$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: EGYpM9yfAxBeuEpO4R1ocN7AwSnFakbHoFyqfizwQ5c= Subject key identifier: 0D:01:34:A2:30:C4:B3:F7:5D:BC:87:C8:9A:9B:5C:0B:22:D1:9D:D2 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 028C Signing time: Fri 17 Apr 2026 01:42:58 +0000 Manifest this update: Fri 17 Apr 2026 01:42:57 +0000 Manifest next update: Fri 24 Apr 2026 01:42:57 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: a60DFWfjy/VX5JobfnWzrx2JoXsTQd8ZrAGevPGW25o=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Apr 17 01:42:57 2026 GMT Not After : Apr 24 01:42:57 2026 GMT Subject: CN=69e19021-1fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:63:c0:9e:40:2e:bf:a6:c3:26:65:01:49: b0:49:32:1c:34:31:24:fc:43:03:3f:c9:29:0b:c1: 2c:c1:a8:c5:62:17:6f:5b:81:3a:bb:28:eb:2f:eb: db:d8:8e:16:c9:57:cc:48:7a:7a:c2:a6:8b:a7:c4: bc:59:83:25:4b:81:a8:64:e5:53:34:9e:83:a3:8c: b4:7f:93:92:0d:a1:23:c3:12:f8:64:a9:05:b6:bc: 8f:55:82:6b:4b:27:ed:06:45:9e:0f:6d:07:ab:5b: 9e:5e:ef:8a:5a:01:6d:1c:c1:16:46:4b:76:9d:16: 53:9e:45:32:b4:ba:da:74:2d:d4:8b:84:54:c9:b3: 4d:be:22:dc:cf:5a:61:af:28:eb:a1:56:e3:2e:0f: bf:31:de:4e:7c:f4:66:68:eb:c7:ce:96:f6:41:28: 6e:a7:4e:79:00:fb:6a:c4:58:10:6f:40:a0:7e:a3: 21:f1:57:d5:1e:70:b6:c3:82:ae:07:a2:c2:ea:a2: 47:b6:0b:56:e8:45:b8:53:ec:64:d2:0f:d1:33:1e: 13:8b:a8:6f:d2:0c:da:3e:78:3d:57:66:83:51:fe: 50:24:fb:91:18:c8:a8:cb:eb:b9:e8:29:f1:bb:a9: d6:ba:1d:d0:0a:74:ee:dd:3a:3e:0c:41:d9:62:17: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:34:A2:30:C4:B3:F7:5D:BC:87:C8:9A:9B:5C:0B:22:D1:9D:D2 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:f4:dd:27:64:c5:f8:1b:d6:7e:81:ff:46:b0:70:40:d4: f2:48:0c:ce:7b:97:21:6b:b5:3b:82:25:d7:34:38:3e:92:58: 6f:9a:64:a4:bd:3d:6d:b3:88:f5:9d:53:f3:b4:d4:d7:eb:2f: 78:fb:35:41:a8:7d:2a:84:f1:a5:7b:81:c7:1b:43:24:39:6c: 2b:41:c7:2b:b3:43:b2:29:32:5d:b5:ca:76:46:91:13:ad:0e: 0b:af:d2:f1:e7:c0:87:85:00:3e:16:57:8c:14:d5:aa:12:f0: 8c:80:59:55:a1:66:56:d3:f2:ab:12:e4:96:0e:bf:e8:29:02: a7:0c:5b:88:40:16:ae:68:d4:e3:37:f7:22:ef:45:bb:9e:5b: 06:12:04:f3:30:6e:12:82:f3:c3:50:ad:2b:88:d2:30:a2:ed: 12:36:f8:46:51:53:bc:2d:78:83:79:59:9f:7c:29:4f:44:3b: 9a:c1:51:1f:1e:7d:a5:65:ae:9f:0c:20:92:ad:0b:b2:ae:d0: 22:27:5b:72:24:da:3f:3a:90:ea:58:ff:19:9f:22:7a:bc:e9: 1b:a6:ba:fa:01:14:93:a2:f2:1c:38:d3:06:f4:5b:bf:f7:cd: a1:09:76:e8:7b:c7:08:b2:e5:71:11:e7:2c:93:09:54:cb:7f: b8:f8:36:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwNDE3MDE0MjU3WhcNMjYwNDI0MDE0MjU3WjAYMRYwFAYD VQQDEw02OWUxOTAyMS0xZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOFjwJ5ALr+mwyZlAUmwSTIcNDEk/EMDP8kpC8EswajFYhdvW4E6uyjrL+vb 2I4WyVfMSHp6wqaLp8S8WYMlS4GoZOVTNJ6Do4y0f5OSDaEjwxL4ZKkFtryPVYJr SyftBkWeD20Hq1ueXu+KWgFtHMEWRkt2nRZTnkUytLradC3Ui4RUybNNviLcz1ph ryjroVbjLg+/Md5OfPRmaOvHzpb2QShup055APtqxFgQb0CgfqMh8VfVHnC2w4Ku B6LC6qJHtgtW6EW4U+xk0g/RMx4Ti6hv0gzaPng9V2aDUf5QJPuRGMioy+u56Cnx u6nWuh3QCnTu3To+DEHZYhfGbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0BNKIw xLP3XbyHyJqbXAsi0Z3SMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfn03Sdkxfgb1n6B/0awcEDU8kgMznuXIWu1O4Il1zQ4PpJYb5pkpL09bbOI 9Z1T87TU1+svePs1Qah9KoTxpXuBxxtDJDlsK0HHK7NDsikyXbXKdkaRE60OC6/S 8efAh4UAPhZXjBTVqhLwjIBZVaFmVtPyqxLklg6/6CkCpwxbiEAWrmjU4zf3Iu9F u55bBhIE8zBuEoLzw1CtK4jSMKLtEjb4RlFTvC14g3lZn3wpT0Q7msFRHx59pWWu nwwgkq0Lsq7QIidbciTaPzqQ6lj/GZ8ierzpG6a6+gEUk6LyHDjTBvRbv/fNoQl2 6HvHCLLlcRHnLJMJVMt/uPg2Lg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:08 2026 by rpki-client