$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: 8zZgTsWxq5zkbrYcH+WALxHXw1S+cUBlKSaaPaZnY6E= Subject key identifier: 23:AF:57:F5:E9:C1:04:A1:39:2C:05:47:7B:22:38:5E:5F:53:CC:54 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0CE8 Signing time: Thu 16 Apr 2026 18:12:06 +0000 Manifest this update: Thu 16 Apr 2026 18:12:05 +0000 Manifest next update: Thu 23 Apr 2026 18:12:05 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: u3/ROhXI/bin0/SB1AMkbH6q1GnzPJQ2R+JNSaM1mCM=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Apr 16 18:12:05 2026 GMT Not After : Apr 23 18:12:05 2026 GMT Subject: CN=69e12675-eeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:f7:b3:0a:21:f7:1b:4d:8f:80:5f:e0:b6: a6:51:c9:50:7a:fd:bd:98:cd:29:0c:1c:00:60:92: 9e:d7:48:1b:69:2e:04:d0:ba:dc:32:5b:48:3b:14: 31:02:08:d2:85:81:bc:4f:71:ce:e7:04:9b:5c:59: fe:51:9f:5b:34:0a:9e:f3:22:49:84:9d:5c:de:c7: d5:e6:2f:f7:af:a2:4d:46:7e:46:c4:48:e1:35:68: 0e:a9:e8:88:5d:ca:1c:a6:2d:90:0e:20:88:f0:5b: 57:c3:3f:05:9d:34:f6:40:fc:60:14:62:27:35:70: cf:72:df:59:f6:f0:ea:c6:df:d6:96:76:11:56:c1: dc:99:de:e9:fe:13:7d:0b:f5:e5:c6:bf:8e:1e:65: fe:a4:90:27:7b:eb:5d:d2:61:ee:b3:40:5c:38:ab: 86:5f:2f:86:72:66:c7:56:0e:f7:f1:a7:6e:92:51: 91:ef:8b:4c:13:5f:98:ba:8a:0a:0b:72:b8:7f:27: 63:a4:b6:63:ff:6f:2a:a3:2d:a8:53:c3:89:02:b6: 7e:a5:21:f9:33:24:65:bb:29:05:57:ff:1a:4d:92: 5d:ea:4e:54:28:41:ae:d1:b0:69:c8:3d:9a:e1:c8: 74:8a:ac:ec:00:f2:b6:48:b1:6b:96:29:67:eb:40: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AF:57:F5:E9:C1:04:A1:39:2C:05:47:7B:22:38:5E:5F:53:CC:54 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a7:74:ca:36:98:8d:bc:ee:6f:37:72:f6:e0:aa:43:96:c9: 2c:86:81:9a:07:bb:64:a2:72:31:c9:85:05:7a:2e:5b:16:f3: d1:7e:dd:af:bf:bb:91:43:f3:18:3c:c6:d2:14:98:6b:e7:27: e9:38:c9:37:bf:85:b1:6e:a2:26:cf:ed:55:32:c3:fc:c0:cc: 86:41:ea:ff:91:8c:4a:38:03:00:0e:41:27:70:6a:e6:99:d6: f6:be:e5:32:a8:5d:73:cd:4b:34:0a:6b:24:05:31:4c:40:5c: 0e:27:e5:79:76:84:df:ef:9e:35:d0:f2:d0:38:73:69:69:27: 81:eb:1c:55:8a:43:bc:6a:0b:77:f7:eb:47:06:5c:ff:9f:4d: 89:ac:63:54:0f:57:00:82:fa:18:d6:2c:78:d9:c0:41:3d:db: 95:79:f9:b4:f3:91:08:f4:cf:24:96:a1:42:c3:68:03:d3:3a: 26:16:74:6c:6c:1f:18:b2:c6:7e:f2:d4:59:cd:40:b7:7f:4f: e6:04:97:60:11:4a:d3:ca:93:5e:21:46:5f:ca:f6:1b:c1:28: 5c:e4:d3:48:70:71:7b:3a:07:e0:0e:b5:9b:db:3c:06:9d:f0: 52:76:ec:a4:ec:0b:d4:cc:4e:fe:e7:c6:7a:0d:58:39:c8:8f: 3c:90:aa:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYwNDE2MTgxMjA1WhcNMjYwNDIzMTgxMjA1WjAYMRYwFAYD VQQDEw02OWUxMjY3NS1lZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVH3swoh9xtNj4Bf4LamUclQev29mM0pDBwAYJKe10gbaS4E0LrcMltIOxQx AgjShYG8T3HO5wSbXFn+UZ9bNAqe8yJJhJ1c3sfV5i/3r6JNRn5GxEjhNWgOqeiI Xcocpi2QDiCI8FtXwz8FnTT2QPxgFGInNXDPct9Z9vDqxt/WlnYRVsHcmd7p/hN9 C/Xlxr+OHmX+pJAne+td0mHus0BcOKuGXy+GcmbHVg738aduklGR74tME1+YuooK C3K4fydjpLZj/28qoy2oU8OJArZ+pSH5MyRluykFV/8aTZJd6k5UKEGu0bBpyD2a 4ch0iqzsAPK2SLFrliln60ALDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOvV/Xp wQShOSwFR3siOF5fU8xUMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu6d0yjaYjbzubzdy9uCqQ5bJLIaBmge7ZKJyMcmFBXouWxbz0X7dr7+7kUPz GDzG0hSYa+cn6TjJN7+FsW6iJs/tVTLD/MDMhkHq/5GMSjgDAA5BJ3Bq5pnW9r7l Mqhdc81LNAprJAUxTEBcDifleXaE3++eNdDy0DhzaWkngescVYpDvGoLd/frRwZc /59NiaxjVA9XAIL6GNYseNnAQT3blXn5tPORCPTPJJahQsNoA9M6JhZ0bGwfGLLG fvLUWc1At39P5gSXYBFK08qTXiFGX8r2G8EoXOTTSHBxezoH4A61m9s8Bp3wUnbs pOwL1MxO/ufGeg1YOciPPJCq2w== -----END CERTIFICATE-----Generated at Fri Apr 17 12:02:21 2026 by rpki-client