$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json) Hash identifier: 7J8PjzagIvZphphLiHhVXpne4qvvg+daGDTPgsHMFio= Subject key identifier: E3:51:EA:2B:9E:13:EA:49:40:8C:92:8C:A6:A2:57:22:24:6D:12:15 Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft Manifest number: 08BE Signing time: Sat 18 Apr 2026 20:52:27 +0000 Manifest this update: Sat 18 Apr 2026 20:52:26 +0000 Manifest next update: Sat 25 Apr 2026 20:52:26 +0000 Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: 1p03Nzlbx4BHXxZyyrH7/Kh/dLLHfWfO2pLrZyECHBQ=) 2: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: B8m2ePIUCgEMFkUqEdw865bj5KYfUZe6gW5FvbGFIPQ=) 3: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: w4kX8b17fTC2s9BhESajxJlKj2QyQzvAORehV2EbPSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 20:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Validity Not Before: Apr 18 20:52:26 2026 GMT Not After : Apr 25 20:52:26 2026 GMT Subject: CN=69e3ef0b-63fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:49:4e:9e:75:f3:54:52:e1:c5:9f:b4:62: ee:6d:5a:d0:d3:0e:2b:db:28:03:73:04:ab:69:67: ab:5b:e5:0c:34:97:ea:c9:95:fc:96:85:ff:07:24: 7a:55:46:de:fb:ec:d5:8d:47:4c:2a:b7:5b:25:81: 96:29:33:e6:d5:91:44:19:39:47:d7:58:0e:c4:22: c1:a2:15:9f:14:5d:19:6b:ee:fe:44:be:e7:dc:ce: df:0f:85:e5:a2:1d:cb:6c:65:1a:c4:7a:14:90:e0: e6:df:62:9e:8b:9e:96:21:2c:74:72:06:15:d6:b2: 71:45:fa:68:0c:c9:0c:7c:87:d1:be:88:8a:02:d8: c3:40:98:0d:4b:c3:d7:8e:a5:5d:bd:81:f3:cf:61: 37:64:54:ef:dd:b9:10:ab:b4:53:33:5b:e3:94:9a: 57:6c:7d:66:91:05:fd:88:b6:31:9c:87:4e:f9:d6: d9:74:4e:d4:fd:da:e8:d8:57:ff:93:e0:84:ab:12: 2e:64:2b:95:43:62:fb:36:5a:f2:a3:ba:95:66:0b: e2:0b:0c:3a:4c:0c:7d:ce:86:f0:56:e3:ff:93:c1: 90:1e:74:c5:96:68:53:d9:f0:df:f0:1a:c2:42:2f: 5b:ed:c0:09:db:3f:1c:7b:a4:df:24:a3:a5:10:89: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:EA:2B:9E:13:EA:49:40:8C:92:8C:A6:A2:57:22:24:6D:12:15 X509v3 Authority Key Identifier: keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0e:2f:aa:87:4a:2d:cb:6f:6c:7e:ce:b3:86:e3:35:7c:81: 3c:c1:1b:fa:a6:21:16:60:80:e9:5c:05:5e:e7:eb:10:97:f6: f3:09:44:97:da:e6:e1:36:44:f8:d5:84:e9:95:72:4e:8c:9b: 67:7c:cc:71:5c:29:9b:e5:9d:c1:2a:0a:46:6b:f5:4e:80:da: eb:0d:89:eb:bc:3e:fd:f6:74:a5:a3:3c:93:b7:88:fd:c2:ed: ef:f7:da:81:74:a0:72:78:06:5c:eb:7c:ea:28:d3:c5:6e:39: 44:67:81:03:a8:fb:b6:a2:59:2e:b6:7b:97:b2:ea:7e:1b:68: 21:98:e6:50:e3:7f:60:58:ae:e8:c8:35:0d:5b:48:ce:1b:3f: 48:bf:c9:a9:ee:d3:84:4b:de:e0:f1:e0:39:6b:69:2c:a1:a2: f2:db:86:61:c8:9f:de:12:05:46:77:ce:ec:96:e8:56:3f:0e: 9b:72:26:ea:2c:f4:02:d0:9c:33:cb:38:4a:c6:09:76:57:8a: 73:0e:52:99:bd:f4:52:f1:3a:aa:00:48:63:3f:32:5f:be:b7: 81:ab:1b:8f:db:b8:d1:45:43:a5:59:17:ed:1b:c5:24:d3:4c: 31:88:ad:68:23:11:98:69:c6:ef:f8:b5:f6:11:95:3b:17:d7: e2:f1:dd:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKDg4N0U3OUUyNUI2RDFEMzdFRjFGMzFCQzVBMDIzMkY4 RTc2NTE1NDUwHhcNMjYwNDE4MjA1MjI2WhcNMjYwNDI1MjA1MjI2WjAYMRYwFAYD VQQDEw02OWUzZWYwYi02M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB9JTp5181RS4cWftGLubVrQ0w4r2ygDcwSraWerW+UMNJfqyZX8loX/ByR6 VUbe++zVjUdMKrdbJYGWKTPm1ZFEGTlH11gOxCLBohWfFF0Za+7+RL7n3M7fD4Xl oh3LbGUaxHoUkODm32Kei56WISx0cgYV1rJxRfpoDMkMfIfRvoiKAtjDQJgNS8PX jqVdvYHzz2E3ZFTv3bkQq7RTM1vjlJpXbH1mkQX9iLYxnIdO+dbZdE7U/dro2Ff/ k+CEqxIuZCuVQ2L7Nlryo7qVZgviCww6TAx9zobwVuP/k8GQHnTFlmhT2fDf8BrC Qi9b7cAJ2z8ce6TfJKOlEImGvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONR6iue E+pJQIySjKaiVyIkbRIVMB8GA1UdIwQYMBaAFIh+eeJbbR037x8xvFoCMvjnZRVF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi9pSDU1NGx0dEhUZnZIekc4V2dJeS1PZGxG VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi9pSDU1NGx0dEhU ZnZIekc4V2dJeS1PZGxGVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeA4vqodKLctvbH7Os4bjNXyBPMEb+qYhFmCA6VwFXufrEJf28wlEl9rm4TZE +NWE6ZVyToybZ3zMcVwpm+WdwSoKRmv1ToDa6w2J67w+/fZ0paM8k7eI/cLt7/fa gXSgcngGXOt86ijTxW45RGeBA6j7tqJZLrZ7l7LqfhtoIZjmUON/YFiu6Mg1DVtI zhs/SL/Jqe7ThEve4PHgOWtpLKGi8tuGYcif3hIFRnfO7JboVj8Om3Im6iz0AtCc M8s4SsYJdleKcw5Smb30UvE6qgBIYz8yX763gasbj9u40UVDpVkX7RvFJNNMMYit aCMRmGnG7/i19hGVOxfX4vHd2w== -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:33 2026 by rpki-client