$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: N5dVb0WOWQyb4Ecnso747Y2z0qJRiO16B6d1mKnW1XY= Subject key identifier: 07:66:AB:0C:DC:C5:A1:04:25:B3:B1:A5:4F:A2:2E:94:97:CC:8A:34 Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 0466 Signing time: Fri 17 Apr 2026 00:04:22 +0000 Manifest this update: Fri 17 Apr 2026 00:04:21 +0000 Manifest next update: Fri 24 Apr 2026 00:04:21 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: ZqYRG0z9E5NBj70S/UQwDKu5U8dhcUfN1Kdvf1rOZj4=) 2: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: OS+MMRRjQluFNuI+98G/Gv/Ff4t99hp6Izi7LUhaJJQ=) 3: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: JVO8JZCfYqp3N9h+hRdEkwlagsjOuD7MM+G3/8q05pI=) 4: 58C00854905211EC90E6100FC4F9AE02.roa (hash: HavGxilFCXPwJZ5ysPf3ohVQv79l6ZGEb7A58aULo/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Apr 17 00:04:21 2026 GMT Not After : Apr 24 00:04:21 2026 GMT Subject: CN=69e17906-947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9d:c4:75:ab:f2:d5:c1:16:90:4a:22:d4:90: c6:2e:48:4b:af:45:09:80:fe:8a:12:ba:72:ec:31: 67:4e:c1:26:1f:d5:d8:40:c9:82:55:5b:20:0b:75: 50:e8:a9:80:b3:74:f1:85:03:db:04:07:07:1f:06: ce:dc:fa:8e:6d:81:2a:78:8e:a4:8e:7c:b1:dd:3d: e9:ea:1e:43:9f:06:6f:22:6c:e0:9b:78:09:88:85: 57:ba:45:2b:d0:86:84:7c:7c:f6:ef:ca:0e:f7:7d: c9:19:c3:ab:c9:39:f0:86:92:c5:9b:7a:e4:43:55: 71:b1:3c:e9:3c:f5:db:e1:a5:b0:9f:1e:ff:b2:1f: aa:92:01:9f:c4:4f:f1:64:8d:e2:96:7c:a2:c2:45: 33:0d:0d:01:f7:02:8e:37:7b:19:b1:02:bc:8a:ea: 9e:c9:9b:fe:25:a3:5a:f8:7e:4e:24:90:53:f4:d6: a2:71:9f:b3:c4:e5:a6:1c:5a:cd:f7:5f:12:54:de: 6b:81:42:80:a8:9b:df:b7:3d:8b:c1:3e:25:86:41: 07:b0:cf:3e:2f:22:50:bd:6d:ba:f1:04:6c:fa:01: d6:fb:bf:cd:aa:f1:2c:9d:6f:55:45:79:19:cc:99: b1:a4:6d:24:5a:93:60:d2:7f:f5:9b:47:fa:4d:bd: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:66:AB:0C:DC:C5:A1:04:25:B3:B1:A5:4F:A2:2E:94:97:CC:8A:34 X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0b:c5:e3:36:dc:4c:13:06:80:f9:30:b6:50:ab:40:5a:cc: 8d:8a:47:7b:59:0d:80:9e:70:9d:d7:46:62:ce:4c:0e:12:19: ba:3c:fb:dc:90:16:00:e0:8a:70:20:69:cf:26:b7:2f:ed:18: d1:33:39:ed:9d:52:62:9e:db:34:61:49:93:46:4f:f2:5f:71: 9e:5a:86:70:7f:77:0b:a3:ea:56:23:39:75:8a:a6:59:36:3c: 79:04:c1:71:3a:0d:c4:fa:1f:ae:ba:dc:8b:26:2e:23:01:a7: 91:77:36:d2:18:22:d1:b4:57:b4:28:89:f3:c6:b7:10:ec:46: 04:30:e8:14:90:07:2b:d0:1d:eb:4b:83:d6:95:42:bb:fe:9e: d7:64:82:ea:7f:2c:78:16:c1:55:e7:6b:4b:f9:b2:5c:7c:31: 43:a5:f8:73:b1:bc:4c:e6:cf:85:d7:20:93:e3:d8:b7:1e:58: 75:62:ab:0c:42:9c:41:2b:d2:4d:c6:93:78:7a:ef:86:0f:c6: 4c:54:34:83:b7:60:27:46:51:08:f0:fc:41:3c:9a:69:83:c8: 8c:67:ad:bb:2f:88:44:63:5a:27:04:2c:2f:c1:dc:f4:29:39: dc:33:0a:eb:93:64:61:fd:51:61:ea:26:ca:8d:7b:40:90:7c: 6f:c9:7f:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjYwNDE3MDAwNDIxWhcNMjYwNDI0MDAwNDIxWjAYMRYwFAYD VQQDEw02OWUxNzkwNi05NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk53Edavy1cEWkEoi1JDGLkhLr0UJgP6KErpy7DFnTsEmH9XYQMmCVVsgC3VQ 6KmAs3TxhQPbBAcHHwbO3PqObYEqeI6kjnyx3T3p6h5DnwZvImzgm3gJiIVXukUr 0IaEfHz278oO933JGcOryTnwhpLFm3rkQ1VxsTzpPPXb4aWwnx7/sh+qkgGfxE/x ZI3ilnyiwkUzDQ0B9wKON3sZsQK8iuqeyZv+JaNa+H5OJJBT9NaicZ+zxOWmHFrN 918SVN5rgUKAqJvftz2LwT4lhkEHsM8+LyJQvW268QRs+gHW+7/NqvEsnW9VRXkZ zJmxpG0kWpNg0n/1m0f6Tb2ThQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdmqwzc xaEEJbOxpU+iLpSXzIo0MB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQvF4zbcTBMGgPkwtlCrQFrMjYpHe1kNgJ5wnddGYs5MDhIZujz73JAWAOCK cCBpzya3L+0Y0TM57Z1SYp7bNGFJk0ZP8l9xnlqGcH93C6PqViM5dYqmWTY8eQTB cToNxPofrrrciyYuIwGnkXc20hgi0bRXtCiJ88a3EOxGBDDoFJAHK9Ad60uD1pVC u/6e12SC6n8seBbBVedrS/myXHwxQ6X4c7G8TObPhdcgk+PYtx5YdWKrDEKcQSvS TcaTeHrvhg/GTFQ0g7dgJ0ZRCPD8QTyaaYPIjGetuy+IRGNaJwQsL8Hc9Ck53DMK 65NkYf1RYeomyo17QJB8b8l/2Q== -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:21 2026 by rpki-client