$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: ZiYvhs/slCCmtL1lfoMzEuS2LOcr2MDx50AkEWzHBDs= Subject key identifier: B0:05:1B:2E:71:81:6C:6F:F7:21:2C:21:DD:0F:4E:15:22:4D:73:D5 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 19A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1995 Signing time: Thu 16 Apr 2026 16:20:58 +0000 Manifest this update: Thu 16 Apr 2026 16:20:58 +0000 Manifest next update: Thu 23 Apr 2026 16:20:58 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: IVjuoNyb/vnCckuU8ysPRzBC7+60n2jM1/YqOU7RFnM=) 2: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: sk/aWgMAKHJV+S5wciXhAIcHYQF2Px3Gvke4ka59rbI=) 3: D421D958881611E78B9B0850C4F9AE02.roa (hash: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6565 (0x19a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Apr 16 16:20:58 2026 GMT Not After : Apr 23 16:20:58 2026 GMT Subject: CN=69e10c6a-a7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:7b:b5:f7:f3:84:89:19:49:7f:6a:6a:03: d5:f5:82:1b:56:4f:e8:1b:45:dd:94:52:26:9b:62: b7:d4:21:3e:32:0e:c3:d2:6d:16:92:ba:9a:ef:3c: d6:ce:e2:5f:b1:a7:11:ca:12:4f:73:d3:bd:37:81: 8f:c0:36:d5:8d:4e:37:b1:f3:af:7e:26:ef:c8:01: f6:02:b9:44:0b:fa:75:96:fe:7b:f6:1a:0a:97:ae: e8:47:bb:bf:a3:58:9e:b5:ba:6c:b5:19:60:cc:6b: 4b:41:37:ef:b5:8c:ee:38:12:ad:bb:d9:a3:83:c0: 3c:6f:d6:4f:f6:f7:f5:53:76:56:21:8f:51:00:b2: f1:74:5c:82:f3:f6:7c:40:11:37:a0:59:eb:d1:ec: a6:81:cb:14:41:fc:4a:28:20:de:25:9b:d2:ce:42: ca:eb:bb:db:18:05:2a:e8:d2:47:86:77:2c:20:48: 58:f2:71:16:ca:a6:ea:d0:c3:4d:85:48:d2:1e:66: 9c:3e:56:fb:b2:fb:54:c7:b9:5e:b8:20:98:c2:c6: bd:5a:c2:68:7d:f8:06:28:a0:71:4a:48:1b:05:8d: 80:af:40:23:9f:3b:d8:64:51:3e:74:b4:70:f5:a2: fa:79:1a:91:f4:0a:1d:a3:db:27:cd:c5:62:3c:ca: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:1B:2E:71:81:6C:6F:F7:21:2C:21:DD:0F:4E:15:22:4D:73:D5 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a6:96:1e:5f:27:aa:7a:c9:12:f1:c8:99:d5:bb:f7:35:2a: 3f:b2:59:48:2a:72:50:54:43:14:45:4e:5e:10:5d:e5:cf:43: 47:60:54:ad:91:be:df:95:8e:aa:5a:5e:e6:37:a1:95:13:ca: 3e:80:67:01:8f:19:20:6b:43:cf:8b:87:4a:44:86:d3:86:79: 28:75:c7:4b:86:84:44:f1:9d:fe:20:d1:eb:73:d8:c6:bd:d7: 87:bf:b6:35:8e:01:73:98:b9:15:28:a4:fe:09:78:34:88:11: 39:2d:43:cd:c1:6a:f2:44:c8:16:47:4b:c9:7b:21:e2:9a:3c: 7d:29:94:ae:da:8d:64:8d:4a:fc:13:20:bd:0d:63:3c:cf:b4: e2:76:34:17:5b:49:b6:19:06:65:56:5b:cd:41:97:9a:9d:d6: af:fc:09:b1:99:19:cb:41:b6:c2:07:3a:37:a2:47:4f:c1:5b: 9d:a4:89:36:68:af:3d:6c:7b:98:04:8c:98:3c:1d:38:77:0f: 98:21:48:df:59:5b:f9:68:d6:54:5a:57:14:01:0d:82:97:bb: 79:cf:9b:96:87:47:b1:ed:6e:b9:8e:52:40:95:83:3f:49:a5: 6e:16:86:60:23:61:23:42:f0:5e:58:9b:6a:fd:91:68:52:16: 90:24:d2:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYwNDE2MTYyMDU4WhcNMjYwNDIzMTYyMDU4WjAYMRYwFAYD VQQDEw02OWUxMGM2YS1hN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6F7tffzhIkZSX9qagPV9YIbVk/oG0XdlFImm2K31CE+Mg7D0m0Wkrqa7zzW zuJfsacRyhJPc9O9N4GPwDbVjU43sfOvfibvyAH2ArlEC/p1lv579hoKl67oR7u/ o1ietbpstRlgzGtLQTfvtYzuOBKtu9mjg8A8b9ZP9vf1U3ZWIY9RALLxdFyC8/Z8 QBE3oFnr0eymgcsUQfxKKCDeJZvSzkLK67vbGAUq6NJHhncsIEhY8nEWyqbq0MNN hUjSHmacPlb7svtUx7leuCCYwsa9WsJoffgGKKBxSkgbBY2Ar0AjnzvYZFE+dLRw 9aL6eRqR9Aodo9snzcViPMpMHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAFGy5x gWxv9yEsId0PThUiTXPVMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdqaWHl8nqnrJEvHImdW79zUqP7JZSCpyUFRDFEVOXhBd5c9DR2BUrZG+35WO qlpe5jehlRPKPoBnAY8ZIGtDz4uHSkSG04Z5KHXHS4aERPGd/iDR63PYxr3Xh7+2 NY4Bc5i5FSik/gl4NIgROS1DzcFq8kTIFkdLyXsh4po8fSmUrtqNZI1K/BMgvQ1j PM+04nY0F1tJthkGZVZbzUGXmp3Wr/wJsZkZy0G2wgc6N6JHT8FbnaSJNmivPWx7 mASMmDwdOHcPmCFI31lb+WjWVFpXFAENgpe7ec+blodHse1uuY5SQJWDP0mlbhaG YCNhI0LwXlibav2RaFIWkCTS2w== -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:37 2026 by rpki-client