$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft File: iWOqihtflIfiJtJG8ORMlgyPKpg.mft (raw, json) Hash identifier: c4FyhaFv5HE1qxuTbaoA1BXdStSPn/uuqjRNZywr1jA= Subject key identifier: A0:E2:84:17:21:E5:7A:BF:A1:8A:8C:FE:E0:39:43:B5:6A:95:6D:A0 Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft Manifest number: 0E Signing time: Sun 05 Apr 2026 08:28:02 +0000 Manifest this update: Sun 05 Apr 2026 08:28:01 +0000 Manifest next update: Sun 12 Apr 2026 08:28:01 +0000 Files and hashes: 1: iWOqihtflIfiJtJG8ORMlgyPKpg.crl (hash: SrU1q2bzzdyHhdX5Wuse1cqT4a2kuczbsWpYy8Ncj8E=) 2: F5FB1528251811F19BF603D3C0833773.roa (hash: 8JF1Xwm4ghBxpQhLmUBlUSU0yke5/SmVI3FtoYK94Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98 Validity Not Before: Apr 5 08:28:01 2026 GMT Not After : Apr 12 08:28:01 2026 GMT Subject: CN=69d21d12-de85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:a4:f1:6c:ea:1b:60:45:50:ae:d0:08:18: ed:43:32:48:07:d5:3c:2c:04:77:f7:31:10:4e:9f: 2b:ee:fe:7f:62:7b:0e:f1:84:f4:a8:31:48:f1:57: 7c:81:e0:d7:fb:45:47:fe:ae:16:db:29:ab:76:c7: 94:0f:7f:ea:f3:d3:ab:98:ba:7e:a7:c6:5e:11:26: 9a:35:76:b1:97:37:a9:e6:e7:60:93:10:54:9e:af: 4b:d5:36:a8:4c:f6:7a:fb:76:94:d5:66:be:c8:36: 66:ca:d6:41:cc:58:51:61:82:56:a6:8c:ca:1f:b2: 7c:a1:5d:c1:54:b9:ee:57:7c:81:f6:fe:be:5f:38: 45:39:c7:7d:d6:7e:5b:91:34:e7:e3:19:01:b4:ae: 5a:de:27:6b:f9:2a:87:0a:e7:52:c4:c2:36:19:95: 2c:73:ff:22:34:0d:21:e4:2e:5a:6b:11:54:f3:51: 2b:ab:d0:f2:49:b4:d5:0a:0e:36:0c:6f:d5:84:ec: 39:ca:87:fe:c9:94:28:8b:41:7e:b8:e6:c5:0f:16: 3b:72:53:26:5c:02:85:fd:74:f5:1e:7e:94:5f:70: 92:4d:66:f9:4c:d8:58:d3:ab:e1:89:50:fb:d9:63: 3f:d5:06:ad:1a:68:f8:7b:44:c0:25:a0:1c:61:1d: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E2:84:17:21:E5:7A:BF:A1:8A:8C:FE:E0:39:43:B5:6A:95:6D:A0 X509v3 Authority Key Identifier: keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:06:d7:5c:4b:ba:92:fa:15:25:4c:bc:91:58:9c:1a:df:8d: 27:ac:02:39:c0:2a:66:b5:c1:99:f1:bb:68:cf:5c:f6:b2:55: ee:c0:ee:97:b8:d1:63:1d:2a:2f:db:ab:60:fb:29:11:4d:10: fb:4e:73:84:59:4d:b1:2d:2e:2c:5b:e9:ac:64:d5:7b:ec:a9: 48:42:37:db:c9:b6:72:c4:b6:82:67:3f:9a:df:25:0b:5a:7e: 48:35:88:d7:be:1d:f9:24:2a:7b:74:36:59:63:b4:8e:95:54: 5a:af:b4:87:5d:41:73:bb:32:bb:b7:df:0d:c0:77:64:19:37: 06:88:09:42:05:6d:02:ce:02:be:43:7d:1d:c9:50:60:c2:bb: ae:4b:0a:c1:6f:d2:b7:ad:0c:c5:05:26:59:af:69:17:19:78: f3:37:41:9c:29:14:d4:34:09:b2:de:c8:25:10:08:0a:6f:12: 89:61:dc:9a:8e:8b:b8:fc:fb:23:15:86:9c:f3:67:4c:36:a2: c8:4a:9f:2d:ec:31:5b:f8:ce:7d:f3:6c:51:0c:5b:b5:aa:85: 10:2c:80:62:63:9b:cf:fa:22:d6:a8:d9:96:27:a2:3e:6c:f3: 22:05:ce:4a:3b:de:0b:3f:f3:fa:20:c9:75:ea:17:95:32:6f: d9:b7:a0:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNBQjExMC8GA1UEBRMoODk2M0FBOEExQjVGOTQ4N0UyMjZEMjQ2RjBFNDRDOTYw QzhGMkE5ODAeFw0yNjA0MDUwODI4MDFaFw0yNjA0MTIwODI4MDFaMBgxFjAUBgNV BAMTDTY5ZDIxZDEyLWRlODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5lqTxbOobYEVQrtAIGO1DMkgH1TwsBHf3MRBOnyvu/n9iew7xhPSoMUjxV3yB 4Nf7RUf+rhbbKat2x5QPf+rz06uYun6nxl4RJpo1drGXN6nm52CTEFSer0vVNqhM 9nr7dpTVZr7INmbK1kHMWFFhglamjMofsnyhXcFUue5XfIH2/r5fOEU5x33WfluR NOfjGQG0rlreJ2v5KocK51LEwjYZlSxz/yI0DSHkLlprEVTzUSur0PJJtNUKDjYM b9WE7DnKh/7JlCiLQX645sUPFjtyUyZcAoX9dPUefpRfcJJNZvlM2FjTq+GJUPvZ Yz/VBq0aaPh7RMAloBxhHT/9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoOKEFyHl er+hioz+4DlDtWqVbaAwHwYDVR0jBBgwFoAUiWOqihtflIfiJtJG8ORMlgyPKpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0FCLzJFNUM0NUM0MjRD QzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElmaUp0Skc4T1JNbGd5UEtw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdPcWlodGZsSWZpSnRKRzhPUk1sZ3lQS3BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0FCLzJFNUM0NUM0MjRDQzExRjE5QURCQTQwNUE4ODMzNzczL2lXT3FpaHRmbElm aUp0Skc4T1JNbGd5UEtwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJBtdcS7qS+hUlTLyRWJwa340nrAI5wCpmtcGZ8btoz1z2slXuwO6XuNFjHSov 26tg+ykRTRD7TnOEWU2xLS4sW+msZNV77KlIQjfbybZyxLaCZz+a3yULWn5INYjX vh35JCp7dDZZY7SOlVRar7SHXUFzuzK7t98NwHdkGTcGiAlCBW0CzgK+Q30dyVBg wruuSwrBb9K3rQzFBSZZr2kXGXjzN0GcKRTUNAmy3sglEAgKbxKJYdyajou4/Psj FYac82dMNqLISp8t7DFb+M5982xRDFu1qoUQLIBiY5vP+iLWqNmWJ6I+bPMiBc5K O94LP/P6IMl16heVMm/Zt6Be -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:32 2026 by rpki-client