$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft File: tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json) Hash identifier: Dk/zC5Q+06b+GY0qQ3GrWk5cmgaibuoWrVFycINCWYA= Subject key identifier: C7:FB:54:F6:40:2E:DA:A1:AC:27:C9:5D:87:37:6E:C6:DF:CD:5E:2F Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft Manifest number: 01AF Signing time: Fri 17 Apr 2026 03:47:56 +0000 Manifest this update: Fri 17 Apr 2026 03:47:56 +0000 Manifest next update: Fri 24 Apr 2026 03:47:56 +0000 Files and hashes: 1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: Qcx6z5Vte8ZspW1mHL7wmbVVYKNYqUUG4TLg8HHyejw=) 2: DDFD7F92A36311F0BCF40B3CC4F9AE02.roa (hash: +itwix5tg1TL0xARCgIhfb+QDUeml9Ar+ujsgMhe8AM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D Validity Not Before: Apr 17 03:47:56 2026 GMT Not After : Apr 24 03:47:56 2026 GMT Subject: CN=69e1ad6c-6780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:0b:82:f1:8a:f0:fe:98:4c:e6:5b:d0:a3: c9:d3:b8:a3:e5:85:d2:dd:2d:eb:f4:37:91:0f:44: 3f:ea:78:87:c8:7b:7e:4a:8b:5d:b6:0a:c9:80:0c: db:ad:03:d6:e9:9a:67:d6:59:ab:e2:f1:e8:7b:7d: 7f:b5:d7:4c:32:10:29:64:2f:b9:3d:4e:7d:56:b3: a3:2e:23:2a:f8:6c:19:03:00:ad:cf:49:19:44:c8: ad:df:90:03:2c:57:d7:a4:54:96:84:f1:91:f6:a9: 0e:d8:81:14:c1:19:65:60:61:62:18:16:94:57:c8: 45:bc:95:34:06:d5:fc:91:3d:d3:22:9e:4e:6c:36: 29:f9:96:de:24:e1:34:b4:e7:f2:5b:fd:38:0f:a7: 2b:01:33:c5:ff:73:1c:0b:e0:70:09:23:f5:fb:b3: 4d:03:9b:1d:6e:c8:c6:3d:87:ac:2d:23:ea:12:f6: e5:49:6a:2c:af:a6:2a:4e:94:81:b5:b3:16:71:d0: ab:8f:98:ab:a9:8f:b3:47:fc:a4:bc:d4:f4:de:98: 41:a6:93:3d:41:8b:34:a4:87:8f:a3:f9:97:42:49: 85:6b:8e:76:b1:a3:83:58:0b:f0:e1:8b:30:3f:3c: e2:c1:71:7e:27:90:90:60:b0:5d:0b:ba:d7:f6:41: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:54:F6:40:2E:DA:A1:AC:27:C9:5D:87:37:6E:C6:DF:CD:5E:2F X509v3 Authority Key Identifier: keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:52:bf:10:88:b9:cb:53:9e:cc:2e:64:e0:e8:19:ba:30:9a: c1:bb:b1:13:a0:e1:7a:55:8f:1b:60:25:cd:95:c5:55:3e:e6: 0f:f6:a2:31:53:c1:d3:b2:72:aa:13:4c:a5:0d:50:17:88:ff: 74:a7:51:5c:f4:cc:69:15:a5:cd:dc:88:65:c2:87:80:72:7e: 2d:be:0c:74:93:c5:3f:e1:c2:ff:c3:f0:7d:a0:5c:53:70:f3: b1:96:23:ea:d1:6d:f7:ea:bf:2b:79:ad:4d:4c:19:b8:2f:8a: d8:2b:9e:fd:cf:b0:21:f4:89:24:11:15:4c:ad:5b:1e:e5:f8: b7:a6:44:50:da:3d:65:9b:45:1a:df:1a:40:38:0f:d3:6f:59: d0:bb:44:01:e7:23:90:73:c5:c9:6d:8a:ce:cd:23:e9:3c:42: ef:4c:fe:8f:89:f2:d0:6a:fd:e7:21:db:dc:61:7a:8f:ff:ec: 1a:11:b7:26:c7:ed:21:8a:c5:34:75:59:be:74:b9:56:9e:e1: 04:fa:9d:81:24:27:95:12:d1:f9:ff:42:10:fb:4d:2b:0b:14: b1:7b:71:ed:33:30:5e:f5:ff:db:26:21:2b:77:63:c1:7a:63: 25:5a:a1:e1:94:35:75:5f:f1:f4:a3:1d:12:8c:a9:12:fa:01: 49:92:26:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx NTA2QUFDMEQwHhcNMjYwNDE3MDM0NzU2WhcNMjYwNDI0MDM0NzU2WjAYMRYwFAYD VQQDEw02OWUxYWQ2Yy02NzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeMLgvGK8P6YTOZb0KPJ07ij5YXS3S3r9DeRD0Q/6niHyHt+SotdtgrJgAzb rQPW6Zpn1lmr4vHoe31/tddMMhApZC+5PU59VrOjLiMq+GwZAwCtz0kZRMit35AD LFfXpFSWhPGR9qkO2IEUwRllYGFiGBaUV8hFvJU0BtX8kT3TIp5ObDYp+ZbeJOE0 tOfyW/04D6crATPF/3McC+BwCSP1+7NNA5sdbsjGPYesLSPqEvblSWosr6YqTpSB tbMWcdCrj5irqY+zR/ykvNT03phBppM9QYs0pIePo/mXQkmFa452saODWAvw4Ysw PzziwXF+J5CQYLBdC7rX9kHqVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMf7VPZA LtqhrCfJXYc3bsbfzV4vMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zNTcwREYyRUIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFk SzVQeXcxSEtzazBWQnFyQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgVK/EIi5y1OezC5k4OgZujCawbuxE6DhelWPG2AlzZXFVT7mD/aiMVPB07Jy qhNMpQ1QF4j/dKdRXPTMaRWlzdyIZcKHgHJ+Lb4MdJPFP+HC/8PwfaBcU3DzsZYj 6tFt9+q/K3mtTUwZuC+K2Cue/c+wIfSJJBEVTK1bHuX4t6ZEUNo9ZZtFGt8aQDgP 029Z0LtEAecjkHPFyW2Kzs0j6TxC70z+j4ny0Gr95yHb3GF6j//sGhG3JsftIYrF NHVZvnS5Vp7hBPqdgSQnlRLR+f9CEPtNKwsUsXtx7TMwXvX/2yYhK3djwXpjJVqh 4ZQ1dV/x9KMdEoypEvoBSZImyw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:38:52 2026 by rpki-client