$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: LU7dOc8nuup5Kb+RnGWZfxRp0nydqsgEUNs2T8hTLTU= Subject key identifier: 17:5E:AA:06:C9:A7:AF:92:E1:46:81:8B:B9:67:68:C1:59:D4:02:2A Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1706 Signing time: Thu 16 Apr 2026 16:34:51 +0000 Manifest this update: Thu 16 Apr 2026 16:34:50 +0000 Manifest next update: Thu 23 Apr 2026 16:34:50 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: BXCB5n7n6GSc2mHQchSoP7kFfc2d/qTIROB/8Bm1tkw=) 2: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=) 4: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5923 (0x1723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Apr 16 16:34:50 2026 GMT Not After : Apr 23 16:34:50 2026 GMT Subject: CN=69e10fab-1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:67:d6:7d:87:cf:48:c7:4d:04:93:1e:0f: 02:14:8d:a5:90:e2:d3:c1:5e:7c:0a:8c:41:2e:49: 4b:c0:da:73:3b:cd:d9:9d:f4:aa:83:7b:96:48:09: cf:7c:bb:73:6c:1c:27:3c:0c:f5:d2:a2:88:e7:86: d4:16:c7:aa:d5:f4:a2:4a:99:6c:83:b7:63:5f:c4: e1:95:7a:d4:1b:f4:9f:54:30:5f:30:88:65:a1:01: 47:e0:b2:59:05:2d:d7:d8:34:59:27:1b:6a:99:7b: ac:74:3e:44:62:51:9d:c9:0a:cd:fb:7e:e8:c9:e0: b2:d2:84:e0:47:f0:7e:83:3f:aa:41:81:64:17:4b: e6:d0:46:75:98:c6:71:c8:06:8a:b8:19:df:51:56: a0:7c:92:c1:0a:54:03:bd:6d:73:f1:09:ce:69:33: 60:af:c1:49:4f:87:c3:6c:66:ef:50:72:7f:10:73: f0:a9:3a:6f:8c:d2:69:e9:84:da:75:38:f0:8c:a8: 88:7d:2e:78:61:6c:6a:af:f3:b9:02:c7:4d:74:db: 9c:6e:fa:5e:51:9d:04:fb:15:65:92:fc:2e:ea:5e: ef:2e:2c:f6:3b:08:ca:b2:45:29:11:5c:fc:4a:8b: 2d:d9:78:05:4b:cf:a1:eb:c8:3a:c8:c2:ba:82:e2: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5E:AA:06:C9:A7:AF:92:E1:46:81:8B:B9:67:68:C1:59:D4:02:2A X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:d0:56:01:36:9b:df:ad:7f:41:5f:0e:3e:e3:9b:99:8e: 55:b8:d1:98:bc:79:a2:ff:e8:38:3a:41:41:8d:97:87:94:c8: 98:ea:e5:3a:1f:cd:3f:fc:d2:cc:42:c5:37:c5:67:ac:27:f9: 4a:53:ba:f0:a3:b5:e9:a7:0e:53:93:ac:3f:67:d0:93:cc:b5: f6:6a:fe:49:85:0c:d1:e7:6b:6c:47:80:e9:b2:ce:53:bd:2d: ee:6a:9f:44:17:6b:ab:18:90:e8:c2:f0:c1:93:88:b1:ad:ac: 08:29:22:01:7c:00:67:02:01:dc:f2:81:58:ab:77:81:d8:05: ee:09:e2:70:73:3a:60:e3:42:bc:72:de:b8:81:c1:2f:f8:18: 44:f8:b6:7b:60:37:fd:dc:40:e7:85:40:57:09:ce:e9:80:a1: 7f:95:f1:c5:1b:e9:43:d8:e1:72:a6:5f:fb:fd:f4:9b:f2:14: 71:e6:4d:c3:f0:85:34:ea:02:ad:f1:18:54:09:6a:e4:3c:c2: 3c:28:36:7f:d9:5a:89:30:fd:50:0a:46:5e:24:32:22:89:fc: 8c:08:7f:00:16:f3:e8:de:c5:77:97:ab:4f:6a:de:55:d9:31: 37:8d:96:7c:71:59:6d:19:8b:ff:4d:7d:41:f2:47:1d:7a:bd: 5d:88:68:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwNDE2MTYzNDUwWhcNMjYwNDIzMTYzNDUwWjAYMRYwFAYD VQQDEw02OWUxMGZhYi0xZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40Vn1n2Hz0jHTQSTHg8CFI2lkOLTwV58CoxBLklLwNpzO83ZnfSqg3uWSAnP fLtzbBwnPAz10qKI54bUFseq1fSiSplsg7djX8ThlXrUG/SfVDBfMIhloQFH4LJZ BS3X2DRZJxtqmXusdD5EYlGdyQrN+37oyeCy0oTgR/B+gz+qQYFkF0vm0EZ1mMZx yAaKuBnfUVagfJLBClQDvW1z8QnOaTNgr8FJT4fDbGbvUHJ/EHPwqTpvjNJp6YTa dTjwjKiIfS54YWxqr/O5AsdNdNucbvpeUZ0E+xVlkvwu6l7vLiz2OwjKskUpEVz8 Sost2XgFS8+h68g6yMK6guI/xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdeqgbJ p6+S4UaBi7lnaMFZ1AIqMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAC/QVgE2m9+tf0FfDj7jm5mOVbjRmLx5ov/oODpBQY2Xh5TImOrlOh/NP/zS zELFN8VnrCf5SlO68KO16acOU5OsP2fQk8y19mr+SYUM0edrbEeA6bLOU70t7mqf RBdrqxiQ6MLwwZOIsa2sCCkiAXwAZwIB3PKBWKt3gdgF7gnicHM6YONCvHLeuIHB L/gYRPi2e2A3/dxA54VAVwnO6YChf5XxxRvpQ9jhcqZf+/30m/IUceZNw/CFNOoC rfEYVAlq5DzCPCg2f9laiTD9UApGXiQyIon8jAh/ABbz6N7Fd5erT2reVdkxN42W fHFZbRmL/019QfJHHXq9XYho/g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:12:42 2026 by rpki-client