$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: coMIL7fssOCY+zyoOv600+uolaLYpsVXEhKXshrQi0w= Subject key identifier: BA:26:F7:8D:34:0F:94:46:99:B1:22:4F:85:1D:AB:13:EC:93:87:98 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 092D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 08D0 Signing time: Thu 16 Apr 2026 20:26:37 +0000 Manifest this update: Thu 16 Apr 2026 20:26:36 +0000 Manifest next update: Thu 23 Apr 2026 20:26:36 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: O/ujav6unI3Txkz3MABQFWxBx5JteOJuVSg2wIhnlCE=) 2: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=) 4: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=) 5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=) 6: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=) 7: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=) 8: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2349 (0x92d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Apr 16 20:26:36 2026 GMT Not After : Apr 23 20:26:36 2026 GMT Subject: CN=69e145fc-08d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:41:6e:42:29:48:7c:cd:17:bd:4a:76:7c: ef:b5:da:f0:c3:dd:4e:ca:3a:d4:0a:75:58:cb:38: 43:0f:e8:98:91:7b:6a:87:9b:27:bd:18:96:15:4b: 8d:fc:77:48:d7:b8:0b:c7:4c:88:b8:13:37:47:ec: 05:31:05:65:88:dd:fc:78:14:f3:94:49:d0:c8:35: 68:a3:9d:18:3d:6f:0d:f5:38:af:f9:80:de:e7:54: 04:fc:2a:cc:b5:59:99:19:d3:e1:fb:c3:a9:d2:3d: cf:a8:a3:2e:2f:f9:9f:78:1b:15:1c:63:21:69:57: 01:2c:7a:f0:17:5a:61:da:b2:16:cf:89:01:9d:22: ac:33:f1:76:2f:01:6c:6b:fe:9f:f3:0c:77:c9:06: ec:9c:ca:78:91:1a:1c:79:6a:70:fd:1a:52:0b:aa: 0b:c9:1c:5a:ec:97:5f:f4:ae:83:5c:42:55:bf:97: 87:e9:5d:b0:74:b7:07:5d:f7:cc:dd:62:3e:23:75: 3b:fb:87:37:d0:6b:4b:5d:3a:76:b2:aa:2d:4d:7a: 39:92:33:c7:7a:3d:f3:11:4f:40:78:fd:3c:65:0d: f6:ae:c2:a1:6e:b9:73:ee:ae:3c:a6:28:95:5e:6b: 98:27:34:c7:4b:77:3a:c3:03:02:4e:55:67:4a:60: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:F7:8D:34:0F:94:46:99:B1:22:4F:85:1D:AB:13:EC:93:87:98 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:70:32:b5:60:14:97:e7:38:eb:e6:6f:b0:cb:fd:d6:32:99: f0:9c:c3:0c:d1:88:76:67:ac:49:01:1c:ab:7c:71:31:13:58: 1a:f6:7d:4d:44:13:ad:c7:05:51:51:f2:27:e8:62:dc:b9:b5: a7:69:28:f7:89:dd:fa:94:e4:1c:67:80:db:0a:c4:4d:60:11: bf:d1:8c:6f:ea:0f:93:9a:fd:e0:71:05:11:5a:a0:d2:77:df: 8f:cf:be:bc:ae:47:32:91:56:2a:39:22:9e:f6:11:53:35:d1: 49:d0:df:0b:e7:20:64:e1:12:67:7b:81:a1:f0:d1:84:3a:de: 7c:35:47:e7:4d:b4:96:95:9a:6d:68:e5:c3:e3:97:15:c9:53: 22:5b:85:8c:d6:f4:24:74:f2:b6:6e:c3:cd:f6:96:7f:f9:3d: 8d:50:ea:9f:cd:f7:24:83:70:c5:3f:2c:a7:32:14:52:b7:3e: d6:48:03:11:e0:b0:06:75:ed:21:65:66:0f:7b:07:1e:08:fd: 19:f6:bb:9e:03:30:17:42:90:75:57:e7:e3:a8:a8:93:49:06: d7:36:ee:83:fc:46:1d:f9:3c:8e:8b:60:f2:7e:ba:3b:c2:ae: ea:07:b2:0c:7c:16:77:8e:21:ad:4e:ae:4e:e3:5a:e4:50:5f: b5:9d:7f:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwNDE2MjAyNjM2WhcNMjYwNDIzMjAyNjM2WjAYMRYwFAYD VQQDEw02OWUxNDVmYy0wOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31lBbkIpSHzNF71Kdnzvtdrww91OyjrUCnVYyzhDD+iYkXtqh5snvRiWFUuN /HdI17gLx0yIuBM3R+wFMQVliN38eBTzlEnQyDVoo50YPW8N9Tiv+YDe51QE/CrM tVmZGdPh+8Op0j3PqKMuL/mfeBsVHGMhaVcBLHrwF1ph2rIWz4kBnSKsM/F2LwFs a/6f8wx3yQbsnMp4kRoceWpw/RpSC6oLyRxa7Jdf9K6DXEJVv5eH6V2wdLcHXffM 3WI+I3U7+4c30GtLXTp2sqotTXo5kjPHej3zEU9AeP08ZQ32rsKhbrlz7q48piiV XmuYJzTHS3c6wwMCTlVnSmCAgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLom9400 D5RGmbEiT4UdqxPsk4eYMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYHAytWAUl+c46+ZvsMv91jKZ8JzDDNGIdmesSQEcq3xxMRNYGvZ9TUQTrccF UVHyJ+hi3Lm1p2ko94nd+pTkHGeA2wrETWARv9GMb+oPk5r94HEFEVqg0nffj8++ vK5HMpFWKjkinvYRUzXRSdDfC+cgZOESZ3uBofDRhDrefDVH5020lpWabWjlw+OX FclTIluFjNb0JHTytm7DzfaWf/k9jVDqn833JINwxT8spzIUUrc+1kgDEeCwBnXt IWVmD3sHHgj9Gfa7ngMwF0KQdVfn46iok0kG1zbug/xGHfk8jotg8n66O8Ku6gey DHwWd44hrU6uTuNa5FBftZ1/kw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:07:06 2026 by rpki-client