$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: SeomNmvh8w1Cmpbo1DFd/21UzE+7r1U/wC2uTNS6z68= Subject key identifier: ED:A5:91:2B:5F:F2:4C:45:6D:F5:C3:34:D7:B9:E1:28:EE:AF:56:8E Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E1A Signing time: Thu 16 Apr 2026 15:28:08 +0000 Manifest this update: Thu 16 Apr 2026 15:28:07 +0000 Manifest next update: Thu 23 Apr 2026 15:28:07 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: f45Ogk7pQ9TfQJpkmpYDDyabns6aU9jZgHuhuO5bMOA=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: /EIrPIM51/gSZuhZi7PXLaV6H0Mn6QzhbGDSyj34JEc=) 3: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: N17i/Vo6qq4GynkhbHnkWbsIC9qgwD2VSBbjxJt5D3I=) 4: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: VFEJ2pC2bmVwEIh9Ul33fbeRMTH5fCAYFl8iU/+lajY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11839 (0x2e3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Apr 16 15:28:07 2026 GMT Not After : Apr 23 15:28:07 2026 GMT Subject: CN=69e10007-312f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:43:ed:24:dd:fb:07:c5:6a:e9:2c:4c:49: ba:00:76:f8:ff:8f:d7:5f:a1:16:69:6f:45:f8:d3: 6f:d8:82:94:fa:37:71:09:de:a3:7f:ce:0d:bf:dd: a3:e5:4c:3e:19:69:42:42:81:f2:c2:e8:3b:49:62: 54:ed:51:1b:ab:ed:4a:9b:9a:d5:cb:6e:c4:48:47: dc:8f:19:81:dd:67:09:f6:95:40:53:9e:ec:2a:29: a1:0d:14:99:e1:19:70:a3:56:7a:58:f4:05:ec:4d: 46:c5:e8:e9:62:3e:a8:95:db:62:04:49:4a:f3:df: ad:ab:e9:4a:94:ac:1d:2e:93:04:90:78:56:f7:c8: 2b:21:7c:15:ba:a1:99:71:ef:b3:d4:3b:d2:52:04: 16:43:42:2a:28:5b:84:ac:76:c4:f0:16:fe:75:3e: 86:e4:31:68:18:a4:80:75:3a:2b:36:c8:00:eb:5e: 18:ad:b5:c8:0b:86:af:63:40:39:bb:4f:4c:62:9c: 45:5f:25:0a:62:a3:b3:ed:2c:d8:e8:f0:0c:ad:a3: 2f:04:d4:ea:44:6c:47:9a:dd:2e:12:74:2a:80:ae: 81:f4:09:0b:80:a6:74:7b:4c:fe:15:ab:7b:47:2b: 52:06:be:e3:1a:58:f8:13:73:59:49:58:7b:fd:5e: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A5:91:2B:5F:F2:4C:45:6D:F5:C3:34:D7:B9:E1:28:EE:AF:56:8E X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:98:27:36:57:84:11:c6:31:48:57:e2:cf:7f:c7:f8:ec:61: 70:d4:a6:05:c5:29:d9:e9:db:5d:4f:68:be:5d:52:3f:ed:75: c8:ea:e4:2e:b7:0e:35:07:99:6c:9d:09:d7:71:aa:af:fc:1e: ec:5b:39:a0:88:fc:eb:5c:cd:90:3f:c6:19:f1:2c:0d:93:13: 5d:03:48:92:b3:35:07:05:b9:30:08:17:e0:e0:c1:10:cb:aa: 6d:51:94:d8:35:6f:de:62:76:87:01:16:28:67:56:b1:10:38: 94:e4:99:7e:1c:a3:83:e6:0f:66:c9:46:41:37:f8:3c:25:c3: ef:ad:18:81:58:2d:2e:55:39:09:2c:86:91:e9:b9:40:8b:45: 42:b6:f3:9d:2e:96:09:eb:0e:69:76:47:97:ca:5f:31:2d:ce: 88:fb:e8:74:2a:33:cf:cc:c1:3d:8b:69:09:8a:94:49:81:2a: ba:6b:0a:7b:70:71:53:c2:b0:37:8d:ee:fd:b8:13:84:16:3a: d8:ae:a7:06:68:92:28:3a:06:8a:99:d8:9a:d1:f7:10:bc:c7: d7:fa:56:e0:4b:3a:e3:e6:64:e4:0f:8f:5a:5a:a6:ef:65:a5: 08:3a:67:2f:22:b8:e1:89:18:26:d6:5d:e1:77:dc:16:83:77: 94:b1:fa:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwNDE2MTUyODA3WhcNMjYwNDIzMTUyODA3WjAYMRYwFAYD VQQDEw02OWUxMDAwNy0zMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20JD7STd+wfFauksTEm6AHb4/4/XX6EWaW9F+NNv2IKU+jdxCd6jf84Nv92j 5Uw+GWlCQoHywug7SWJU7VEbq+1Km5rVy27ESEfcjxmB3WcJ9pVAU57sKimhDRSZ 4Rlwo1Z6WPQF7E1GxejpYj6oldtiBElK89+tq+lKlKwdLpMEkHhW98grIXwVuqGZ ce+z1DvSUgQWQ0IqKFuErHbE8Bb+dT6G5DFoGKSAdTorNsgA614YrbXIC4avY0A5 u09MYpxFXyUKYqOz7SzY6PAMraMvBNTqRGxHmt0uEnQqgK6B9AkLgKZ0e0z+Fat7 RytSBr7jGlj4E3NZSVh7/V5ZcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO2lkStf 8kxFbfXDNNe54Sjur1aOMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANZgnNleEEcYxSFfiz3/H+OxhcNSmBcUp2enbXU9ovl1SP+11yOrkLrcONQeZ bJ0J13Gqr/we7Fs5oIj861zNkD/GGfEsDZMTXQNIkrM1BwW5MAgX4ODBEMuqbVGU 2DVv3mJ2hwEWKGdWsRA4lOSZfhyjg+YPZslGQTf4PCXD760YgVgtLlU5CSyGkem5 QItFQrbznS6WCesOaXZHl8pfMS3OiPvodCozz8zBPYtpCYqUSYEqumsKe3BxU8Kw N43u/bgThBY62K6nBmiSKDoGipnYmtH3ELzH1/pW4Es64+Zk5A+PWlqm72WlCDpn LyK44YkYJtZd4XfcFoN3lLH6sA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:22 2026 by rpki-client