$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: H6sScKTul2ofeuyvX7T0+QgxpPCNqcPNwMMy+ChoZrA= Subject key identifier: 5D:57:99:EF:D7:63:9F:EE:48:27:05:CE:D6:52:A1:DB:7B:05:07:E9 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 01EE Signing time: Fri 17 Apr 2026 03:01:52 +0000 Manifest this update: Fri 17 Apr 2026 03:01:52 +0000 Manifest next update: Fri 24 Apr 2026 03:01:52 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: jEGoHzrBNa+xNgT9GefZurrmyvjrIV3VOtIBtxEZWD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Apr 17 03:01:52 2026 GMT Not After : Apr 24 03:01:52 2026 GMT Subject: CN=69e1a2a0-4911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:9a:2b:94:b6:5f:ae:c7:f9:69:ad:64:de: 3b:06:2f:fd:f6:59:8f:a5:fd:54:d1:e8:b7:3d:99: e9:7f:7d:69:4c:1a:a0:85:2f:81:39:fa:04:43:4e: a7:c8:d0:1d:02:6c:d8:94:46:62:01:f8:cd:df:76: 81:fd:d7:4b:28:69:82:d8:43:19:0c:d2:ac:60:b9: ee:f9:3a:7b:4b:c2:05:1b:50:8c:a4:22:76:a2:a7: 5f:ca:c2:14:fb:49:3d:85:1b:0f:5e:b2:e3:34:bd: 58:d0:e2:30:c7:89:09:3e:47:f7:d9:b2:c0:3f:b5: eb:ef:34:2b:4b:40:bb:35:98:39:86:1f:e9:67:8e: e9:4a:34:ea:22:43:35:7d:ed:d0:3a:7c:6f:d0:2d: cf:d8:ee:d3:f6:b6:32:cb:bd:af:40:00:5c:fe:7f: a7:28:f7:e1:5a:3d:af:92:7a:4e:aa:59:45:c6:21: 22:8f:49:9c:c2:63:36:09:54:97:23:3d:1e:23:ff: 2f:21:8f:1c:5f:d3:c1:f4:9b:3b:e7:8d:de:e6:e7: 59:9b:3a:d8:82:ad:d5:23:7e:66:bc:16:e2:0a:4d: a7:36:75:cd:ec:59:52:c8:3e:c6:8b:45:f9:4f:a4: 50:2e:5f:a9:80:76:f7:c3:7f:59:52:7c:5a:84:5c: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:57:99:EF:D7:63:9F:EE:48:27:05:CE:D6:52:A1:DB:7B:05:07:E9 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:02:91:5a:80:0a:6e:8b:61:b2:48:fa:b4:2c:91:01:64:fd: c0:91:04:b0:bd:a3:05:09:2a:15:1a:bc:2c:ba:9b:46:51:0c: 08:ba:26:9a:2f:1c:f1:98:e1:9c:57:3c:92:d3:f8:50:06:0b: c8:39:f2:06:b0:cc:6d:3d:13:c2:02:3d:9e:ca:c2:4f:e9:ce: aa:bb:27:6c:26:75:30:eb:62:20:74:5a:de:e7:36:83:dd:65: 2f:2a:16:ef:2c:58:22:4f:90:4c:ad:8c:fb:76:3d:c5:3e:20: bd:0d:87:d5:6c:59:26:21:3c:4f:8d:68:d5:8a:75:c6:8d:69: 34:35:4b:3b:ea:0c:c6:62:65:35:cc:7b:d6:7f:5e:da:bb:4b: e2:85:9f:a3:9d:10:0f:9a:a2:a7:e6:1b:ad:29:1f:26:62:3e: 6c:d8:13:f7:0d:c3:53:af:31:52:99:d3:2e:47:95:7d:89:22: 06:1a:50:de:e9:9d:94:5a:f9:1e:c3:72:39:13:77:e8:63:f7: 56:93:ae:08:26:2c:29:31:fe:7f:50:64:f3:90:55:b6:8e:d0: 5c:51:de:7e:79:8a:21:3d:3e:e1:dd:8c:de:80:85:36:02:66: b5:9b:b6:af:6c:d8:8e:e4:eb:74:ce:65:23:83:a0:36:1c:b1: 3d:f6:85:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwNDE3MDMwMTUyWhcNMjYwNDI0MDMwMTUyWjAYMRYwFAYD VQQDEw02OWUxYTJhMC00OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZSaK5S2X67H+WmtZN47Bi/99lmPpf1U0ei3PZnpf31pTBqghS+BOfoEQ06n yNAdAmzYlEZiAfjN33aB/ddLKGmC2EMZDNKsYLnu+Tp7S8IFG1CMpCJ2oqdfysIU +0k9hRsPXrLjNL1Y0OIwx4kJPkf32bLAP7Xr7zQrS0C7NZg5hh/pZ47pSjTqIkM1 fe3QOnxv0C3P2O7T9rYyy72vQABc/n+nKPfhWj2vknpOqllFxiEij0mcwmM2CVSX Iz0eI/8vIY8cX9PB9Js7543e5udZmzrYgq3VI35mvBbiCk2nNnXN7FlSyD7Gi0X5 T6RQLl+pgHb3w39ZUnxahFxKiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1Xme/X Y5/uSCcFztZSodt7BQfpMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeAKRWoAKbothskj6tCyRAWT9wJEEsL2jBQkqFRq8LLqbRlEMCLommi8c8Zjh nFc8ktP4UAYLyDnyBrDMbT0TwgI9nsrCT+nOqrsnbCZ1MOtiIHRa3uc2g91lLyoW 7yxYIk+QTK2M+3Y9xT4gvQ2H1WxZJiE8T41o1Yp1xo1pNDVLO+oMxmJlNcx71n9e 2rtL4oWfo50QD5qip+YbrSkfJmI+bNgT9w3DU68xUpnTLkeVfYkiBhpQ3umdlFr5 HsNyORN36GP3VpOuCCYsKTH+f1Bk85BVto7QXFHefnmKIT0+4d2M3oCFNgJmtZu2 r2zYjuTrdM5lI4OgNhyxPfaFEA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:23:30 2026 by rpki-client