$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: Gl1etmgxnXthl6vgOKcmxzf9N5L0AR1pk6gKHKo13E0= Subject key identifier: E1:57:C5:3F:01:C1:45:DF:EC:EC:10:80:77:0C:A2:3E:E8:F3:B0:64 Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 04FA Signing time: Sat 04 Apr 2026 23:29:16 +0000 Manifest this update: Sat 04 Apr 2026 23:29:15 +0000 Manifest next update: Sat 11 Apr 2026 23:29:15 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: qA2doiLaiHrKpcjbmCgJumY3Xj7kndl2dY30mCzVxBc=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: r8OdCls35VkGR5BYn+Xw2ps0AhkdTQVuJUU7goTrFY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: Apr 4 23:29:15 2026 GMT Not After : Apr 11 23:29:15 2026 GMT Subject: CN=69d19ecc-e4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:70:56:13:74:7e:4f:ea:3d:51:c3:79:ce: 18:9e:57:70:74:5b:db:ef:28:37:f7:c4:74:04:69: 50:d0:3b:f9:6f:dc:2e:05:50:32:7f:89:52:16:c0: 9e:1f:2d:44:8d:26:1d:d6:0d:e5:d1:91:30:eb:f0: cf:e4:fe:4d:e5:86:cb:05:66:e7:54:0f:92:32:56: 29:48:98:82:eb:bd:be:af:dc:4a:aa:81:94:a0:51: df:bf:9e:ee:ba:9d:8c:40:e6:bc:ad:c4:0e:4d:a4: c8:21:94:53:75:91:ae:d5:8d:9f:81:61:ad:b5:5a: 8d:ef:e5:94:cf:86:de:78:47:c1:b0:62:da:b4:0a: dd:c6:ec:79:52:df:ea:4a:34:40:70:b6:6c:90:e1: 0a:3b:db:59:7d:11:23:ae:fd:09:f5:8a:9c:ef:23: 4d:14:ce:91:5a:44:a8:b0:3b:ed:83:01:17:94:f7: f4:02:d0:1d:33:68:23:7d:f0:10:41:c2:78:3c:ce: 0f:88:b7:46:a5:45:c3:f0:75:c4:e5:ee:80:75:49: ca:10:9a:a8:a8:53:27:f5:d5:3d:c8:58:b5:87:eb: fb:c9:38:05:41:29:aa:b3:af:58:42:81:09:c2:f1: 04:c5:fd:54:ab:7d:c9:0b:e1:e0:cb:e4:5b:bb:1b: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:57:C5:3F:01:C1:45:DF:EC:EC:10:80:77:0C:A2:3E:E8:F3:B0:64 X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:51:b6:db:44:f2:99:c5:7d:42:5c:1c:13:95:74:db:f8:62: 76:78:70:fe:5c:c8:58:70:97:4c:f8:3c:73:59:13:45:16:91: 98:b0:fc:64:9b:a1:da:7c:ca:66:11:77:e4:fb:2c:6c:2f:39: 92:78:8e:c6:5c:1f:9b:ca:9b:ec:a2:99:fb:7c:38:8d:bb:bc: 73:81:0f:dd:21:08:fd:b3:e0:e1:a4:92:79:fd:ee:f3:04:a2: 90:c2:13:ed:d1:a6:8a:69:1a:b1:e8:64:f4:9d:18:b7:9a:88: bb:d4:99:5e:85:ee:b0:b9:97:25:11:5a:32:07:0f:ad:a9:b5: 28:98:ed:23:5b:1b:14:ac:83:d7:72:e3:af:1a:b8:76:e9:13: c9:4c:05:ac:1c:68:ae:c4:ae:59:34:73:a1:9c:24:b3:6e:84: 0e:d2:95:54:61:06:03:1d:72:6e:8e:a1:da:c3:ca:2e:c2:d0: e8:21:95:5b:51:d1:a7:fa:57:40:7c:fe:31:9b:c9:56:be:d7: 3c:9b:c9:17:12:93:26:aa:5c:19:b7:4d:1a:2f:4c:20:b6:0f: 59:2e:64:40:6d:c7:84:bc:08:ca:69:50:a7:0f:4b:82:67:5c: e2:c5:29:34:3b:0b:45:ef:ce:c5:ab:19:58:66:a2:67:40:ff: 1e:ae:85:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjYwNDA0MjMyOTE1WhcNMjYwNDExMjMyOTE1WjAYMRYwFAYD VQQDEw02OWQxOWVjYy1lNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1ZwVhN0fk/qPVHDec4YnldwdFvb7yg398R0BGlQ0Dv5b9wuBVAyf4lSFsCe Hy1EjSYd1g3l0ZEw6/DP5P5N5YbLBWbnVA+SMlYpSJiC672+r9xKqoGUoFHfv57u up2MQOa8rcQOTaTIIZRTdZGu1Y2fgWGttVqN7+WUz4beeEfBsGLatArdxux5Ut/q SjRAcLZskOEKO9tZfREjrv0J9Yqc7yNNFM6RWkSosDvtgwEXlPf0AtAdM2gjffAQ QcJ4PM4PiLdGpUXD8HXE5e6AdUnKEJqoqFMn9dU9yFi1h+v7yTgFQSmqs69YQoEJ wvEExf1Uq33JC+Hgy+RbuxvUWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFXxT8B wUXf7OwQgHcMoj7o87BkMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP1G220TymcV9QlwcE5V02/hidnhw/lzIWHCXTPg8c1kTRRaRmLD8ZJuh2nzK ZhF35PssbC85kniOxlwfm8qb7KKZ+3w4jbu8c4EP3SEI/bPg4aSSef3u8wSikMIT 7dGmimkasehk9J0Yt5qIu9SZXoXusLmXJRFaMgcPram1KJjtI1sbFKyD13Ljrxq4 dukTyUwFrBxorsSuWTRzoZwks26EDtKVVGEGAx1ybo6h2sPKLsLQ6CGVW1HRp/pX QHz+MZvJVr7XPJvJFxKTJqpcGbdNGi9MILYPWS5kQG3HhLwIymlQpw9Lgmdc4sUp NDsLRe/OxasZWGaiZ0D/Hq6FDA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:07 2026 by rpki-client