$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: fvKD+Ncrm/zTYdwsQGGRTyON7uQCRZEOwlhQNiBZnDg= Subject key identifier: C6:96:3E:5D:98:11:3D:BC:C4:EE:15:75:7A:26:C0:A4:9F:AC:45:B1 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: A6 Signing time: Wed 15 Apr 2026 06:51:44 +0000 Manifest this update: Wed 15 Apr 2026 06:51:44 +0000 Manifest next update: Wed 22 Apr 2026 06:51:44 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: Z1CCYqydOPM2qlTKx2HMCgMM1Fh8tUvSZ2am6r5T128=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: QEFTIDA+TJrcDI4/EvRQfRv5uCDm3GXgS8OiMfubAA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Apr 15 06:51:44 2026 GMT Not After : Apr 22 06:51:44 2026 GMT Subject: CN=69df3580-2872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:3b:0b:89:20:7c:0c:b5:5c:69:d0:a6:60: a8:2a:70:46:b6:65:64:95:94:62:79:5d:67:f0:7e: b2:96:65:74:e0:14:4a:7a:ab:ac:6d:29:11:82:fa: 73:c1:d3:89:53:4c:6c:50:f7:00:c4:76:f7:e1:9c: 6a:83:e1:8f:21:40:ba:a6:63:92:ac:86:59:34:3e: 8b:f6:68:e0:3a:ef:c8:3c:98:d6:2f:2b:20:25:79: a4:87:78:d8:22:3d:92:d1:cf:63:8e:e9:7a:8a:ac: 10:fc:76:76:ae:e0:9f:96:a4:d8:90:f0:64:cf:54: 6b:a6:5d:95:64:12:8a:cc:28:98:f0:27:0e:00:b0: 9c:fe:ff:48:f7:4c:da:2b:7a:7d:c4:56:33:39:3a: 87:46:0f:e8:fb:f7:53:fe:c1:34:c5:71:45:50:62: 61:c1:b7:02:62:96:4f:c8:ad:d8:02:1d:34:e3:40: 7d:5c:b5:62:6f:44:b6:c7:62:d0:30:78:c8:cb:bb: c6:83:f7:d9:1d:19:15:9e:8b:0e:ad:69:54:5d:08: 76:d6:c4:e6:16:82:9a:a7:fd:62:a7:ab:c7:5f:fc: 33:47:e5:61:95:f9:23:5f:66:08:c8:ba:57:02:ab: 95:8f:3b:5d:a6:fd:d8:ed:37:e7:49:8d:74:74:36: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:96:3E:5D:98:11:3D:BC:C4:EE:15:75:7A:26:C0:A4:9F:AC:45:B1 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a5:4a:fb:bd:c4:9d:aa:b8:27:03:35:d9:f6:4f:56:c9:3d: ea:42:a2:ba:c7:eb:d7:87:1d:8a:d2:2c:c8:3b:0c:db:80:bd: 55:c1:e6:ab:76:12:49:ce:09:3a:e5:60:12:a0:f0:ba:ce:d2: 6a:46:de:6a:82:6c:6c:9f:62:4e:9c:76:eb:20:ba:b0:a9:f7: c5:3b:93:7d:7f:83:49:bd:78:2b:38:5d:d6:ae:de:f5:08:14: f0:40:f1:25:e4:50:be:fe:53:6b:b9:a7:b5:3c:58:3d:12:d4: 87:1d:cb:d7:4a:fc:c1:d0:ff:c8:a6:b7:07:27:80:3e:57:34: 06:0b:c5:61:bb:95:bf:28:66:f5:44:7e:42:63:cd:96:c8:74: 58:e2:d4:1e:82:15:55:3d:4b:16:b4:45:75:bc:c2:26:55:7b: 1d:8a:6e:18:09:08:42:7d:c7:14:df:30:96:cb:39:bb:fc:3c: 9c:38:98:90:55:f9:f5:99:ed:f5:34:ba:ce:df:89:0d:05:8f: f6:5d:cd:30:05:90:d7:4a:1f:af:d1:ca:8b:9b:82:fe:20:21: 36:5d:ac:17:36:72:8c:7f:34:59:13:09:e0:b2:7e:e6:e8:47: b2:1d:21:c4:fb:48:61:e2:bf:86:e7:90:a3:1f:2b:ca:1e:1f: b8:37:c3:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwNDE1MDY1MTQ0WhcNMjYwNDIyMDY1MTQ0WjAYMRYwFAYD VQQDEw02OWRmMzU4MC0yODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCo7C4kgfAy1XGnQpmCoKnBGtmVklZRieV1n8H6ylmV04BRKequsbSkRgvpz wdOJU0xsUPcAxHb34Zxqg+GPIUC6pmOSrIZZND6L9mjgOu/IPJjWLysgJXmkh3jY Ij2S0c9jjul6iqwQ/HZ2ruCflqTYkPBkz1Rrpl2VZBKKzCiY8CcOALCc/v9I90za K3p9xFYzOTqHRg/o+/dT/sE0xXFFUGJhwbcCYpZPyK3YAh0040B9XLVib0S2x2LQ MHjIy7vGg/fZHRkVnosOrWlUXQh21sTmFoKap/1ip6vHX/wzR+VhlfkjX2YIyLpX AquVjztdpv3Y7TfnSY10dDY9SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaWPl2Y ET28xO4VdXomwKSfrEWxMB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgqVK+73Enaq4JwM12fZPVsk96kKiusfr14cditIsyDsM24C9VcHmq3YSSc4J OuVgEqDwus7SakbeaoJsbJ9iTpx26yC6sKn3xTuTfX+DSb14Kzhd1q7e9QgU8EDx JeRQvv5Ta7mntTxYPRLUhx3L10r8wdD/yKa3ByeAPlc0BgvFYbuVvyhm9UR+QmPN lsh0WOLUHoIVVT1LFrRFdbzCJlV7HYpuGAkIQn3HFN8wlss5u/w8nDiYkFX59Znt 9TS6zt+JDQWP9l3NMAWQ10ofr9HKi5uC/iAhNl2sFzZyjH80WRMJ4LJ+5uhHsh0h xPtIYeK/hueQox8ryh4fuDfDvg== -----END CERTIFICATE-----Generated at Fri Apr 17 04:14:02 2026 by rpki-client