$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: XYHtGy1j87U37VyCV7j9wzIe7CdpX9sWv7zWYWcbqjs= Subject key identifier: E0:35:3C:CC:DC:F5:76:F6:16:1E:E2:0A:10:CD:0E:41:AC:31:D0:E0 Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: 019F Signing time: Fri 17 Apr 2026 03:56:30 +0000 Manifest this update: Fri 17 Apr 2026 03:56:30 +0000 Manifest next update: Fri 24 Apr 2026 03:56:30 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: katgGEgMfq2X8nEnA3IX/ngkgZ8sNzLWqEM20KYy+xs=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: fXqbBRWZeBNZ3fZzOgA4a+7wMB/4xdAxxRaA5d6gc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: Apr 17 03:56:30 2026 GMT Not After : Apr 24 03:56:30 2026 GMT Subject: CN=69e1af6e-4f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:4c:58:43:70:01:67:21:87:b5:fe:9e:81: 9f:3c:46:7f:38:05:d9:36:ae:14:4b:b3:6f:d9:b9: d8:9f:82:2b:34:08:cd:c6:d0:c6:4a:7c:15:d8:3a: f3:64:ac:7c:58:af:25:d9:4f:7c:b0:1f:b3:70:ac: 85:cb:e5:76:c4:7b:73:70:86:de:1c:67:e3:57:47: c1:aa:31:7e:0f:2a:d8:43:bc:5e:72:f7:6e:cc:99: 9a:25:bf:3e:0c:e5:6a:96:e5:31:99:54:57:bf:fb: 29:f4:e0:d1:33:50:02:1d:7d:8f:e7:96:87:03:80: c8:83:ed:75:fa:65:0b:6e:79:23:81:7f:25:dc:94: 04:3b:9d:6f:91:21:6d:b6:33:cc:fe:c1:7b:bb:03: 54:94:b0:33:19:e5:05:43:29:e9:31:86:00:1a:a2: 52:f8:9e:fd:1d:fa:5d:f8:76:24:ca:8b:67:b2:b2: fe:ed:5d:cf:99:de:8f:98:d2:ba:9d:bb:8f:fb:44: 1f:e7:99:2d:e5:f5:4b:f3:a3:88:74:a2:a1:cf:6a: ad:b3:b7:32:c6:ab:8e:10:af:c1:de:c7:6d:3e:2f: 4e:1c:b4:6c:17:03:63:5b:c3:52:f6:c6:7b:fd:e8: d8:88:58:dc:51:95:72:06:99:ed:0b:d4:f0:50:db: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:35:3C:CC:DC:F5:76:F6:16:1E:E2:0A:10:CD:0E:41:AC:31:D0:E0 X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:73:0d:1c:9a:f5:a1:92:35:98:f7:48:b9:da:35:12:1b:e7: b8:5c:de:3f:d1:e1:05:c5:bd:85:be:e0:0f:aa:4e:84:f2:88: 9b:e5:bf:f5:67:6e:2b:3e:bb:17:8c:d6:15:16:51:fe:c9:23: 16:ba:42:e9:36:12:05:00:cd:71:d8:e3:db:e1:2f:25:c9:56: 6c:c5:59:6b:bf:da:f7:a1:1d:7c:52:40:3d:a3:4c:c1:6e:4c: 43:f6:64:fc:1b:96:3d:b9:be:7e:b9:b4:e1:71:c5:dc:c2:a9: c2:a3:70:96:c8:b1:32:39:3e:a9:46:74:3e:53:ac:51:71:ce: 3d:46:5b:47:f2:e1:ca:09:37:fa:ca:9a:8a:8c:6e:72:5e:93: 0e:f0:b0:f2:c4:ee:b5:c1:d3:6c:c7:c9:a2:d2:2d:0d:64:ba: 8c:b7:ce:ea:81:34:e4:7e:d4:a8:e6:b4:3a:5a:fc:f8:9e:50: 30:2e:43:b9:65:00:b7:23:7c:c3:34:27:41:b1:54:5f:d1:ad: 5d:7e:4d:c7:cc:3b:db:f1:ce:46:ac:0a:1c:1c:51:50:82:3a: 3c:9f:69:35:b6:d0:8b:e8:62:64:cd:27:50:f7:8f:7a:b7:4f: b1:a8:24:7d:68:34:98:27:70:b3:14:fe:2b:10:09:6d:cd:9d: b8:72:b1:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1 QUIwNUFDQzUwHhcNMjYwNDE3MDM1NjMwWhcNMjYwNDI0MDM1NjMwWjAYMRYwFAYD VQQDEw02OWUxYWY2ZS00ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdBMWENwAWchh7X+noGfPEZ/OAXZNq4US7Nv2bnYn4IrNAjNxtDGSnwV2Drz ZKx8WK8l2U98sB+zcKyFy+V2xHtzcIbeHGfjV0fBqjF+DyrYQ7xecvduzJmaJb8+ DOVqluUxmVRXv/sp9ODRM1ACHX2P55aHA4DIg+11+mULbnkjgX8l3JQEO51vkSFt tjPM/sF7uwNUlLAzGeUFQynpMYYAGqJS+J79Hfpd+HYkyotnsrL+7V3Pmd6PmNK6 nbuP+0Qf55kt5fVL86OIdKKhz2qts7cyxquOEK/B3sdtPi9OHLRsFwNjW8NS9sZ7 /ejYiFjcUZVyBpntC9TwUNsZqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOA1PMzc 9Xb2Fh7iChDNDkGsMdDgMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX3MNHJr1oZI1mPdIudo1EhvnuFzeP9HhBcW9hb7gD6pOhPKIm+W/9WduKz67 F4zWFRZR/skjFrpC6TYSBQDNcdjj2+EvJclWbMVZa7/a96EdfFJAPaNMwW5MQ/Zk /BuWPbm+frm04XHF3MKpwqNwlsixMjk+qUZ0PlOsUXHOPUZbR/Lhygk3+sqaioxu cl6TDvCw8sTutcHTbMfJotItDWS6jLfO6oE05H7UqOa0Olr8+J5QMC5DuWUAtyN8 wzQnQbFUX9GtXX5Nx8w72/HORqwKHBxRUII6PJ9pNbbQi+hiZM0nUPePerdPsagk fWg0mCdwsxT+KxAJbc2duHKx+g== -----END CERTIFICATE-----Generated at Fri Apr 17 06:13:14 2026 by rpki-client