$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft File: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft (raw, json) Hash identifier: u4XNG/lRA5OYiuQ+bXauoM+To23a6iNh3tAGYh91Ppo= Subject key identifier: 7F:42:DA:57:5A:59:C9:93:6B:06:92:07:F1:EE:30:E1:BB:D3:5C:F0 Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8 Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft Manifest number: 0CA7 Signing time: Thu 16 Apr 2026 18:22:26 +0000 Manifest this update: Thu 16 Apr 2026 18:22:26 +0000 Manifest next update: Thu 23 Apr 2026 18:22:26 +0000 Files and hashes: 1: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl (hash: mDHrsCsgbkiWXI0loo7blmg91opzJqGAPlP/g6u+v+I=) 2: D6F76118231C11EF84144357C4F9AE02.roa (hash: yUneVRwb6AK5oOkcJJhtc6mqN9EGhX27fjT+u8BimTY=) 3: 01283BC2532011EBAE6D1F37C4F9AE02.roa (hash: ZlqFcYcT6pIlzRDg6ZnJ/8IVNFun6dYuHQ2aoW0BchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C475, serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8 Validity Not Before: Apr 16 18:22:26 2026 GMT Not After : Apr 23 18:22:26 2026 GMT Subject: CN=69e128e2-ab64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:fb:dc:89:ef:23:48:ac:8f:74:ea:9a:c9: 44:ff:4b:dd:b7:57:db:f6:11:a2:c0:9f:97:b1:d1: 57:69:a5:af:ac:08:2f:22:2c:6e:67:c9:c8:72:13: 12:1c:7d:36:3e:27:93:cd:3a:7f:31:f4:60:c7:c1: d5:fb:32:4e:cb:bc:09:93:9b:99:a3:c6:3b:f8:9a: bf:c3:b3:42:06:4d:4a:62:45:34:57:21:63:f9:7b: a0:1a:52:0c:b8:09:74:80:77:65:7c:59:c0:3e:9b: 21:04:a1:be:0b:a6:d6:31:ce:85:55:24:0b:1c:6f: 5a:0f:cd:6d:9f:5c:de:1d:c6:55:db:19:f7:77:92: 39:19:1d:86:21:a1:08:b6:14:b7:04:49:db:fb:b1: 4c:06:3a:d0:87:ca:87:81:8f:af:97:d0:dd:02:39: 91:f7:00:cf:c1:38:75:de:9a:5d:01:8e:d2:0f:a0: cc:fa:14:83:ad:ba:53:e1:34:da:09:a9:17:bd:7b: b5:4b:68:fe:d9:53:00:42:69:c6:c4:08:59:d1:24: 7d:8a:4f:2c:fd:7f:0b:93:d1:c6:b1:11:b2:1d:5b: f7:25:c4:98:7b:f6:35:d6:51:77:10:1c:e8:7f:8a: 30:b5:67:a5:39:87:02:a6:69:c6:0b:e4:f4:ac:ca: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:DA:57:5A:59:C9:93:6B:06:92:07:F1:EE:30:E1:BB:D3:5C:F0 X509v3 Authority Key Identifier: keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dd:06:7d:11:20:b6:da:5b:27:33:c1:ae:5e:ad:80:9b:20: d2:42:87:ac:53:5e:50:da:c8:f6:cc:38:f6:e1:a5:8d:b3:b2: 05:8e:ad:58:dd:45:92:d9:d2:ec:eb:c5:c6:82:0b:bd:94:55: d0:2e:3d:ca:ec:c9:8e:99:c5:21:66:f0:2f:d3:d0:3c:4a:e0: 11:c5:4b:35:ff:2f:d4:85:0f:76:e2:16:85:21:98:f2:97:d7: 1e:55:b8:1f:40:bc:1d:d3:46:6f:47:c8:f2:11:bd:c2:95:85: aa:cd:55:08:13:bd:6a:c6:9b:39:19:13:38:0b:6c:5d:7f:eb: 1d:db:65:26:12:f8:13:07:55:e7:1e:d5:80:54:7b:28:49:93: 38:00:16:8f:b8:55:69:94:08:76:d6:a7:46:b0:46:c3:ff:8e: 3b:45:72:99:38:f7:9f:66:03:03:e9:18:1f:d9:c4:9b:f3:54: 2b:e0:15:97:d2:ff:0e:d0:b7:3a:ae:c3:5d:c8:3e:60:70:47: c2:48:26:f0:6b:eb:5f:2b:5d:88:cc:62:1b:4f:0c:46:3e:ea: 1c:07:b1:d5:4c:51:cd:48:90:53:df:99:91:ca:2a:c6:e7:45: 76:96:be:f1:01:2f:67:69:04:48:43:c5:b1:98:27:3e:96:e3: 84:d3:fd:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0NzUxMTAvBgNVBAUTKDIyODUwN0VGRjgxQUEyOEU0OTFFMzI2RkJEMURDM0Iz QzkwODcyQjgwHhcNMjYwNDE2MTgyMjI2WhcNMjYwNDIzMTgyMjI2WjAYMRYwFAYD VQQDEw02OWUxMjhlMi1hYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnT/73InvI0isj3TqmslE/0vdt1fb9hGiwJ+XsdFXaaWvrAgvIixuZ8nIchMS HH02PieTzTp/MfRgx8HV+zJOy7wJk5uZo8Y7+Jq/w7NCBk1KYkU0VyFj+XugGlIM uAl0gHdlfFnAPpshBKG+C6bWMc6FVSQLHG9aD81tn1zeHcZV2xn3d5I5GR2GIaEI thS3BEnb+7FMBjrQh8qHgY+vl9DdAjmR9wDPwTh13ppdAY7SD6DM+hSDrbpT4TTa CakXvXu1S2j+2VMAQmnGxAhZ0SR9ik8s/X8Lk9HGsRGyHVv3JcSYe/Y11lF3EBzo f4owtWelOYcCpmnGC+T0rMoQ7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9C2lda WcmTawaSB/HuMOG701zwMB8GA1UdIwQYMBaAFCKFB+/4GqKOSR4yb70dw7PJCHK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQ3NS9FMDIyQTA1ODBF OTExMUVBQjBFODc0NDFDNEY5QUUwMi9Jb1VIN19nYW9vNUpIakp2dlIzRHM4a0lj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvVUg3X2dhb281SkhqSnZ2UjNEczhrSWNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQ3NS9FMDIyQTA1ODBFOTExMUVBQjBFODc0NDFDNEY5QUUwMi9Jb1VIN19nYW9v NUpIakp2dlIzRHM4a0ljcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAet0GfREgttpbJzPBrl6tgJsg0kKHrFNeUNrI9sw49uGljbOyBY6tWN1FktnS 7OvFxoILvZRV0C49yuzJjpnFIWbwL9PQPErgEcVLNf8v1IUPduIWhSGY8pfXHlW4 H0C8HdNGb0fI8hG9wpWFqs1VCBO9asabORkTOAtsXX/rHdtlJhL4EwdV5x7VgFR7 KEmTOAAWj7hVaZQIdtanRrBGw/+OO0VymTj3n2YDA+kYH9nEm/NUK+AVl9L/DtC3 Oq7DXcg+YHBHwkgm8GvrXytdiMxiG08MRj7qHAex1UxRzUiQU9+ZkcoqxudFdpa+ 8QEvZ2kESEPFsZgnPpbjhNP9Bg== -----END CERTIFICATE-----Generated at Sat Apr 18 00:32:08 2026 by rpki-client