$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft File: ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json) Hash identifier: YNjo1x6tq7rMms25jUGGPdPzQ/1itM+e5b+jh923P4I= Subject key identifier: 6A:60:56:34:D6:BA:C8:10:52:D0:B7:3D:33:EE:42:32:BB:41:49:14 Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5 Certificate issuer: /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft Manifest number: 13 Signing time: Fri 17 Apr 2026 08:47:50 +0000 Manifest this update: Fri 17 Apr 2026 08:47:49 +0000 Manifest next update: Fri 24 Apr 2026 08:47:49 +0000 Files and hashes: 1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: ZVqhUzplJ1qCdMJyA+XnIWIp0pzdCbWfK6WHesRdzBA=) 2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5 Validity Not Before: Apr 17 08:47:49 2026 GMT Not After : Apr 24 08:47:49 2026 GMT Subject: CN=69e1f3b6-bbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:fd:32:d1:7b:c1:63:91:1a:43:2f:b9:a3: a3:62:5f:ad:d2:44:5c:31:4e:9e:87:04:ca:3f:0c: 6c:41:5a:33:6a:b9:69:dd:86:e0:d5:a1:f3:84:f2: 0e:13:63:1f:77:01:8c:09:97:32:cb:69:f7:4c:29: 04:cb:01:d9:4c:27:54:09:a8:a6:95:10:58:0f:c3: 79:52:57:5f:bf:94:f8:37:47:55:81:42:cc:bd:73: b3:5c:9e:b8:3f:4d:a1:55:53:38:91:6b:a5:2e:7b: 12:83:4f:66:ed:bf:8a:d2:11:56:69:79:6d:9e:45: f5:1f:81:9d:79:db:1d:8d:25:7e:13:e9:b4:8a:38: 7e:95:00:86:f4:7e:ab:c2:74:06:b2:d2:8f:6a:f3: a7:fd:97:e5:3c:a5:58:e1:71:b4:9f:a1:ee:72:3e: 3e:d1:46:a3:ca:0f:9a:c8:86:bd:47:b2:63:fd:56: d6:86:44:00:83:5e:99:27:c7:72:f9:1d:fc:50:b5: 85:71:fc:4a:7e:8b:25:2b:30:bc:75:7d:6e:34:82: cd:d1:30:ed:f4:0b:cc:64:ee:17:83:f3:1d:6f:2f: eb:8e:6a:9a:eb:24:f5:c8:48:fe:05:b5:18:f2:1d: af:2f:9b:1d:68:0d:56:bf:b6:1e:9f:64:f4:9b:e6: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:60:56:34:D6:BA:C8:10:52:D0:B7:3D:33:EE:42:32:BB:41:49:14 X509v3 Authority Key Identifier: keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2d:f3:7e:00:7d:cc:ba:5f:44:d9:2e:36:5f:17:ad:f6:9d: 3a:a1:aa:92:32:e4:8a:50:b8:a4:15:ff:10:b5:d8:4c:3a:6b: 7e:dd:a4:ac:89:db:b0:8d:ae:3f:8c:90:b6:a6:ca:de:55:68: 0b:20:c5:17:d2:49:dc:15:24:19:a2:a8:4f:32:94:12:e0:cb: 8a:1a:00:6b:5d:0b:9e:ce:74:c9:8a:59:05:9a:8d:40:ee:51: 6b:57:25:4d:fe:54:7e:e4:a4:0c:4e:13:28:7c:52:df:d3:55: 43:fd:61:c3:ac:bf:5d:83:46:35:a5:ad:3c:20:d6:81:61:a3: ff:79:b2:fc:88:c1:5a:d7:f6:b5:31:c4:2a:ec:af:df:ee:32: f1:27:a9:48:c2:ed:79:6f:96:61:e3:30:4f:30:93:df:5b:1b: ab:6d:79:d7:41:e4:ff:6f:97:70:7a:39:e4:ae:9d:5a:cc:52: fe:a8:36:1b:4c:59:67:2b:f8:bb:1e:34:4f:3b:55:5f:15:af: c4:4b:7b:13:69:c5:2d:b9:5f:56:4d:ab:2d:5c:97:aa:3e:97: fd:f1:f6:87:9b:45:f6:4f:ec:cb:92:2f:d0:64:1d:de:59:6c: 1a:f1:15:81:23:5a:90:4c:fd:26:89:0c:61:b5:6f:4e:74:0a: 4a:5d:12:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUEwMzExMC8GA1UEBRMoODlFMzY5M0I3MTIzNjhCMEZBQ0U2QkE0RTQ2Nzk3MDhB RjM5MzhCNTAeFw0yNjA0MTcwODQ3NDlaFw0yNjA0MjQwODQ3NDlaMBgxFjAUBgNV BAMTDTY5ZTFmM2I2LWJiYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6sv0y0XvBY5EaQy+5o6NiX63SRFwxTp6HBMo/DGxBWjNquWndhuDVofOE8g4T Yx93AYwJlzLLafdMKQTLAdlMJ1QJqKaVEFgPw3lSV1+/lPg3R1WBQsy9c7Ncnrg/ TaFVUziRa6UuexKDT2btv4rSEVZpeW2eRfUfgZ152x2NJX4T6bSKOH6VAIb0fqvC dAay0o9q86f9l+U8pVjhcbSfoe5yPj7RRqPKD5rIhr1HsmP9VtaGRACDXpknx3L5 HfxQtYVx/Ep+iyUrMLx1fW40gs3RMO30C8xk7heD8x1vL+uOaprrJPXISP4FtRjy Ha8vmx1oDVa/th6fZPSb5kXVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUamBWNNa6 yBBS0Lc9M+5CMrtBSRQwHwYDVR0jBBgwFoAUieNpO3EjaLD6zmuk5GeXCK85OLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0FFNzA5QTBDMjRE QzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxENnptdWs1R2VYQ0s4NU9M VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWVOcE8zRWphTEQ2em11azVHZVhDSzg1T0xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF QTAzL0FFNzA5QTBDMjREQzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxE NnptdWs1R2VYQ0s4NU9MVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyLfN+AH3Mul9E2S42Xxet9p06oaqSMuSKULikFf8QtdhMOmt+3aSsiduwja4/ jJC2psreVWgLIMUX0kncFSQZoqhPMpQS4MuKGgBrXQueznTJilkFmo1A7lFrVyVN /lR+5KQMThMofFLf01VD/WHDrL9dg0Y1pa08INaBYaP/ebL8iMFa1/a1McQq7K/f 7jLxJ6lIwu15b5Zh4zBPMJPfWxurbXnXQeT/b5dwejnkrp1azFL+qDYbTFlnK/i7 HjRPO1VfFa/ES3sTacUtuV9WTastXJeqPpf98faHm0X2T+zLki/QZB3eWWwa8RWB I1qQTP0miQxhtW9OdApKXRL4 -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:31 2026 by rpki-client