$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: 8XZlCSoh0qN9f8n8tG/tZWWa5LTDDeVv8Yu3knuznH0= Subject key identifier: 51:31:E0:93:9B:6C:7F:00:37:50:D9:51:CA:0B:85:41:C6:07:27:51 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0B5B Signing time: Thu 16 Apr 2026 19:07:47 +0000 Manifest this update: Thu 16 Apr 2026 19:07:47 +0000 Manifest next update: Thu 23 Apr 2026 19:07:47 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: vEC//uuwmbA7SPx6zGfB+WPQrLRLC03jyZqe25brCSw=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: JuE06CSNAAV8+NliC0AVlzjHWrODAM4vJnnB5WZLKk8=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: hK13KfCAsMi+xHUuka2Pkznncer1XgUOHCwFnVLDtqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2929 (0xb71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Apr 16 19:07:47 2026 GMT Not After : Apr 23 19:07:47 2026 GMT Subject: CN=69e13383-9746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:6f:43:61:c6:66:04:ed:a3:66:4c:1d:2f: 34:89:11:57:09:fa:55:a4:ac:f5:fd:d1:85:14:cc: e8:ce:a1:d0:56:65:1d:23:8a:92:c6:30:84:0f:99: 5a:6d:b3:74:9d:65:85:38:27:fb:ff:86:84:7b:3c: 5b:aa:18:a7:4a:98:70:dd:b0:93:da:7a:10:11:fc: 38:6b:e9:4b:9f:68:4b:dd:b4:f3:28:4b:90:82:36: b2:d4:ba:4d:c6:d3:73:87:cd:08:f5:66:5b:b1:e6: 65:9e:63:e4:e0:9f:65:05:cf:3e:c8:44:6d:2f:16: bc:47:02:b7:24:c9:3e:a1:7f:91:e0:7e:b8:95:6a: 72:3b:35:cc:b3:63:d0:27:8c:19:eb:b9:0a:99:65: 9f:ee:36:46:f3:c7:ba:4e:5e:fb:e9:e7:d0:e7:34: 8c:ed:42:dd:29:81:bb:36:cf:e0:52:80:77:4a:ec: 99:cf:cb:49:9a:0f:73:a1:fb:47:72:69:ef:97:22: aa:83:77:15:0e:eb:87:14:69:35:d3:35:f0:b8:ef: 4e:ce:4f:1c:d3:6e:c0:71:6a:03:16:d1:12:24:55: 0f:8c:a6:eb:6a:97:4c:34:4f:22:74:98:5a:55:fc: 8f:e8:3f:10:bd:73:ec:c2:62:ce:48:95:18:7f:1c: 5f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:31:E0:93:9B:6C:7F:00:37:50:D9:51:CA:0B:85:41:C6:07:27:51 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a8:bd:4e:61:b1:b2:d1:04:6e:5e:a1:a4:f0:5f:81:ab:5b: e8:32:77:02:3e:4e:6a:59:50:87:f3:46:a6:f7:44:eb:61:2b: aa:8e:8c:29:72:a4:fe:0d:2c:43:03:0f:ab:95:7e:dc:31:c3: 0d:19:2e:8c:a8:ed:33:ab:cf:ac:30:d0:3f:4e:80:c6:36:44: 3f:77:b4:85:e7:ab:a8:ac:c1:9e:ed:b0:b2:9b:2f:4f:13:eb: d2:30:0f:e2:c4:f3:1c:70:1a:55:6d:14:9d:39:f8:a1:32:b2: 19:8f:2b:3c:86:1c:3c:a2:50:ed:fc:a9:78:be:6b:52:ff:71: 3f:15:2a:7f:02:1c:5f:b7:54:21:c7:2a:7b:c0:8b:92:a7:73: 06:7a:52:dd:e3:b6:b6:d8:ec:fe:9a:10:db:38:46:94:27:b6: 61:1c:fc:3c:74:0f:8f:62:79:fe:d7:da:18:f7:13:a3:ca:d3: 2b:4a:89:f3:af:c7:29:85:30:fa:d3:ec:45:65:06:14:21:af: f5:f1:e6:ac:51:3e:3f:d0:3f:e6:0c:33:0b:e0:34:4d:06:d0: e2:8b:d4:02:a4:4d:8f:25:b0:32:21:ab:ae:ee:63:50:e9:97: f3:e2:64:54:9b:a8:08:e4:9f:8a:32:3f:dc:86:d9:83:57:cb: a5:91:02:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjYwNDE2MTkwNzQ3WhcNMjYwNDIzMTkwNzQ3WjAYMRYwFAYD VQQDEw02OWUxMzM4My05NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19dvQ2HGZgTto2ZMHS80iRFXCfpVpKz1/dGFFMzozqHQVmUdI4qSxjCED5la bbN0nWWFOCf7/4aEezxbqhinSphw3bCT2noQEfw4a+lLn2hL3bTzKEuQgjay1LpN xtNzh80I9WZbseZlnmPk4J9lBc8+yERtLxa8RwK3JMk+oX+R4H64lWpyOzXMs2PQ J4wZ67kKmWWf7jZG88e6Tl776efQ5zSM7ULdKYG7Ns/gUoB3SuyZz8tJmg9zoftH cmnvlyKqg3cVDuuHFGk10zXwuO9Ozk8c027AcWoDFtESJFUPjKbrapdMNE8idJha VfyP6D8QvXPswmLOSJUYfxxfvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEx4JOb bH8AN1DZUcoLhUHGBydRMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwqi9TmGxstEEbl6hpPBfgatb6DJ3Aj5OallQh/NGpvdE62Erqo6MKXKk/g0s QwMPq5V+3DHDDRkujKjtM6vPrDDQP06AxjZEP3e0heerqKzBnu2wspsvTxPr0jAP 4sTzHHAaVW0UnTn4oTKyGY8rPIYcPKJQ7fypeL5rUv9xPxUqfwIcX7dUIccqe8CL kqdzBnpS3eO2ttjs/poQ2zhGlCe2YRz8PHQPj2J5/tfaGPcTo8rTK0qJ86/HKYUw +tPsRWUGFCGv9fHmrFE+P9A/5gwzC+A0TQbQ4ovUAqRNjyWwMiGrru5jUOmX8+Jk VJuoCOSfijI/3IbZg1fLpZEC6g== -----END CERTIFICATE-----Generated at Fri Apr 17 05:23:32 2026 by rpki-client