$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft File: isQ8i2LLoieYw56lRmt0xBihqQc.mft (raw, json) Hash identifier: vJJRNF0rmmLpCBuIG0Cn4Om9iUsN/oTQ9fM27SppjHE= Subject key identifier: CA:81:41:1C:5D:CC:7E:2A:E1:69:F6:5E:4B:54:1D:5B:35:3D:71:57 Authority key identifier: 8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07 Certificate issuer: /CN=A9147A12/serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft Manifest number: 30 Signing time: Sun 05 Apr 2026 07:59:02 +0000 Manifest this update: Sun 05 Apr 2026 07:59:02 +0000 Manifest next update: Sun 12 Apr 2026 07:59:02 +0000 Files and hashes: 1: isQ8i2LLoieYw56lRmt0xBihqQc.crl (hash: nF+cZhEED+FS5gsy3Iw5yAQ6CIwMNXsCmvl4gvtuvGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147A12, serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907 Validity Not Before: Apr 5 07:59:02 2026 GMT Not After : Apr 12 07:59:02 2026 GMT Subject: CN=69d21646-68c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:2e:0d:e1:a2:fd:72:f1:81:a1:47:c2:ea: 51:38:b6:bd:b5:97:9d:1d:00:7b:c1:93:76:cf:3b: 63:b9:bc:fe:df:a3:cc:f2:85:8b:d0:8d:44:74:c1: 7a:64:56:6b:09:3a:c5:7e:f5:ae:b1:67:45:fc:b8: eb:e8:33:d9:4f:fd:d6:65:f8:79:8c:63:58:9b:39: 81:e9:e0:76:08:e8:97:af:39:84:81:f7:60:a8:ef: 98:6f:e1:27:25:9c:a6:b4:73:58:d7:44:13:eb:5c: 1c:e3:e9:09:4b:00:a9:34:1a:06:94:b5:88:3a:dc: 53:fe:f0:84:30:86:f0:9f:b6:91:00:76:04:84:7e: 18:b8:e1:ea:99:01:be:cd:ad:eb:ea:8a:1e:63:8e: 37:43:18:c0:c9:fe:f9:90:f5:4d:8a:ca:9b:e9:e8: 40:b7:fd:48:79:f7:1f:59:0e:a2:20:f8:12:b4:e1: 56:9f:51:70:cc:4f:5e:e2:99:0a:13:e4:18:d1:8c: 2b:c2:d7:31:68:ec:06:a6:72:83:b1:07:71:a6:36: f2:71:be:eb:c4:1a:49:90:8c:9d:26:02:75:b3:d3: a5:a1:bc:fa:65:7b:05:ff:7f:ac:9a:70:20:d0:41: 2f:04:0d:b1:35:ea:b2:74:20:3d:9e:4b:a3:91:0a: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:41:1C:5D:CC:7E:2A:E1:69:F6:5E:4B:54:1D:5B:35:3D:71:57 X509v3 Authority Key Identifier: keyid:8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ec:f2:88:aa:f6:8d:4b:f6:38:91:dc:b2:96:08:c4:2f:ca: d8:77:08:8b:e5:ea:e4:3b:1b:ea:69:dc:e3:ac:9b:35:77:76: 04:30:78:ee:bc:13:e4:ce:6e:a1:75:1e:70:46:10:35:ee:89: 96:e3:e6:32:99:da:6d:4e:7f:7c:f9:e1:96:f4:db:31:b3:a7: 3a:e3:50:eb:f6:45:50:ea:40:c5:04:ff:c4:1e:9a:2e:12:33: ab:2c:f2:ce:a4:73:3c:85:95:99:08:6f:0d:1c:b7:ff:7c:f5: 45:39:5d:ef:b7:62:8b:49:53:04:2c:80:6a:4c:bd:bb:3c:ac: 14:ba:c2:41:3f:79:1c:b9:11:17:99:34:c3:1e:42:1b:44:b0: 73:9e:30:5b:a1:ad:52:3e:28:e3:ff:23:a9:2a:05:aa:46:69: 63:68:bf:34:82:30:20:aa:db:42:4e:53:b7:f3:db:77:21:9e: 02:b0:ad:de:f9:a6:0c:01:f5:9b:78:10:5f:ed:73:7d:b1:4d: 53:3a:bc:df:e7:d8:8e:6d:74:b5:28:59:06:34:a1:24:64:f1: 94:49:c2:44:83:42:f3:cc:63:68:32:71:26:14:06:32:a6:5e: 67:58:5b:1f:48:6c:54:89:d7:f6:58:e3:68:6a:ba:27:fb:d3: ff:c6:d7:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0ExMjExMC8GA1UEBRMoOEFDNDNDOEI2MkNCQTIyNzk4QzM5RUE1NDY2Qjc0QzQx OEExQTkwNzAeFw0yNjA0MDUwNzU5MDJaFw0yNjA0MTIwNzU5MDJaMBgxFjAUBgNV BAMTDTY5ZDIxNjQ2LTY4YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZXS4N4aL9cvGBoUfC6lE4tr21l50dAHvBk3bPO2O5vP7fo8zyhYvQjUR0wXpk VmsJOsV+9a6xZ0X8uOvoM9lP/dZl+HmMY1ibOYHp4HYI6JevOYSB92Co75hv4Scl nKa0c1jXRBPrXBzj6QlLAKk0GgaUtYg63FP+8IQwhvCftpEAdgSEfhi44eqZAb7N revqih5jjjdDGMDJ/vmQ9U2Kypvp6EC3/Uh59x9ZDqIg+BK04VafUXDMT17imQoT 5BjRjCvC1zFo7AamcoOxB3GmNvJxvuvEGkmQjJ0mAnWz06WhvPplewX/f6yacCDQ QS8EDbE16rJ0ID2eS6ORCnJzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyoFBHF3M firhafZeS1QdWzU9cVcwHwYDVR0jBBgwFoAUisQ8i2LLoieYw56lRmt0xBihqQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QTEyL0VEOThERDZDRUNF MTExRjBCNTM4QkE5QzcxNkY1NkJDL2lzUThpMkxMb2llWXc1NmxSbXQweEJpaHFR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXNROGkyTExvaWVZdzU2bFJtdDB4QmlocVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QTEyL0VEOThERDZDRUNFMTExRjBCNTM4QkE5QzcxNkY1NkJDL2lzUThpMkxMb2ll WXc1NmxSbXQweEJpaHFRYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAi7PKIqvaNS/Y4kdyylgjEL8rYdwiL5erkOxvqadzjrJs1d3YEMHjuvBPkzm6h dR5wRhA17omW4+YymdptTn98+eGW9Nsxs6c641Dr9kVQ6kDFBP/EHpouEjOrLPLO pHM8hZWZCG8NHLf/fPVFOV3vt2KLSVMELIBqTL27PKwUusJBP3kcuREXmTTDHkIb RLBznjBboa1SPijj/yOpKgWqRmljaL80gjAgqttCTlO389t3IZ4CsK3e+aYMAfWb eBBf7XN9sU1TOrzf59iObXS1KFkGNKEkZPGUScJEg0LzzGNoMnEmFAYypl5nWFsf SGxUidf2WONoaron+9P/xtc5 -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:08 2026 by rpki-client