$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft File: IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft (raw, json) Hash identifier: WkSz/Uu/ITit8f6UAQGMYMaJHLwDUzaH/ZQZDymTcQI= Subject key identifier: CA:08:1B:C8:8A:61:E0:EE:28:E2:48:12:9E:DA:12:CC:71:B1:D4:E6 Authority key identifier: 21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA Certificate issuer: /CN=A91EA409/serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft Manifest number: 0115 Signing time: Fri 17 Apr 2026 05:38:32 +0000 Manifest this update: Fri 17 Apr 2026 05:38:32 +0000 Manifest next update: Fri 24 Apr 2026 05:38:32 +0000 Files and hashes: 1: IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl (hash: 3FYUR2PGmwMB4CPKh/vTm7Xf5xe0dByi0Q1k1HGmxkA=) 2: E9F177B89D9C11EFA9526A6CC4F9AE02.roa (hash: aIh23/3y8xgm3k9QGKPnGbqB42NXH2OLUXREX9l30Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=2164DD59A615D5F2E3393E72098A73AD868E78DA Validity Not Before: Apr 17 05:38:32 2026 GMT Not After : Apr 24 05:38:32 2026 GMT Subject: CN=69e1c758-8f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:7f:06:69:5a:5d:e2:18:ac:46:d8:6d:92: c2:47:30:b1:ed:18:13:7b:f2:6e:19:77:54:c7:f4: 47:d8:56:70:39:36:a6:b7:71:ba:bb:76:50:41:41: 9a:e0:73:18:0e:24:ef:85:3e:10:9d:96:39:42:53: 8d:09:ec:b5:c8:9f:4e:0b:31:80:cd:6d:79:d7:6b: e0:3d:92:17:c0:42:92:f9:97:e4:7c:29:66:39:6b: 3e:3e:7f:45:80:69:58:e8:29:b3:59:11:2c:d1:37: 2e:93:b2:2c:6a:d4:b9:47:28:82:67:e2:3e:0d:8f: 41:47:87:45:1b:2f:18:a4:dc:27:6c:54:68:03:35: cf:4e:eb:e2:07:7c:b7:75:e0:5e:fe:95:1f:d6:ab: 22:4f:07:af:e3:02:a0:cf:c5:16:0e:b2:7d:15:7c: cf:96:f0:d4:69:6b:f6:0d:12:14:09:66:d8:6f:2f: 99:9e:ef:a1:8f:52:e8:90:80:9e:5d:e9:88:6a:56: a7:1b:ef:e4:52:cc:55:e4:cd:37:ac:8b:c1:3e:5d: 9e:c3:9b:9d:7f:32:90:63:63:25:f7:13:19:c3:23: e4:97:88:e1:be:4e:6d:52:a2:ee:fc:3d:6a:91:93: e5:d8:35:c6:c8:56:c3:57:7e:91:0e:71:c2:f0:71: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:1B:C8:8A:61:E0:EE:28:E2:48:12:9E:DA:12:CC:71:B1:D4:E6 X509v3 Authority Key Identifier: keyid:21:64:DD:59:A6:15:D5:F2:E3:39:3E:72:09:8A:73:AD:86:8E:78:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IWTdWaYV1fLjOT5yCYpzrYaOeNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/F944E3CC9CAB11EFAB595516C4F9AE02/IWTdWaYV1fLjOT5yCYpzrYaOeNo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:ed:70:5c:4d:5d:5f:98:12:58:a1:d3:9f:ca:85:bc:60: 58:34:49:04:04:aa:43:e3:8f:96:2d:52:60:8f:67:05:cf:35: 5f:e2:01:ff:c1:84:d7:dd:ff:40:c3:26:62:a0:3c:4f:a8:5a: 6a:6a:05:54:e3:6b:66:79:d9:01:15:3c:2a:07:b9:32:a9:42: 5f:f1:33:b9:5e:97:c0:ff:37:99:a1:22:68:69:75:1f:9e:4d: 27:5f:54:3a:91:ce:cf:54:30:04:5d:bf:91:cf:8c:ed:2b:61: 5a:a1:cc:85:01:71:3e:e3:72:d3:4b:e9:5a:4b:4e:d2:ff:32: bb:3c:63:5f:7a:49:54:9d:59:66:7b:aa:a0:24:52:0a:01:06: 88:b8:87:49:56:48:02:f6:f9:f8:a0:12:54:eb:0f:2a:70:8c: 8e:71:7b:58:c7:e5:02:61:75:ed:cf:11:60:0c:e6:50:07:13: d1:8e:4e:a7:61:4f:c3:4b:af:d3:f6:b0:a1:a4:a9:6a:c1:5b: a2:d7:0c:d0:fe:7f:73:11:43:ea:d9:30:16:05:b8:c0:9a:cf: e9:13:26:78:ac:34:5d:50:af:3c:19:19:3e:e8:1a:85:6b:3e: 6f:f7:bf:80:bb:4c:f7:95:06:3e:7e:82:0f:10:29:cf:fc:80: 25:62:a0:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE0MDkxMTAvBgNVBAUTKDIxNjRERDU5QTYxNUQ1RjJFMzM5M0U3MjA5OEE3M0FE ODY4RTc4REEwHhcNMjYwNDE3MDUzODMyWhcNMjYwNDI0MDUzODMyWjAYMRYwFAYD VQQDEw02OWUxYzc1OC04ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo1/BmlaXeIYrEbYbZLCRzCx7RgTe/JuGXdUx/RH2FZwOTamt3G6u3ZQQUGa 4HMYDiTvhT4QnZY5QlONCey1yJ9OCzGAzW1512vgPZIXwEKS+ZfkfClmOWs+Pn9F gGlY6CmzWREs0Tcuk7IsatS5RyiCZ+I+DY9BR4dFGy8YpNwnbFRoAzXPTuviB3y3 deBe/pUf1qsiTwev4wKgz8UWDrJ9FXzPlvDUaWv2DRIUCWbYby+Znu+hj1LokICe XemIalanG+/kUsxV5M03rIvBPl2ew5udfzKQY2Ml9xMZwyPkl4jhvk5tUqLu/D1q kZPl2DXGyFbDV36RDnHC8HF2EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoIG8iK YeDuKOJIEp7aEsxxsdTmMB8GA1UdIwQYMBaAFCFk3VmmFdXy4zk+cgmKc62Gjnja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQwOS9GOTQ0RTNDQzlD QUIxMUVGQUI1OTU1MTZDNEY5QUUwMi9JV1RkV2FZVjFmTGpPVDV5Q1lwenJZYU9l Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lXVGRXYVlWMWZMak9UNXlDWXB6cllhT2VOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTQwOS9GOTQ0RTNDQzlDQUIxMUVGQUI1OTU1MTZDNEY5QUUwMi9JV1RkV2FZVjFm TGpPVDV5Q1lwenJZYU9lTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOIHtcFxNXV+YElih05/KhbxgWDRJBASqQ+OPli1SYI9nBc81X+IB/8GE193/ QMMmYqA8T6haamoFVONrZnnZARU8Kge5MqlCX/EzuV6XwP83maEiaGl1H55NJ19U OpHOz1QwBF2/kc+M7SthWqHMhQFxPuNy00vpWktO0v8yuzxjX3pJVJ1ZZnuqoCRS CgEGiLiHSVZIAvb5+KASVOsPKnCMjnF7WMflAmF17c8RYAzmUAcT0Y5Op2FPw0uv 0/awoaSpasFbotcM0P5/cxFD6tkwFgW4wJrP6RMmeKw0XVCvPBkZPugahWs+b/e/ gLtM95UGPn6CDxApz/yAJWKg0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:53 2026 by rpki-client