$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: 6sITdeVtvKZFRXKB1oWSpQS2BdbIx5B4sS+7lK43FtM= Subject key identifier: 9C:A0:07:F5:98:06:ED:EF:89:4A:C0:92:91:9F:CC:5D:45:BD:A9:74 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 01FD Signing time: Fri 17 Apr 2026 02:56:53 +0000 Manifest this update: Fri 17 Apr 2026 02:56:52 +0000 Manifest next update: Fri 24 Apr 2026 02:56:52 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: ZwkhiSME/sz8U3820nGe6xSaARIOGvot2HhxvKtUN3w=) 2: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 3: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 4: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Apr 17 02:56:52 2026 GMT Not After : Apr 24 02:56:52 2026 GMT Subject: CN=69e1a175-1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:0e:d3:35:ca:4a:f8:d0:a3:b6:fb:03:6f: c8:f2:04:a8:98:77:32:58:9a:0a:20:3c:df:6c:50: 72:82:f9:ec:97:a5:21:19:75:89:ff:a1:b1:6d:25: 1d:27:de:ca:8b:f9:be:71:7e:b0:e2:aa:d1:7e:7b: ac:60:4a:08:40:c6:6e:17:4e:a6:17:26:5c:87:b2: c5:d4:b4:e1:4f:8a:67:0e:ea:bd:a9:e4:52:38:17: 78:36:86:aa:16:db:84:4a:96:f9:22:2b:5c:e5:d4: 95:ec:c1:74:f3:e1:9e:52:3e:9f:1f:ae:ea:32:3c: ac:cf:9f:81:56:f4:a3:8e:bc:de:4f:39:23:51:b6: 98:6b:33:a1:cf:fa:9f:5f:ab:10:f0:d5:8c:08:ce: fa:5a:b1:74:b4:1e:54:bb:fd:21:64:fa:a4:65:37: 33:74:b8:80:6e:c5:e3:57:b5:24:9d:14:49:aa:7d: 11:7e:5f:fc:93:ab:d9:af:ad:cf:ad:71:ea:4b:08: 46:29:28:3c:16:59:59:7a:e1:e4:ba:21:52:2d:28: c4:14:c5:c4:08:b4:99:43:84:c5:ab:11:3f:3b:2f: 9b:ea:84:52:a3:af:d5:ae:57:a5:b9:1f:b5:8a:31: 7c:d4:d5:d1:70:37:a3:0b:75:78:24:55:5b:d3:ef: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A0:07:F5:98:06:ED:EF:89:4A:C0:92:91:9F:CC:5D:45:BD:A9:74 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:84:93:f4:13:6d:cb:e3:12:bb:8c:e8:7c:a7:71:87:92: b3:78:ed:01:b2:ce:27:12:02:ad:12:88:28:de:4c:49:8d:0e: 4f:14:da:e8:ed:6f:b4:30:3e:74:4b:7d:22:93:55:b3:84:47: da:c7:42:69:80:39:85:83:8d:41:d0:86:69:a3:47:94:e4:13: cf:5a:66:55:18:f5:1b:d6:ad:f5:e4:74:49:f4:29:70:7c:09: 22:32:cc:ae:cc:ba:87:b5:15:c3:0e:fa:f8:a8:af:c4:9f:fd: 41:22:35:b7:24:80:73:76:ec:9e:90:6f:bd:31:94:49:f5:b8: 2e:32:f5:2d:94:29:ee:bc:5a:42:0c:6f:44:24:dd:47:d0:5c: 8a:33:7d:99:6e:d9:2b:fb:26:ad:83:48:df:06:0d:de:2d:44: 1a:8a:bf:34:b5:d5:89:ed:15:6c:a1:66:ff:73:d5:7b:bd:aa: 45:74:7b:32:d6:17:95:45:ea:03:28:95:e1:97:15:95:2d:f7: fb:f0:c1:4c:bb:70:69:07:86:78:0f:ca:af:34:e5:dc:8d:c9: aa:ed:8e:9b:1f:48:88:36:e2:c4:fe:eb:18:49:a8:c3:d3:77: b8:af:e2:82:84:73:45:79:82:cf:14:1f:34:7e:0c:31:1b:a7: 16:65:ba:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwNDE3MDI1NjUyWhcNMjYwNDI0MDI1NjUyWjAYMRYwFAYD VQQDEw02OWUxYTE3NS0xZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6EO0zXKSvjQo7b7A2/I8gSomHcyWJoKIDzfbFBygvnsl6UhGXWJ/6GxbSUd J97Ki/m+cX6w4qrRfnusYEoIQMZuF06mFyZch7LF1LThT4pnDuq9qeRSOBd4Noaq FtuESpb5Iitc5dSV7MF08+GeUj6fH67qMjysz5+BVvSjjrzeTzkjUbaYazOhz/qf X6sQ8NWMCM76WrF0tB5Uu/0hZPqkZTczdLiAbsXjV7UknRRJqn0Rfl/8k6vZr63P rXHqSwhGKSg8FllZeuHkuiFSLSjEFMXECLSZQ4TFqxE/Oy+b6oRSo6/VrleluR+1 ijF81NXRcDejC3V4JFVb0++e3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJygB/WY Bu3viUrAkpGfzF1Fval0MB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPcOEk/QTbcvjEruM6HyncYeSs3jtAbLOJxICrRKIKN5MSY0OTxTa6O1vtDA+ dEt9IpNVs4RH2sdCaYA5hYONQdCGaaNHlOQTz1pmVRj1G9at9eR0SfQpcHwJIjLM rsy6h7UVww76+KivxJ/9QSI1tySAc3bsnpBvvTGUSfW4LjL1LZQp7rxaQgxvRCTd R9BcijN9mW7ZK/smrYNI3wYN3i1EGoq/NLXVie0VbKFm/3PVe72qRXR7MtYXlUXq AyiV4ZcVlS33+/DBTLtwaQeGeA/KrzTl3I3Jqu2Omx9IiDbixP7rGEmow9N3uK/i goRzRXmCzxQfNH4MMRunFmW6gg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:01 2026 by rpki-client