$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json) Hash identifier: S+1xEgzOouxo64cxde+5MciP3FCB0tGMSsK27+04+kw= Subject key identifier: F1:97:3E:03:1F:85:5C:7B:55:02:06:66:4F:C9:FE:08:15:3F:CA:DB Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft Manifest number: 0257 Signing time: Sun 19 Apr 2026 01:59:50 +0000 Manifest this update: Sun 19 Apr 2026 01:59:50 +0000 Manifest next update: Sun 26 Apr 2026 01:59:50 +0000 Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: zElJj+dLeWunNRryZUdZRp/AUKGLNj2rpXw0dW1otqY=) 2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: vb4T8uZCf2x+8euqTgS7w/JHSG99MYAiBw0Tkw+k354=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Validity Not Before: Apr 19 01:59:50 2026 GMT Not After : Apr 26 01:59:50 2026 GMT Subject: CN=69e43716-f147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:6b:3e:4c:e9:c4:d5:03:4e:20:a6:1e:ae: 67:1a:f6:75:bb:f2:cd:7d:e2:f1:b1:81:5d:c6:c1: f0:3a:cc:37:84:32:49:8a:33:c2:f5:62:22:be:d2: 23:70:13:90:5c:db:da:75:43:37:cc:78:e4:a9:b3: 0a:ff:a1:3b:3c:57:33:15:db:19:7d:2e:8c:16:da: 04:f6:4d:29:7a:22:52:02:aa:14:90:d6:ad:5e:63: 0c:9f:c6:cb:04:de:d1:42:d8:ad:27:05:7c:53:a4: fb:49:e9:44:a7:f3:46:c2:4e:00:2b:4d:25:f9:1f: fe:a0:ce:aa:0e:9d:f8:aa:75:fb:f9:46:55:4d:59: cc:7f:28:89:d2:5a:ae:7d:c9:bb:39:a7:ff:cd:d3: a4:f2:5a:a2:c9:a8:58:4b:2f:05:2e:8d:71:e7:88: 0e:be:db:38:fd:54:c4:c8:ef:18:5c:02:d1:27:27: 81:b3:21:16:67:d6:c9:7c:69:3d:2c:80:68:b4:22: 3d:d3:31:2d:f4:d1:57:b2:14:ec:aa:d5:0e:32:f8: 7d:4d:57:4c:f2:3c:49:b9:3f:a2:81:58:2f:06:8c: 07:c1:a7:48:38:b0:9b:c6:25:63:d5:d7:d9:ca:ba: f8:7e:50:96:91:54:af:d2:b8:8a:c7:75:53:93:d3: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:97:3E:03:1F:85:5C:7B:55:02:06:66:4F:C9:FE:08:15:3F:CA:DB X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b2:1d:2f:21:d4:31:a6:3c:12:d3:13:51:c8:f6:09:1c:a9: b3:ed:21:bc:c1:da:cb:c7:48:17:b1:44:8d:25:76:1c:33:8d: d1:eb:5e:7a:17:a2:47:f7:41:d7:c2:7d:87:19:45:67:d4:a6: 31:30:4d:af:c0:9f:22:c3:b8:1d:27:40:48:ef:b2:f4:64:2c: d8:15:d7:2d:04:cd:52:8e:68:e0:19:95:27:7b:f8:29:19:7c: 3b:60:e3:91:ae:6d:55:0a:a0:b9:83:f7:41:fe:1c:01:36:1b: e4:13:ef:21:d3:38:eb:ba:f2:de:65:64:01:38:bb:ce:7e:bc: 31:d9:08:b9:86:f0:c4:66:13:52:59:8a:65:4f:bc:9a:fc:ba: a4:b9:4c:42:ed:0c:9a:45:62:cf:31:6e:6b:a1:f2:5f:fb:c7: b4:80:dd:a3:0b:a8:a2:8f:ca:46:15:3f:8a:fe:9e:5f:3a:1e: 61:68:69:df:d9:33:69:08:fb:ed:41:88:4b:86:5e:6f:b7:f9: c3:6c:c2:c1:d8:1b:5a:6b:5e:c9:03:2c:78:e6:3a:49:20:95: a8:27:a2:03:6e:9f:b7:a5:69:c4:a4:20:ff:d0:f1:31:f7:12: 63:7c:b7:04:6e:07:0f:06:0e:3f:0e:9a:98:43:d1:05:c2:d5: 94:5c:9b:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjYwNDE5MDE1OTUwWhcNMjYwNDI2MDE1OTUwWjAYMRYwFAYD VQQDEw02OWU0MzcxNi1mMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvxrPkzpxNUDTiCmHq5nGvZ1u/LNfeLxsYFdxsHwOsw3hDJJijPC9WIivtIj cBOQXNvadUM3zHjkqbMK/6E7PFczFdsZfS6MFtoE9k0peiJSAqoUkNatXmMMn8bL BN7RQtitJwV8U6T7SelEp/NGwk4AK00l+R/+oM6qDp34qnX7+UZVTVnMfyiJ0lqu fcm7Oaf/zdOk8lqiyahYSy8FLo1x54gOvts4/VTEyO8YXALRJyeBsyEWZ9bJfGk9 LIBotCI90zEt9NFXshTsqtUOMvh9TVdM8jxJuT+igVgvBowHwadIOLCbxiVj1dfZ yrr4flCWkVSv0riKx3VTk9NdzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGXPgMf hVx7VQIGZk/J/ggVP8rbMB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTgyOC9EREY5MDA1QUE4RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2Jn cWRFUHV4N1o0ZE4wa2tjQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcLIdLyHUMaY8EtMTUcj2CRyps+0hvMHay8dIF7FEjSV2HDON0eteeheiR/dB 18J9hxlFZ9SmMTBNr8CfIsO4HSdASO+y9GQs2BXXLQTNUo5o4BmVJ3v4KRl8O2Dj ka5tVQqguYP3Qf4cATYb5BPvIdM467ry3mVkATi7zn68MdkIuYbwxGYTUlmKZU+8 mvy6pLlMQu0MmkVizzFua6HyX/vHtIDdowuooo/KRhU/iv6eXzoeYWhp39kzaQj7 7UGIS4Zeb7f5w2zCwdgbWmteyQMseOY6SSCVqCeiA26ft6VpxKQg/9DxMfcSY3y3 BG4HDwYOPw6amEPRBcLVlFybZg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:06:47 2026 by rpki-client