$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: cAeS7gjSbT/S03pn80tG6BYcW1Bis6R4Vr5aHnCMZwc= Subject key identifier: C9:85:AF:9C:F0:39:96:DE:13:B5:1F:88:7F:7A:78:A2:43:AC:30:1A Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 0137 Signing time: Fri 17 Apr 2026 05:08:29 +0000 Manifest this update: Fri 17 Apr 2026 05:08:28 +0000 Manifest next update: Fri 24 Apr 2026 05:08:28 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: FpU9X7pNfOHzLwczD34Ba3U3a8fvCmBbgZWBJHIx0fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Apr 17 05:08:28 2026 GMT Not After : Apr 24 05:08:28 2026 GMT Subject: CN=69e1c04d-3e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:89:d0:38:31:45:34:50:03:9c:e5:b3:29: ce:ee:c1:bd:c1:4d:cc:bb:14:dc:78:be:c3:b7:1d: 47:62:99:97:07:75:94:b3:c1:ae:83:4f:00:a3:85: 77:9b:66:d1:93:54:82:c5:e5:47:68:ba:f9:ed:99: 46:ec:c8:53:3e:7c:18:0b:58:5f:2d:58:3e:ba:33: 51:8e:e8:cd:40:75:64:a3:87:aa:d3:fe:f6:69:2d: b5:7f:c3:f3:54:f6:65:f3:40:37:39:d2:47:21:43: 66:1e:91:f1:a2:9a:13:bd:84:1f:a7:d4:3c:73:86: ba:15:56:fb:63:f8:3a:d5:6e:9f:2a:24:78:4e:73: f3:35:3a:31:fd:97:62:5e:8b:75:95:86:f1:12:e0: b9:ed:3e:f8:3a:c1:8f:db:f3:62:d8:b1:6d:58:fa: 45:a2:7f:b1:31:28:ac:6e:c9:cd:2a:6c:00:64:4c: 77:af:8f:fd:9b:86:fb:87:be:4c:c6:35:af:55:56: b8:d6:d6:9d:0a:b1:6b:57:d2:9d:74:a1:3b:d5:82: ec:bf:2e:1c:23:b7:b4:77:ee:64:4c:8a:92:6c:f4: cb:4e:f1:24:20:2b:c9:b5:fd:00:4f:16:00:87:f4: ac:de:2e:0f:34:ce:5e:08:2b:dc:e3:c3:51:4d:5f: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:AF:9C:F0:39:96:DE:13:B5:1F:88:7F:7A:78:A2:43:AC:30:1A X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:2d:e7:0f:94:20:9e:fb:38:36:c4:06:b0:99:da:c9:cb:bc: d0:76:08:33:80:24:5d:28:4d:f1:05:74:bf:31:1d:dc:94:ec: b7:4a:01:0c:21:68:ac:6c:f3:d0:09:49:c3:bb:c0:1f:32:8f: 7b:80:26:76:1f:e4:d1:11:56:b5:14:57:aa:88:b3:6b:e1:20: 0f:b9:83:dd:7c:80:21:8a:0c:06:eb:bd:7e:6b:38:06:5a:12: 0a:1a:b4:23:db:2f:57:95:ed:84:f1:f2:0c:72:6b:e2:03:6b: 40:66:90:a9:c5:f5:4b:52:09:b6:74:19:29:4e:22:18:c2:1d: a8:19:90:ef:6d:e6:25:47:ff:dd:f6:b5:84:fc:e2:cd:ee:ee: 66:3f:42:a8:92:d4:e7:26:1e:07:f5:7b:c5:3c:66:80:94:46: 42:49:30:0c:91:a6:68:5d:a0:33:0c:c8:3f:d3:d4:54:74:b4: ee:0c:37:78:dc:c9:fc:fe:82:c6:e5:f5:7d:a4:a1:fd:ab:57: e0:e8:65:a6:b9:01:1c:81:3d:2f:71:4e:c3:cc:d3:46:f4:e5: 34:bb:83:33:06:57:8a:e8:67:d1:bf:aa:99:5c:35:57:d1:f2: ee:f6:30:11:30:2a:b4:17:b7:bc:0f:8a:27:0f:11:07:fc:b8: e4:25:14:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjYwNDE3MDUwODI4WhcNMjYwNDI0MDUwODI4WjAYMRYwFAYD VQQDEw02OWUxYzA0ZC0zZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcuJ0DgxRTRQA5zlsynO7sG9wU3MuxTceL7Dtx1HYpmXB3WUs8Gug08Ao4V3 m2bRk1SCxeVHaLr57ZlG7MhTPnwYC1hfLVg+ujNRjujNQHVko4eq0/72aS21f8Pz VPZl80A3OdJHIUNmHpHxopoTvYQfp9Q8c4a6FVb7Y/g61W6fKiR4TnPzNTox/Zdi Xot1lYbxEuC57T74OsGP2/Ni2LFtWPpFon+xMSisbsnNKmwAZEx3r4/9m4b7h75M xjWvVVa41tadCrFrV9KddKE71YLsvy4cI7e0d+5kTIqSbPTLTvEkICvJtf0ATxYA h/Ss3i4PNM5eCCvc48NRTV8lzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMmFr5zw OZbeE7UfiH96eKJDrDAaMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIC3nD5Qgnvs4NsQGsJnaycu80HYIM4AkXShN8QV0vzEd3JTst0oBDCForGzz 0AlJw7vAHzKPe4Amdh/k0RFWtRRXqoiza+EgD7mD3XyAIYoMBuu9fms4BloSChq0 I9svV5XthPHyDHJr4gNrQGaQqcX1S1IJtnQZKU4iGMIdqBmQ723mJUf/3fa1hPzi ze7uZj9CqJLU5yYeB/V7xTxmgJRGQkkwDJGmaF2gMwzIP9PUVHS07gw3eNzJ/P6C xuX1faSh/atX4OhlprkBHIE9L3FOw8zTRvTlNLuDMwZXiuhn0b+qmVw1V9Hy7vYw ETAqtBe3vA+KJw8RB/y45CUUKg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:44 2026 by rpki-client