$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: OKRgoS6SH+rPu0bRTU8W8hdhHH4adr58EKRKvebFspM= Subject key identifier: 73:0C:4E:EE:2A:1A:73:89:4D:9F:8E:C9:0F:7E:03:00:F7:B8:53:0B Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 0193 Signing time: Fri 17 Apr 2026 04:05:43 +0000 Manifest this update: Fri 17 Apr 2026 04:05:43 +0000 Manifest next update: Fri 24 Apr 2026 04:05:43 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: bxaglozRMqAzo+pL6S+jwcJdVd1XXC17vVkYsWOqPzQ=) 2: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: KXSh6prRPhPWK5BnqXhTsFwQImo2BvM4I7HOo4Rrn/M=) 3: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: m02khT/jg2hbvP72RR7nK1qweNEQkqkW4mCPiNuzwrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Apr 17 04:05:43 2026 GMT Not After : Apr 24 04:05:43 2026 GMT Subject: CN=69e1b197-9b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:2b:28:f1:2c:df:a6:5e:52:64:7b:11:10: 88:43:e7:4a:49:33:bf:29:76:86:ce:71:ca:8d:c4: 2a:25:94:50:41:17:de:d9:e9:16:f2:81:8d:fc:8b: 98:2d:1f:72:88:7e:a4:71:f7:85:7e:5d:65:b7:0d: d0:47:f6:6e:60:72:30:00:9b:d8:9e:e6:72:32:b0: 5d:c3:f8:6a:fb:fe:d9:96:db:cf:9e:4d:df:d2:71: be:b2:3e:f0:67:d5:08:e0:d6:62:95:7b:5f:0e:a4: 42:4c:e0:aa:c5:e9:7d:c2:c1:ef:43:bd:1d:2b:aa: 20:e2:8a:eb:55:5d:06:f4:07:23:f6:57:42:87:84: 79:fd:5d:8c:cd:ac:53:c0:b7:64:51:1c:9b:10:75: ee:e2:bc:5c:75:da:d7:54:c6:66:88:98:7f:e2:a8: 50:d6:eb:17:db:59:a0:3e:da:da:ad:08:41:b7:7b: 71:5c:5c:83:ab:e9:db:70:b7:08:ad:4f:60:10:1c: 8e:b9:d3:b4:eb:d2:7c:28:0b:a9:66:da:9f:e1:44: 31:fb:96:1f:f3:69:dc:d1:0e:3a:18:8e:0f:08:fe: de:64:cb:8c:43:c7:34:95:d7:89:bd:74:b0:f5:2d: e0:c1:f4:cf:a8:39:59:b7:9b:f4:6d:3e:45:ec:e5: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0C:4E:EE:2A:1A:73:89:4D:9F:8E:C9:0F:7E:03:00:F7:B8:53:0B X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:01:c1:59:8a:86:08:37:2c:b1:d9:f1:82:1a:d5:4d:ef:b4: f3:98:1d:e5:00:59:fc:46:a2:2a:4d:aa:5e:9d:a4:3d:1a:ac: 6e:81:5e:c0:e3:b7:48:8e:1b:84:02:13:16:f7:f2:f5:9b:47: c5:9a:7a:ec:a1:25:cb:2b:c4:63:2c:b8:3a:60:8a:9f:0e:b9: 1b:53:5e:96:3f:4c:cb:06:7a:dd:cf:6a:6d:fc:d3:80:64:b1: ee:9b:db:93:07:ac:e6:98:32:9a:51:3e:0a:56:43:c0:d7:04: 50:97:54:54:66:67:9a:95:0a:30:c1:52:ca:7a:5b:0f:f3:c4: 31:9c:57:56:d5:df:62:87:9b:53:d6:a7:3a:e9:50:31:dd:91: 20:f7:34:47:fd:9c:6d:94:03:de:01:d0:95:c1:7b:61:89:65: af:0c:49:f8:56:0b:0e:c5:37:1b:04:88:4b:6d:f2:8d:b2:97: 56:4d:fc:73:be:bb:7d:c2:53:44:06:89:6a:2f:c8:8a:ca:35: d0:82:11:e0:f3:c3:ae:cd:5a:b1:53:1e:8f:4f:d1:26:73:f6: 05:df:e4:83:7d:ea:f5:9e:99:e4:b0:e6:fa:d6:5b:25:c7:0a: 77:f9:b6:6a:a6:76:8e:50:c3:4d:66:02:e7:30:01:fb:e9:93: 43:63:d0:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjYwNDE3MDQwNTQzWhcNMjYwNDI0MDQwNTQzWjAYMRYwFAYD VQQDEw02OWUxYjE5Ny05Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6krKPEs36ZeUmR7ERCIQ+dKSTO/KXaGznHKjcQqJZRQQRfe2ekW8oGN/IuY LR9yiH6kcfeFfl1ltw3QR/ZuYHIwAJvYnuZyMrBdw/hq+/7ZltvPnk3f0nG+sj7w Z9UI4NZilXtfDqRCTOCqxel9wsHvQ70dK6og4orrVV0G9Acj9ldCh4R5/V2MzaxT wLdkURybEHXu4rxcddrXVMZmiJh/4qhQ1usX21mgPtrarQhBt3txXFyDq+nbcLcI rU9gEByOudO069J8KAupZtqf4UQx+5Yf82nc0Q46GI4PCP7eZMuMQ8c0ldeJvXSw 9S3gwfTPqDlZt5v0bT5F7OXh/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMMTu4q GnOJTZ+OyQ9+AwD3uFMLMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASAHBWYqGCDcssdnxghrVTe+085gd5QBZ/EaiKk2qXp2kPRqsboFewOO3SI4b hAITFvfy9ZtHxZp67KElyyvEYyy4OmCKnw65G1Nelj9MywZ63c9qbfzTgGSx7pvb kwes5pgymlE+ClZDwNcEUJdUVGZnmpUKMMFSynpbD/PEMZxXVtXfYoebU9anOulQ Md2RIPc0R/2cbZQD3gHQlcF7YYllrwxJ+FYLDsU3GwSIS23yjbKXVk38c767fcJT RAaJai/Iiso10IIR4PPDrs1asVMej0/RJnP2Bd/kg33q9Z6Z5LDm+tZbJccKd/m2 aqZ2jlDDTWYC5zAB++mTQ2PQdw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:37:55 2026 by rpki-client