$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: vTGSD2IhM3tzQg4oAH8zI80NuWvtf831z6DYmGmZ5kY= Subject key identifier: 40:B2:F8:58:2E:FF:CC:66:F7:B4:1F:BD:82:74:22:5A:76:A7:45:03 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 01D6 Signing time: Fri 17 Apr 2026 03:33:16 +0000 Manifest this update: Fri 17 Apr 2026 03:33:15 +0000 Manifest next update: Fri 24 Apr 2026 03:33:15 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: G6dEhAA0C1hR7OSGpVMhbo7mMogfyl9GljAaTpiMKvk=) 2: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=) 3: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Apr 17 03:33:15 2026 GMT Not After : Apr 24 03:33:15 2026 GMT Subject: CN=69e1a9fc-421f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:3a:bb:34:31:d4:6f:b4:0e:8a:76:0d:19: 00:71:d7:b6:39:74:c1:2d:af:1e:ca:d2:fe:71:23: 0d:f8:d2:c4:cd:92:5d:bb:f7:50:27:a5:6b:6b:45: 5d:b3:be:cb:d9:77:d5:fc:1e:88:28:b8:a2:a4:59: 12:f5:c4:ed:da:50:3e:e0:73:be:9c:06:d8:c0:6e: e4:4e:4a:75:a2:bf:5d:4f:bf:52:70:e8:b3:68:d5: 25:02:42:04:47:7c:12:c8:62:5a:d7:e1:29:bc:98: 87:48:b5:5f:c0:24:29:ba:f7:6d:5c:ef:58:82:a4: ec:ff:92:0b:a1:f8:20:ab:89:2a:aa:e6:1a:40:55: 2d:a4:59:9b:c3:72:d9:5e:ad:89:ba:83:c2:7d:dd: e4:de:c2:cc:a0:4d:09:cd:77:65:80:77:1e:88:6c: f1:00:78:2e:d5:6d:fd:49:49:ad:56:f7:21:35:39: 0b:76:31:e7:b5:bb:41:f9:5d:e9:bd:69:c0:fe:3c: 06:81:2a:e6:6f:14:f2:1e:1c:e1:63:7a:1e:3e:a6: 6d:d5:2d:b8:d8:83:ad:a6:67:47:90:59:03:54:2a: 7f:e2:1d:c2:a1:27:92:cf:d3:9b:ae:74:d9:1b:ee: 3b:45:82:2f:ee:b6:77:d2:0b:1c:47:b6:37:89:20: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:F8:58:2E:FF:CC:66:F7:B4:1F:BD:82:74:22:5A:76:A7:45:03 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2c:76:83:25:fd:8d:f0:85:0a:ba:c5:b1:e1:ee:f5:2e:75: 84:00:db:19:f3:d3:b8:41:55:bd:68:ed:b3:01:6a:c5:95:7e: 62:a8:c3:d8:81:2f:22:e5:bb:ad:6c:d8:a0:c6:0e:6c:2f:ca: eb:19:c2:2c:ed:b3:6c:1e:40:f4:4a:fa:68:01:8f:d4:ee:a7: a5:b8:c9:07:83:86:15:d4:1c:ec:8b:d0:e0:c7:1c:d1:de:78: 01:9a:ea:d9:29:15:7e:fb:1b:ab:04:f9:91:d4:32:a8:06:b8: 96:a4:4c:49:da:b6:dc:55:ba:5b:6d:42:8f:48:7b:e9:d2:a2: af:48:9c:a0:c5:25:f1:90:cb:00:64:40:e6:4f:07:b7:60:d9: c1:ab:29:75:74:68:77:df:f2:cf:4b:da:e6:83:bc:4e:0c:71: c8:d2:27:8a:40:e6:18:c1:c3:3d:26:f6:d3:57:43:8e:fd:17: 1c:b6:ef:18:8a:06:eb:91:e3:82:78:46:60:2d:26:79:c6:28: 5d:ea:b8:7a:18:03:b2:2c:ed:36:3a:8d:ae:d9:c1:92:9b:21: 66:49:de:ea:a6:ce:a7:41:0a:a0:46:4d:d3:64:35:3b:7a:17: fd:93:6a:a5:85:db:f6:2f:1e:53:22:c3:93:4f:5a:9b:1b:3d: d0:60:79:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwNDE3MDMzMzE1WhcNMjYwNDI0MDMzMzE1WjAYMRYwFAYD VQQDEw02OWUxYTlmYy00MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi746uzQx1G+0Dop2DRkAcde2OXTBLa8eytL+cSMN+NLEzZJdu/dQJ6Vra0Vd s77L2XfV/B6IKLiipFkS9cTt2lA+4HO+nAbYwG7kTkp1or9dT79ScOizaNUlAkIE R3wSyGJa1+EpvJiHSLVfwCQpuvdtXO9YgqTs/5ILofggq4kqquYaQFUtpFmbw3LZ Xq2JuoPCfd3k3sLMoE0JzXdlgHceiGzxAHgu1W39SUmtVvchNTkLdjHntbtB+V3p vWnA/jwGgSrmbxTyHhzhY3oePqZt1S242IOtpmdHkFkDVCp/4h3CoSeSz9ObrnTZ G+47RYIv7rZ30gscR7Y3iSAH4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECy+Fgu /8xm97QfvYJ0Ilp2p0UDMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARCx2gyX9jfCFCrrFseHu9S51hADbGfPTuEFVvWjtswFqxZV+YqjD2IEvIuW7 rWzYoMYObC/K6xnCLO2zbB5A9Er6aAGP1O6npbjJB4OGFdQc7IvQ4Mcc0d54AZrq 2SkVfvsbqwT5kdQyqAa4lqRMSdq23FW6W21Cj0h76dKir0icoMUl8ZDLAGRA5k8H t2DZwaspdXRod9/yz0va5oO8TgxxyNInikDmGMHDPSb201dDjv0XHLbvGIoG65Hj gnhGYC0mecYoXeq4ehgDsiztNjqNrtnBkpshZkne6qbOp0EKoEZN02Q1O3oX/ZNq pYXb9i8eUyLDk09amxs90GB5cg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:03:15 2026 by rpki-client