$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json) Hash identifier: L3yhAAZwZEP7xOtcPj/1EayOd+4OFnCx7V2DNOPcUpE= Subject key identifier: B8:40:31:BD:17:26:8D:5D:68:7E:A7:A2:BC:D2:E6:F2:8E:1A:BC:D3 Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft Manifest number: 01C9 Signing time: Fri 17 Apr 2026 03:25:57 +0000 Manifest this update: Fri 17 Apr 2026 03:25:57 +0000 Manifest next update: Fri 24 Apr 2026 03:25:57 +0000 Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: BYQziPTGhZsH1bs+pQ043R3P/BED5CT3cfqz1gKVGsg=) 2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: WYx1m//KJzwNa0S4q543WlbT86cDIRSE3yzbaO/SMbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Validity Not Before: Apr 17 03:25:57 2026 GMT Not After : Apr 24 03:25:57 2026 GMT Subject: CN=69e1a845-c217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:a3:4b:50:62:bd:a9:0b:0b:9e:3d:ae:ad: 01:31:8a:da:1c:9f:11:8f:d4:98:d9:21:c6:a0:bc: 4f:e4:fd:f9:dd:64:92:ca:80:9c:f2:7c:02:f3:b8: 14:a6:4b:ca:d4:48:bb:7f:11:b1:b7:cf:08:cc:88: 43:69:14:f5:45:25:e8:c8:da:a7:75:67:2e:a5:ab: 6c:e3:15:b8:5d:33:5c:33:b5:64:06:75:5c:f3:fe: 16:4a:3e:f3:49:7c:8c:9e:25:4c:34:03:70:e0:81: f0:94:29:03:fc:18:a9:d1:77:6d:45:ad:09:32:c4: 08:46:e7:f4:02:29:fd:99:10:51:5b:e6:3b:43:e2: 3b:ba:c4:69:53:8e:f6:94:96:1a:00:5f:2b:33:ff: 0b:f2:7d:dd:c7:ea:f0:f1:30:8b:7e:9d:1e:b8:da: f4:93:5c:76:92:ba:23:1f:59:8c:a6:9c:73:71:8e: 63:c5:ca:72:f4:57:a1:62:5d:b1:58:46:0b:77:72: 3c:23:72:84:0b:67:8b:34:4f:79:fb:b5:81:6c:b2: 80:19:fc:8c:69:b8:f6:36:74:8a:4a:01:93:36:be: c9:e4:c3:ee:12:c7:b1:48:10:a6:f9:bf:df:87:aa: 06:ac:d0:b1:83:4d:9c:5e:5a:ac:35:10:09:df:1c: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:31:BD:17:26:8D:5D:68:7E:A7:A2:BC:D2:E6:F2:8E:1A:BC:D3 X509v3 Authority Key Identifier: keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:56:5b:53:17:50:d3:f5:e9:34:3e:a0:ba:8d:9d:16:5c:06: f5:bd:10:1e:ed:f9:e6:90:a4:c7:23:66:47:e1:88:43:ff:29: 2e:6a:40:78:d4:93:3d:49:42:4f:5b:b8:d4:1e:08:81:ec:f8: 84:7e:9a:99:65:80:a7:5a:df:da:d1:5a:ac:9f:d2:ec:1f:40: 1f:0a:c0:44:77:21:74:4a:e1:65:e7:df:71:04:5e:64:c2:e0: e0:9a:55:82:fc:fc:15:42:7d:05:24:bf:cc:45:9d:88:24:a6: 6a:d7:d7:66:f6:91:c5:7f:e7:c9:4c:e4:13:dd:bb:a5:dc:72: 03:92:7b:eb:32:d8:30:7b:04:d1:9a:e5:f0:4a:15:2d:68:d1: c5:da:bc:3b:ad:ce:e7:7b:b2:7c:9d:40:71:8c:4b:3f:a5:06: 83:85:1d:6c:f7:8e:0c:9e:61:83:87:97:b5:12:8d:98:65:4c: 4d:76:ef:60:c3:5f:8b:79:ce:39:60:3d:ad:41:5d:e0:63:49: 60:f1:c4:46:21:f5:f9:ec:a9:cc:af:72:f8:70:5d:45:0f:b2: 7e:f4:79:27:de:26:c7:b1:46:a2:ff:80:b0:76:63:35:b5:cb: 4d:38:a1:36:18:03:bf:bf:82:22:0b:1c:cc:88:7a:f0:db:d3: 6b:e3:9f:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0 NzIwRTY2RUEwHhcNMjYwNDE3MDMyNTU3WhcNMjYwNDI0MDMyNTU3WjAYMRYwFAYD VQQDEw02OWUxYTg0NS1jMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPGjS1BivakLC549rq0BMYraHJ8Rj9SY2SHGoLxP5P353WSSyoCc8nwC87gU pkvK1Ei7fxGxt88IzIhDaRT1RSXoyNqndWcupats4xW4XTNcM7VkBnVc8/4WSj7z SXyMniVMNANw4IHwlCkD/Bip0XdtRa0JMsQIRuf0Ain9mRBRW+Y7Q+I7usRpU472 lJYaAF8rM/8L8n3dx+rw8TCLfp0euNr0k1x2krojH1mMppxzcY5jxcpy9FehYl2x WEYLd3I8I3KEC2eLNE95+7WBbLKAGfyMabj2NnSKSgGTNr7J5MPuEsexSBCm+b/f h6oGrNCxg02cXlqsNRAJ3xyCbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhAMb0X Jo1daH6norzS5vKOGrzTMB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNY VURiTVFpckJIRUJISU9adW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3FZbUxdQ0/XpND6guo2dFlwG9b0QHu355pCkxyNmR+GIQ/8pLmpAeNSTPUlC T1u41B4Igez4hH6amWWAp1rf2tFarJ/S7B9AHwrARHchdErhZeffcQReZMLg4JpV gvz8FUJ9BSS/zEWdiCSmatfXZvaRxX/nyUzkE927pdxyA5J76zLYMHsE0Zrl8EoV LWjRxdq8O63O53uyfJ1AcYxLP6UGg4UdbPeODJ5hg4eXtRKNmGVMTXbvYMNfi3nO OWA9rUFd4GNJYPHERiH1+eypzK9y+HBdRQ+yfvR5J94mx7FGov+AsHZjNbXLTTih NhgDv7+CIgsczIh68NvTa+OfjA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:19:55 2026 by rpki-client