$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: r/R2FcugoF4QJxU3vWwAgEmVh8IrzLQzQB57T4S0tDg= Subject key identifier: F3:C1:32:A7:39:21:09:D1:48:7B:52:3B:C8:FC:D1:2F:70:35:7A:92 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 06DF Signing time: Thu 16 Apr 2026 22:22:47 +0000 Manifest this update: Thu 16 Apr 2026 22:22:46 +0000 Manifest next update: Thu 23 Apr 2026 22:22:46 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: fOptB8HYMfRgx6rnAzuEeZg3oe5n+qkZu7IecfXVoOo=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: aaio9X7jltQXqJl+GwT+Oyhu5HboHbxMTjJ0svAwdfQ=) 3: E1201A0422D611EFAE700044C4F9AE02.roa (hash: vKRLCMHI6DzeezZqcA22y1WOCwRUjFKs9GH1QdWcjCQ=) 4: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: pf1K+6UJXd5dAs7JKyICOO/jFMb69psfiJsvXQNbxBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Apr 16 22:22:46 2026 GMT Not After : Apr 23 22:22:46 2026 GMT Subject: CN=69e16136-4ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:34:8f:53:44:ab:bf:7a:ba:11:00:85:f2: d7:98:d0:6d:59:2b:74:a5:90:47:d0:b8:93:36:26: 62:5f:48:b4:db:73:84:41:ef:b9:c1:f4:b0:fe:87: f3:32:c5:a2:f8:83:27:fe:9b:f6:0b:b1:a4:f3:73: ec:2c:22:2b:51:76:9f:27:4a:d6:59:04:e3:ad:86: 47:59:0a:83:65:7b:0b:81:15:ab:9b:c5:f3:a3:05: ab:25:d0:99:8a:11:ab:c2:41:8c:45:5c:a9:76:dd: 02:b2:e9:85:28:62:bf:8c:bb:2c:8b:f9:71:1b:36: 2c:0e:15:e1:76:2d:08:25:16:88:c6:5d:4c:57:5f: a1:4e:cc:ec:ef:8d:24:40:14:82:41:9a:49:02:34: 0a:50:b1:4f:ee:3c:fe:e5:bc:71:59:cc:aa:cc:88: 17:e5:26:8d:27:d2:92:b4:da:fa:34:c7:85:d3:c2: e1:dd:e9:9c:b3:70:eb:30:da:e8:4c:1e:5a:81:c7: cb:1d:f4:c2:6c:27:c3:63:e1:73:16:b6:16:8f:2a: a2:86:7c:12:ea:f9:e4:d5:49:1b:de:7d:a7:f2:cd: 67:4b:16:c1:ce:57:48:a0:98:fd:cb:17:22:50:7e: 05:68:eb:fb:d9:9a:e5:a9:be:f7:00:c4:4c:1f:1c: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:32:A7:39:21:09:D1:48:7B:52:3B:C8:FC:D1:2F:70:35:7A:92 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:be:e9:63:93:c7:86:bc:b1:3b:41:e3:59:be:be:cf:30:42: 05:32:3a:45:64:6d:44:ec:ae:80:7b:f7:90:8a:b3:55:a6:78: 67:75:98:98:f6:23:4e:69:ec:b4:57:9d:75:de:95:59:02:7f: 37:ad:d2:ba:d3:d4:fc:3b:a0:da:02:fd:34:82:16:49:7e:fa: 9b:14:d3:63:67:74:0b:43:a3:58:42:13:bb:39:a8:26:73:06: 03:45:a3:2b:0a:a0:ab:0a:d3:92:d1:e1:ea:26:a2:88:8b:f4: ec:a5:ea:69:e4:5a:c4:c5:48:4e:13:1f:35:12:39:2d:63:5a: 28:4e:f6:25:2a:f8:8a:49:05:1e:4f:5d:79:15:f6:d4:53:fc: 71:99:04:32:bb:a0:d0:f3:90:e5:da:95:c3:e7:35:66:8c:9b: c6:b8:9b:5d:55:c3:b2:b7:c5:9f:cf:03:e0:5a:96:f0:bd:08: 1a:7b:04:b4:51:15:0e:38:06:0d:ef:f4:77:d3:86:4f:38:ce: bf:f5:6e:39:b5:e7:29:11:a1:bd:60:a6:5b:c9:c9:b5:68:12: 02:c0:fd:22:01:d5:e5:48:9b:7e:32:69:ec:04:a6:a5:40:75: e1:b9:ba:6f:ef:2b:7d:d0:d6:f9:15:ac:cf:e5:56:e7:41:b6: 24:5b:ea:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjYwNDE2MjIyMjQ2WhcNMjYwNDIzMjIyMjQ2WjAYMRYwFAYD VQQDEw02OWUxNjEzNi00YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBI0j1NEq796uhEAhfLXmNBtWSt0pZBH0LiTNiZiX0i023OEQe+5wfSw/ofz MsWi+IMn/pv2C7Gk83PsLCIrUXafJ0rWWQTjrYZHWQqDZXsLgRWrm8XzowWrJdCZ ihGrwkGMRVypdt0CsumFKGK/jLssi/lxGzYsDhXhdi0IJRaIxl1MV1+hTszs740k QBSCQZpJAjQKULFP7jz+5bxxWcyqzIgX5SaNJ9KStNr6NMeF08Lh3emcs3DrMNro TB5agcfLHfTCbCfDY+FzFrYWjyqihnwS6vnk1Ukb3n2n8s1nSxbBzldIoJj9yxci UH4FaOv72Zrlqb73AMRMHxzS7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPBMqc5 IQnRSHtSO8j80S9wNXqSMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcL7pY5PHhryxO0HjWb6+zzBCBTI6RWRtROyugHv3kIqzVaZ4Z3WYmPYjTmns tFeddd6VWQJ/N63SutPU/Dug2gL9NIIWSX76mxTTY2d0C0OjWEITuzmoJnMGA0Wj KwqgqwrTktHh6iaiiIv07KXqaeRaxMVIThMfNRI5LWNaKE72JSr4ikkFHk9deRX2 1FP8cZkEMrug0POQ5dqVw+c1ZoybxribXVXDsrfFn88D4FqW8L0IGnsEtFEVDjgG De/0d9OGTzjOv/VuObXnKRGhvWCmW8nJtWgSAsD9IgHV5UibfjJp7ASmpUB14bm6 b+8rfdDW+RWsz+VW50G2JFvqxg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:15:58 2026 by rpki-client