$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft File: IHitW73x1MW5cLvik02aNV2zHOg.mft (raw, json) Hash identifier: 8OUvhpc6KbrJ9lrCJ7t4uqjXVmqtK93C7923TwNeznE= Subject key identifier: 05:2C:50:17:97:EA:EF:6D:B1:C6:FD:18:3E:6F:D6:84:68:E1:EB:A1 Authority key identifier: 20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 Certificate issuer: /CN=A91E4DFA/serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft Manifest number: 0595 Signing time: Thu 16 Apr 2026 23:09:39 +0000 Manifest this update: Thu 16 Apr 2026 23:09:38 +0000 Manifest next update: Thu 23 Apr 2026 23:09:38 +0000 Files and hashes: 1: IHitW73x1MW5cLvik02aNV2zHOg.crl (hash: wdKZfnhLxVo63R6Gy2yhXq1ZsKwwv1b0txFg8lMrFHw=) 2: 6D506318F1E711F0A2FD0FF1416F56BC.roa (hash: 0zuqIS8hbfV5A711MSih3uxG9p+AWNnca2aMV8NXs2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4DFA, serialNumber=2078AD5BBDF1D4C5B970BBE2934D9A355DB31CE8 Validity Not Before: Apr 16 23:09:38 2026 GMT Not After : Apr 23 23:09:38 2026 GMT Subject: CN=69e16c32-5b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:0b:f3:ee:92:26:62:45:e0:47:e9:7a:af: 12:31:ff:12:e7:3a:71:3a:c8:9d:b3:6f:be:f1:b0: 21:56:49:a2:a0:ed:61:54:3b:de:53:b5:5c:ae:e4: df:db:f1:15:8a:e3:f3:2f:b1:4b:3e:59:c2:ca:29: 0d:a4:56:c8:26:9b:e8:b6:26:23:c6:09:4e:f8:29: 00:d8:7c:59:52:38:41:92:6b:17:f8:16:58:2e:77: 43:a0:1a:a4:89:77:ac:90:01:7b:d5:48:f0:22:cf: fb:4e:bd:98:4c:0e:fd:e5:11:0b:d4:43:82:1e:8a: 62:7d:f7:7f:42:2b:3a:f3:f4:f9:a0:06:5c:8f:f0: 85:f1:91:37:44:55:f0:a5:2d:22:5d:64:0a:2e:bc: 59:9d:5f:e1:5b:4a:9d:c9:40:07:80:eb:64:c3:52: e0:58:56:87:8f:70:bd:8e:bc:37:0a:97:37:8d:7e: 4b:e2:90:86:3e:10:ac:db:9f:c6:9c:f3:61:5d:0b: 97:02:3d:4c:e0:f0:30:55:2a:f6:e6:3f:7e:ed:d6: f6:45:fb:51:db:86:e4:08:4a:04:21:cd:2c:38:23: dd:09:6d:c8:1f:2f:6e:e3:97:57:b2:40:1a:5b:52: 31:32:65:bc:6f:eb:cf:95:79:36:e1:cb:bb:ec:46: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2C:50:17:97:EA:EF:6D:B1:C6:FD:18:3E:6F:D6:84:68:E1:EB:A1 X509v3 Authority Key Identifier: keyid:20:78:AD:5B:BD:F1:D4:C5:B9:70:BB:E2:93:4D:9A:35:5D:B3:1C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHitW73x1MW5cLvik02aNV2zHOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4DFA/845984CE1A8511ECA76AEA3AC4F9AE02/IHitW73x1MW5cLvik02aNV2zHOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:55:d5:ca:36:da:3d:17:00:93:71:d8:e0:04:45:aa:29:2f: 83:74:e2:23:36:5a:46:b2:2f:73:4d:b8:28:29:35:cc:88:5a: 75:ec:d3:6e:61:6a:90:ed:c8:9d:d8:68:b4:28:9b:50:f9:11: 59:86:48:be:6f:62:69:21:ed:c0:35:6d:50:43:62:c3:a9:46: 9c:b0:f6:d2:4b:52:b8:7b:75:cc:58:50:e3:44:85:a1:f7:8a: f6:28:bc:56:3f:72:bd:af:bf:26:be:90:6d:cf:41:d8:eb:ac: a6:90:2d:f7:6b:48:94:8d:2e:f9:92:4c:fa:6b:e7:c4:77:2d: 1c:af:fa:db:40:64:ad:ef:5c:83:33:80:4d:3d:24:e7:41:9f: b6:e1:79:62:55:dd:12:67:a1:0e:84:ed:5b:e6:09:f0:33:a5: a1:16:f0:d5:54:5e:2d:c9:5a:52:99:47:14:fb:49:e2:9d:a9: 3e:f4:18:57:8c:cb:28:40:35:fd:78:1e:15:9c:73:38:a2:65: 60:6d:21:11:c2:43:a9:37:65:d7:3a:ee:ba:15:ec:d9:45:ce: 91:c7:20:43:02:ee:d8:4e:d6:f5:c4:af:62:7b:cc:3a:f7:13: c9:7e:1c:93:58:55:f2:59:64:27:a2:9d:92:66:c8:23:89:c3: 20:b9:78:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRERkExMTAvBgNVBAUTKDIwNzhBRDVCQkRGMUQ0QzVCOTcwQkJFMjkzNEQ5QTM1 NURCMzFDRTgwHhcNMjYwNDE2MjMwOTM4WhcNMjYwNDIzMjMwOTM4WjAYMRYwFAYD VQQDEw02OWUxNmMzMi01YjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NcL8+6SJmJF4Efpeq8SMf8S5zpxOsids2++8bAhVkmioO1hVDveU7VcruTf 2/EViuPzL7FLPlnCyikNpFbIJpvotiYjxglO+CkA2HxZUjhBkmsX+BZYLndDoBqk iXeskAF71UjwIs/7Tr2YTA795REL1EOCHopiffd/Qis68/T5oAZcj/CF8ZE3RFXw pS0iXWQKLrxZnV/hW0qdyUAHgOtkw1LgWFaHj3C9jrw3Cpc3jX5L4pCGPhCs25/G nPNhXQuXAj1M4PAwVSr25j9+7db2RftR24bkCEoEIc0sOCPdCW3IHy9u45dXskAa W1IxMmW8b+vPlXk24cu77EZw9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUsUBeX 6u9tscb9GD5v1oRo4euhMB8GA1UdIwQYMBaAFCB4rVu98dTFuXC74pNNmjVdsxzo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNERGQS84NDU5ODRDRTFB ODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFNVzVjTHZpazAyYU5WMnpI T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIaXRXNzN4MU1XNWNMdmlrMDJhTlYyekhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NERGQS84NDU5ODRDRTFBODUxMUVDQTc2QUVBM0FDNEY5QUUwMi9JSGl0VzczeDFN VzVjTHZpazAyYU5WMnpIT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbVXVyjbaPRcAk3HY4ARFqikvg3TiIzZaRrIvc024KCk1zIhadezTbmFqkO3I ndhotCibUPkRWYZIvm9iaSHtwDVtUENiw6lGnLD20ktSuHt1zFhQ40SFofeK9ii8 Vj9yva+/Jr6Qbc9B2OusppAt92tIlI0u+ZJM+mvnxHctHK/620Bkre9cgzOATT0k 50GftuF5YlXdEmehDoTtW+YJ8DOloRbw1VReLclaUplHFPtJ4p2pPvQYV4zLKEA1 /XgeFZxzOKJlYG0hEcJDqTdl1zruuhXs2UXOkccgQwLu2E7W9cSvYnvMOvcTyX4c k1hV8llkJ6KdkmbII4nDILl46g== -----END CERTIFICATE-----Generated at Fri Apr 17 06:45:05 2026 by rpki-client