$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft File: ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json) Hash identifier: HimW8OKFg5kKPhbJjHso1lzw2Uc7xQEU1LBi+13hn3k= Subject key identifier: 00:6E:38:4E:AB:54:2B:A1:7A:3D:06:9E:66:4E:06:05:D9:7D:05:DF Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5 Certificate issuer: /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft Manifest number: 0B Signing time: Sun 05 Apr 2026 08:29:24 +0000 Manifest this update: Sun 05 Apr 2026 08:29:23 +0000 Manifest next update: Sun 12 Apr 2026 08:29:23 +0000 Files and hashes: 1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: z3kFeYGpPyZ35sJcDLsuKzhjxY6iWw0KrVoL+BPTKTE=) 2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: 9EYbW/kP0EvaQviwyUMhvfFwghhwvUIQKiWZZgxHXKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5 Validity Not Before: Apr 5 08:29:23 2026 GMT Not After : Apr 12 08:29:23 2026 GMT Subject: CN=69d21d64-fe62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:be:db:d4:61:e7:0e:56:4f:30:a9:0a:4b: e5:d9:cc:eb:5e:31:5d:69:1b:99:58:93:b8:9c:6b: ea:0f:dc:b1:d6:11:1e:e8:ee:62:42:5e:94:c4:e9: 9d:d5:36:8c:b3:9a:bf:48:59:61:06:44:24:be:db: 9c:84:02:d3:a9:d1:90:0f:59:c9:69:98:91:69:91: 30:85:a6:72:7e:eb:6b:8c:5b:f4:fe:59:95:77:95: 16:c8:48:9b:a4:82:b3:9a:77:eb:87:48:db:78:78: 0a:94:c3:1e:c4:c7:3f:c2:fa:be:e9:bb:e7:09:78: 04:94:07:1d:50:e1:9b:90:15:e7:eb:95:e6:e3:bf: d6:e1:8f:2d:79:59:6a:90:4f:11:d6:1b:88:2f:b3: 66:c2:4a:92:ae:14:34:00:af:a3:c1:b7:5e:cf:9a: 4d:7b:46:94:44:c2:3a:01:cb:0c:49:84:7c:5c:11: 85:71:e3:b8:03:0c:8a:87:24:66:78:98:f4:23:77: 8c:64:8f:34:5d:3f:65:f9:f1:6e:3e:38:32:51:03: 35:9c:10:da:51:50:a5:e5:58:08:39:f0:05:d9:7a: fb:43:18:11:e2:62:a3:da:51:b0:cd:17:59:ee:9e: c2:bd:e1:b7:59:2f:72:9b:58:42:81:90:58:82:07: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6E:38:4E:AB:54:2B:A1:7A:3D:06:9E:66:4E:06:05:D9:7D:05:DF X509v3 Authority Key Identifier: keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bc:35:c1:f5:c2:b9:2a:9e:38:e3:38:ee:c7:85:36:f0:83: b7:6d:aa:2c:07:15:74:d9:0f:e4:0b:4b:f4:2e:ce:8c:48:e0: f7:a2:ea:3f:b8:0d:8b:5b:49:8b:1c:d1:9e:9e:45:50:b7:c0: 2a:5b:45:3e:4d:41:ce:18:58:f9:3a:e4:b9:a8:a7:45:ec:fc: 45:0f:84:28:d2:95:ca:9d:9e:af:0b:32:00:d0:4b:1e:f6:0f: 50:36:25:6a:1d:6a:cd:2a:3f:69:c3:9a:43:a9:2f:a2:da:43: 78:d8:70:fe:43:df:c6:f0:7e:b0:6e:e2:e0:d8:35:19:45:90: 9f:e7:de:09:66:d1:c3:08:34:c0:50:2f:97:54:f6:ff:cf:df: ed:88:cd:a0:14:d3:3c:d8:d7:71:d8:77:12:16:00:a3:07:fa: cc:3b:94:22:4e:08:ab:03:ba:81:1d:bc:25:3d:21:f6:82:6e: d4:b6:f3:7f:0a:0a:e7:8f:2f:8e:83:51:3b:02:fc:ec:cf:d8: 77:ae:b7:ea:28:6c:6b:40:2a:ad:5d:2d:00:2e:ba:99:81:55: 31:57:0f:99:e3:de:d2:25:f3:30:94:9f:90:36:9c:1d:6c:fd: be:db:48:d7:8a:ea:a3:61:54:26:5e:b4:86:06:06:4f:9a:4a: 1d:ce:ae:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUEwMzExMC8GA1UEBRMoODlFMzY5M0I3MTIzNjhCMEZBQ0U2QkE0RTQ2Nzk3MDhB RjM5MzhCNTAeFw0yNjA0MDUwODI5MjNaFw0yNjA0MTIwODI5MjNaMBgxFjAUBgNV BAMTDTY5ZDIxZDY0LWZlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtEb7b1GHnDlZPMKkKS+XZzOteMV1pG5lYk7ica+oP3LHWER7o7mJCXpTE6Z3V Noyzmr9IWWEGRCS+25yEAtOp0ZAPWclpmJFpkTCFpnJ+62uMW/T+WZV3lRbISJuk grOad+uHSNt4eAqUwx7Exz/C+r7pu+cJeASUBx1Q4ZuQFefrlebjv9bhjy15WWqQ TxHWG4gvs2bCSpKuFDQAr6PBt17Pmk17RpREwjoBywxJhHxcEYVx47gDDIqHJGZ4 mPQjd4xkjzRdP2X58W4+ODJRAzWcENpRUKXlWAg58AXZevtDGBHiYqPaUbDNF1nu nsK94bdZL3KbWEKBkFiCB0oVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAG44TqtU K6F6PQaeZk4GBdl9Bd8wHwYDVR0jBBgwFoAUieNpO3EjaLD6zmuk5GeXCK85OLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0FFNzA5QTBDMjRE QzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxENnptdWs1R2VYQ0s4NU9M VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWVOcE8zRWphTEQ2em11azVHZVhDSzg1T0xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF QTAzL0FFNzA5QTBDMjREQzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxE NnptdWs1R2VYQ0s4NU9MVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/vDXB9cK5Kp444zjux4U28IO3baosBxV02Q/kC0v0Ls6MSOD3ouo/uA2LW0mL HNGenkVQt8AqW0U+TUHOGFj5OuS5qKdF7PxFD4Qo0pXKnZ6vCzIA0Ese9g9QNiVq HWrNKj9pw5pDqS+i2kN42HD+Q9/G8H6wbuLg2DUZRZCf594JZtHDCDTAUC+XVPb/ z9/tiM2gFNM82Ndx2HcSFgCjB/rMO5QiTgirA7qBHbwlPSH2gm7UtvN/Cgrnjy+O g1E7Avzsz9h3rrfqKGxrQCqtXS0ALrqZgVUxVw+Z497SJfMwlJ+QNpwdbP2+20jX iuqjYVQmXrSGBgZPmkodzq6f -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:20 2026 by rpki-client