$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: Lp5hQ4nn5dXVr5GWPwmVuDiOfE7w3QqpklipC7j9EPE= Subject key identifier: D6:25:A9:90:FB:A7:A2:37:0B:21:97:31:F8:A3:50:EB:D3:63:F3:87 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: 80 Signing time: Fri 17 Apr 2026 07:23:06 +0000 Manifest this update: Fri 17 Apr 2026 07:23:05 +0000 Manifest next update: Fri 24 Apr 2026 07:23:05 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: 7jyxfb87rXd1Sh0cbiNxDCBfvMJCxezHy+1Trc7x29g=) 2: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: iP831x/fULSZ/fmDwuHrWqBHoTP+BYRChB7pWllsa7M=) 3: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: Y8LpukABBo/pP9eZZ75cumiepSudrb+yKJGkwACmG7Q=) 4: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: DLNHUZHuS4L6pQW1+bd0pYlrjjNIUCRkspT0sawq79s=) 5: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: g58X+cu42Kh2zFwQ2h9g38vEcazE0TvlqkeIHRWL2eA=) 6: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: 16ronhpfPjZ1J9jMJniqcKd5ZSFxc1jnc1AmD+Jt630=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Apr 17 07:23:05 2026 GMT Not After : Apr 24 07:23:05 2026 GMT Subject: CN=69e1dfda-8d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:54:0c:e5:66:2e:71:41:74:1a:a0:3a:9d: 33:16:de:3e:ce:e0:0d:29:95:43:23:12:dd:ca:68: cb:05:b3:5c:8b:33:1d:31:c6:46:14:66:4b:ea:97: 38:b7:bb:f2:ae:d6:cb:c6:06:56:15:53:e2:25:f9: ef:ed:3b:7e:52:ed:62:c1:f4:0f:e7:82:84:be:ac: 9a:fb:aa:60:9c:02:1e:b5:e7:b8:8d:49:50:ef:e7: 9c:44:b2:d1:21:5a:9c:6a:f9:53:ec:0c:ba:03:eb: 5a:4e:94:e0:bf:73:77:ce:da:ae:f4:b6:79:80:cc: cb:de:7a:75:e6:e5:41:12:65:4f:aa:9e:8e:12:4c: f0:0a:bf:0b:4a:b2:1b:d1:ef:bc:20:02:7c:4f:c9: a8:c7:6d:57:19:57:cc:0b:b2:52:4b:3c:66:a2:16: 2f:81:e7:a9:5f:10:2d:95:e5:64:74:d6:fe:48:f7: 4d:79:64:8f:e8:b8:6b:95:08:82:d5:6f:4a:06:4d: 7b:d9:ac:e7:32:41:09:cd:44:35:6c:6e:cd:6b:91: 70:2d:2d:9d:4a:ec:30:ae:2c:8f:01:68:7f:37:b0: c8:5a:de:72:50:80:c1:32:c1:6d:c5:7d:05:4b:0f: 6d:33:19:3d:74:d8:c4:38:74:ff:9c:d7:23:29:ef: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:A9:90:FB:A7:A2:37:0B:21:97:31:F8:A3:50:EB:D3:63:F3:87 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:69:39:2f:97:d0:93:96:82:d6:28:d0:3e:cc:4c:40:7e:ac: 31:12:12:ee:71:60:c8:ba:bb:a1:0c:5e:3d:c1:ea:cd:76:7a: 2c:b4:26:2d:0a:d4:db:dd:18:82:8d:7f:9c:72:7d:81:40:8d: ab:63:d1:6b:92:35:24:58:4c:23:0f:9b:95:d5:2d:4d:1b:63: 92:c0:38:37:3b:a9:d6:54:90:c5:95:68:ef:70:44:c8:bf:9a: 00:b0:6e:c7:9c:9f:56:7d:2d:96:60:24:bd:b1:e7:0d:e9:5b: bf:a9:46:fd:e0:b1:7e:36:2e:26:30:fc:27:ff:8c:bc:60:36: d3:36:9d:e5:c4:e8:41:cf:4e:95:97:d5:53:7a:7a:2d:ee:85: 23:ae:3d:08:59:8c:a4:4b:7e:e6:db:49:d4:b7:75:f7:f8:38: 17:ea:6f:c0:fa:71:35:45:0d:37:b8:1b:93:80:46:a2:e6:61: ef:06:1c:9c:3a:f1:40:cb:d9:18:24:c7:18:55:e6:0d:63:34: d1:6b:bd:43:13:ac:de:5f:6f:63:18:2b:ce:de:92:9c:65:a8: 44:73:25:18:93:a6:07:d0:75:90:7f:b7:76:02:11:7d:38:cd: b6:db:4b:e7:d7:7b:33:2c:91:b9:9f:74:d2:fb:dd:e8:0b:0a: e8:6f:3b:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwNDE3MDcyMzA1WhcNMjYwNDI0MDcyMzA1WjAYMRYwFAYD VQQDEw02OWUxZGZkYS04ZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgdUDOVmLnFBdBqgOp0zFt4+zuANKZVDIxLdymjLBbNcizMdMcZGFGZL6pc4 t7vyrtbLxgZWFVPiJfnv7Tt+Uu1iwfQP54KEvqya+6pgnAIetee4jUlQ7+ecRLLR IVqcavlT7Ay6A+taTpTgv3N3ztqu9LZ5gMzL3np15uVBEmVPqp6OEkzwCr8LSrIb 0e+8IAJ8T8mox21XGVfMC7JSSzxmohYvgeepXxAtleVkdNb+SPdNeWSP6LhrlQiC 1W9KBk172aznMkEJzUQ1bG7Na5FwLS2dSuwwriyPAWh/N7DIWt5yUIDBMsFtxX0F Sw9tMxk9dNjEOHT/nNcjKe/ytQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYlqZD7 p6I3CyGXMfijUOvTY/OHMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe2k5L5fQk5aC1ijQPsxMQH6sMRIS7nFgyLq7oQxePcHqzXZ6LLQmLQrU290Y go1/nHJ9gUCNq2PRa5I1JFhMIw+bldUtTRtjksA4Nzup1lSQxZVo73BEyL+aALBu x5yfVn0tlmAkvbHnDelbv6lG/eCxfjYuJjD8J/+MvGA20zad5cToQc9OlZfVU3p6 Le6FI649CFmMpEt+5ttJ1Ld19/g4F+pvwPpxNUUNN7gbk4BGouZh7wYcnDrxQMvZ GCTHGFXmDWM00Wu9QxOs3l9vYxgrzt6SnGWoRHMlGJOmB9B1kH+3dgIRfTjNtttL 59d7MyyRuZ900vvd6AsK6G87Bg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:55 2026 by rpki-client