA3WjAYMRYwFAYD VQQDEw02OWUxYzk5Ny1kMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MFxNuP96qemYb17bkXeHzszJRCFsjpUAhLebgWez1jFY6xC7x2oDdnr/RIb kBvSVaCqlK5/vhJ8feXEhizbRFfjxOAaseTg9/H42EE8d+ri9UKxCdNdjKQy9pX9 4VGRTjIL4qSZmmunbQCsPiUeSBOuBHJwoCup7233vvOFpeIVF7GoO6l5s3+WYJ6D ya6PzVHM/r6MNksekzN0nyob4agLNHWa+/KffNpFDKU20GPGc0kZYq1tR9j/jb+Z a9DRgto7CmB3z4Z6gY+JeZ1+sTKe9al1k/9TpmtuqFLsoiPUJcNYERKLO0n06UPZ VbgL69fV6EtSvoRck+llBymGhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtzl+iP Uh7mUIrDsoeFDfdhRk/fMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My8wNUZGQzAwRUFDODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlO VnZvUmY1M0pTLVFVRUVwb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXGiOxWoiSfPbS/KYC75Fslvdo2v0XdxVnpK75i3lfqAfg4+PQn+hfO0XH2PM q+sNIDTMoocRbUvUnn32FEWPOZgQuKeouxMC73D2RJxbPKB0nc6X8UWKuwTj9KWW QIuRNlMz8teoCnpLWmRQ6S6J6GmzQLUYhyZDR1W9r+kkC6bxX+lssWsfEEjvG0pj OrtEEzpCpruQ3m0LKhruJ/KNN0IxeqgDb95sMBE1oC56ZOp+Zl015V4WrDT1M0lf 49K1PJRBFWkd/nDp65kLFApQF9UXGesEHcWFnRmv8HCTrR4Tqn7mnX/AzZBrfD0N Hx+Abt9mwuJcSIf/50R2aCnXqw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:49:14 2026 by rpki-client