$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: MtUatv+TXrRVUgYbk8BaJnlbdQuJWvSOCzvtOTnU9W4= Subject key identifier: B3:F2:7E:3F:F4:F7:F2:FD:93:FB:CF:77:48:5A:5B:D1:28:7F:A7:2D Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: FE Signing time: Thu 16 Apr 2026 17:29:20 +0000 Manifest this update: Thu 16 Apr 2026 17:29:20 +0000 Manifest next update: Thu 23 Apr 2026 17:29:20 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: GzenFnCwKETfBdp3/kfpWtVdqVQA3apCqHtoAN0PgSA=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Apr 16 17:29:20 2026 GMT Not After : Apr 23 17:29:20 2026 GMT Subject: CN=69e11c70-0785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:7d:07:dd:c1:34:33:3d:ae:96:27:8c:cd: d6:3d:9f:f2:6d:e1:a5:95:6a:d0:e0:fd:c1:ca:b4: 3a:5c:44:c2:9d:d6:c7:4b:4a:a6:0d:86:94:21:51: 7c:f4:11:50:93:62:07:3f:5c:c6:e4:cd:7a:cd:be: c8:8f:4c:d3:f5:bb:73:4f:ce:34:8b:f5:31:15:e5: 2e:03:0d:46:d6:35:15:3a:9b:52:67:8f:56:d4:d0: 5d:87:b0:91:91:57:08:1a:c9:ce:3d:e7:3e:a4:3f: a3:9a:0c:b3:32:8d:8d:06:96:c4:bd:cd:ac:56:36: 04:bf:d7:92:ad:31:23:b2:2c:bc:f9:62:69:1a:44: 7f:ba:bb:28:1e:5a:c8:bb:8c:81:63:2b:8c:0d:84: 7e:1d:df:72:0b:c8:a2:fd:4f:f9:88:1a:4c:15:58: fe:e1:81:c2:76:90:3a:ee:2e:32:c6:84:07:20:d5: e4:d1:14:28:43:c9:a4:e5:a0:9d:a2:4e:3f:92:53: c8:02:d9:48:a2:04:10:c3:4a:6a:63:27:c8:42:3b: 12:e0:bb:05:a0:cd:36:46:1b:56:0c:22:1d:3a:5f: f0:3c:49:bb:3e:1a:e1:8b:24:0c:f6:7f:f3:20:26: 09:3f:51:f5:3f:43:58:fc:c9:2f:1a:f3:d2:1f:ec: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F2:7E:3F:F4:F7:F2:FD:93:FB:CF:77:48:5A:5B:D1:28:7F:A7:2D X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:53:92:57:25:6e:1b:32:05:9d:cf:68:a1:02:d8:d3:ee:70: 49:c6:d6:7e:8f:78:0e:07:e3:5a:24:8c:af:89:2c:a3:4c:7a: 68:d9:1f:3f:e0:12:82:ad:bd:c3:d2:a0:59:ea:bc:05:29:6b: d0:e2:93:c3:b8:af:da:2b:99:26:f9:d2:ef:23:5b:56:2f:64: 80:0c:c7:89:35:aa:43:5b:37:96:f5:d3:09:96:50:7d:42:60: 55:4b:09:b8:c6:ce:0a:05:05:79:cb:c0:b4:ee:66:d1:02:46: a9:35:54:1c:6c:5e:49:3c:47:2c:14:10:5e:41:af:c9:8d:c8: 4a:d4:6d:c0:f0:6c:57:2f:19:e8:3d:0d:a9:22:99:ff:c2:c5: 58:00:62:c9:39:f1:23:1c:bf:ae:36:c8:30:90:ca:9b:30:4c: e8:0a:27:db:3a:7a:d1:e7:1f:82:c2:bf:70:e2:01:cf:30:f7: 76:10:28:ff:23:90:b4:7f:73:0f:11:7d:5d:57:3d:c1:d8:34: e7:c6:02:3b:24:fb:0f:76:62:7f:cd:9a:8a:a8:5b:26:0a:e1: 36:69:f8:59:71:2f:f7:3f:b2:a7:d1:16:4e:8a:ae:92:fc:97: 95:3b:16:80:ce:de:02:24:b2:2d:8e:f6:62:a4:ab:ca:64:e5: 92:96:18:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYwNDE2MTcyOTIwWhcNMjYwNDIzMTcyOTIwWjAYMRYwFAYD VQQDEw02OWUxMWM3MC0wNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZp9B93BNDM9rpYnjM3WPZ/ybeGllWrQ4P3ByrQ6XETCndbHS0qmDYaUIVF8 9BFQk2IHP1zG5M16zb7Ij0zT9btzT840i/UxFeUuAw1G1jUVOptSZ49W1NBdh7CR kVcIGsnOPec+pD+jmgyzMo2NBpbEvc2sVjYEv9eSrTEjsiy8+WJpGkR/ursoHlrI u4yBYyuMDYR+Hd9yC8ii/U/5iBpMFVj+4YHCdpA67i4yxoQHINXk0RQoQ8mk5aCd ok4/klPIAtlIogQQw0pqYyfIQjsS4LsFoM02RhtWDCIdOl/wPEm7PhrhiyQM9n/z ICYJP1H1P0NY/MkvGvPSH+wZeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPyfj/0 9/L9k/vPd0haW9Eof6ctMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoFOSVyVuGzIFnc9ooQLY0+5wScbWfo94DgfjWiSMr4kso0x6aNkfP+ASgq29 w9KgWeq8BSlr0OKTw7iv2iuZJvnS7yNbVi9kgAzHiTWqQ1s3lvXTCZZQfUJgVUsJ uMbOCgUFecvAtO5m0QJGqTVUHGxeSTxHLBQQXkGvyY3IStRtwPBsVy8Z6D0NqSKZ /8LFWABiyTnxIxy/rjbIMJDKmzBM6Aon2zp60ecfgsK/cOIBzzD3dhAo/yOQtH9z DxF9XVc9wdg058YCOyT7D3Zif82aiqhbJgrhNmn4WXEv9z+yp9EWToqukvyXlTsW gM7eAiSyLY72YqSrymTlkpYYng== -----END CERTIFICATE-----Generated at Fri Apr 17 15:37:15 2026 by rpki-client