$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: vM6/Z9jz9G7RVtRKTuEnyLhQJWCTNjsNZcekdCAbB0U= Subject key identifier: 2E:27:4C:66:86:DA:29:8F:64:72:E6:5A:10:1D:80:2F:E9:4C:AE:EB Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 03E9 Signing time: Fri 17 Apr 2026 00:25:33 +0000 Manifest this update: Fri 17 Apr 2026 00:25:32 +0000 Manifest next update: Fri 24 Apr 2026 00:25:32 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: 7u4+PZIwG1gZgz35S3kgJQWZRA+q+gK0YJ6moUq5Rt8=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: kBFUh+A5t0uG5ToonKBS8JyMqqztNI0BDIiwYVryoTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: Apr 17 00:25:32 2026 GMT Not After : Apr 24 00:25:32 2026 GMT Subject: CN=69e17dfd-300c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:f2:3a:be:33:9f:a5:d3:03:c3:ab:ce:a6: e6:ba:aa:26:2d:c0:ff:c3:43:9b:9c:30:80:46:da: d8:14:52:d9:44:b2:99:9c:e4:de:07:a6:65:f6:77: d0:96:99:04:c6:36:e1:71:a6:f9:0d:3f:a3:eb:d0: d5:66:80:55:e6:6e:88:35:91:db:38:5d:79:8e:80: 63:08:93:c2:32:54:cc:f2:28:25:8a:60:4e:f3:72: 1c:b3:0e:66:52:09:85:77:35:78:16:45:2e:56:7c: 41:1d:6a:5f:f8:d6:e1:66:66:62:10:13:2c:d7:d5: 64:cc:3f:98:0d:6f:8e:76:57:b3:f6:1e:53:78:cb: 26:41:4b:b0:59:2e:af:a4:76:2a:b5:a5:0e:39:93: 82:f3:f8:27:d6:f7:27:cb:08:5c:33:a3:12:cb:9e: 42:08:34:71:66:ca:5c:26:5d:cd:f0:db:31:1e:75: 2a:d3:77:3f:f6:52:da:a0:b8:2c:0e:31:1d:3e:e1: 41:cd:9d:c0:88:5a:b6:ff:b1:bf:9a:a9:80:48:94: 95:2d:5a:78:3e:72:4f:d0:b2:c7:a6:14:d9:3c:3c: 38:47:ad:b9:4e:4c:29:54:9a:c0:91:64:21:c2:29: 3b:14:f5:79:3d:00:d4:d4:2d:5b:82:9e:f8:64:43: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:27:4C:66:86:DA:29:8F:64:72:E6:5A:10:1D:80:2F:E9:4C:AE:EB X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:23:97:fb:d2:74:e8:e4:e4:d2:11:b6:82:f9:ca:80:73:9d: 62:c2:98:16:e8:92:3f:63:f6:0a:c4:0c:b6:d2:ff:39:8e:e0: 19:2e:6e:45:86:38:9b:ae:34:2c:6f:26:f5:d0:69:59:17:0b: c9:37:89:99:82:b0:72:80:8e:69:fe:a2:2b:63:b6:3e:f0:7f: 84:bc:79:69:de:a3:05:fb:37:e1:a2:9f:99:7d:9f:26:3d:fe: 22:d3:66:b7:27:2f:91:05:2b:f7:fb:bd:0f:41:bb:34:4b:21: c8:4c:7e:b5:28:da:58:80:47:c7:21:21:ac:e1:67:f6:2d:d5: 29:8d:50:5d:4c:01:e0:6c:32:92:62:35:8c:5b:46:06:83:af: b1:f2:e9:8a:f9:fa:d0:bf:9d:5f:82:d7:86:23:a5:4f:78:5a: 0b:e6:de:a6:80:24:fd:66:1b:bb:07:ac:3f:b6:94:fe:c4:bf: 69:a2:2e:0c:38:22:c6:34:e5:c2:20:6c:ee:98:e0:b1:d8:7f: a6:35:ac:f6:0d:21:54:d7:05:78:7b:0e:d2:e1:ca:c3:7c:bf: 76:ef:34:e0:52:c0:95:49:4e:3d:ad:0b:ea:f1:24:d1:05:01: 06:bd:c1:83:28:fa:70:e1:4e:38:f4:6e:c5:f7:f8:36:59:45: dd:cd:1e:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjYwNDE3MDAyNTMyWhcNMjYwNDI0MDAyNTMyWjAYMRYwFAYD VQQDEw02OWUxN2RmZC0zMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOLyOr4zn6XTA8OrzqbmuqomLcD/w0ObnDCARtrYFFLZRLKZnOTeB6Zl9nfQ lpkExjbhcab5DT+j69DVZoBV5m6INZHbOF15joBjCJPCMlTM8iglimBO83Icsw5m UgmFdzV4FkUuVnxBHWpf+NbhZmZiEBMs19VkzD+YDW+Odlez9h5TeMsmQUuwWS6v pHYqtaUOOZOC8/gn1vcnywhcM6MSy55CCDRxZspcJl3N8NsxHnUq03c/9lLaoLgs DjEdPuFBzZ3AiFq2/7G/mqmASJSVLVp4PnJP0LLHphTZPDw4R625TkwpVJrAkWQh wik7FPV5PQDU1C1bgp74ZEMf+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4nTGaG 2imPZHLmWhAdgC/pTK7rMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALSOX+9J06OTk0hG2gvnKgHOdYsKYFuiSP2P2CsQMttL/OY7gGS5uRYY4m640 LG8m9dBpWRcLyTeJmYKwcoCOaf6iK2O2PvB/hLx5ad6jBfs34aKfmX2fJj3+ItNm tycvkQUr9/u9D0G7NEshyEx+tSjaWIBHxyEhrOFn9i3VKY1QXUwB4GwykmI1jFtG BoOvsfLpivn60L+dX4LXhiOlT3haC+bepoAk/WYbuwesP7aU/sS/aaIuDDgixjTl wiBs7pjgsdh/pjWs9g0hVNcFeHsO0uHKw3y/du804FLAlUlOPa0L6vEk0QUBBr3B gyj6cOFOOPRuxff4NllF3c0e8w== -----END CERTIFICATE-----Generated at Fri Apr 17 08:07:56 2026 by rpki-client