$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json) Hash identifier: 09x5BkX/GY2RApRGtGKfB5yLJ7jPcDPpQUafunlL7vY= Subject key identifier: 32:EB:2C:BE:33:5A:69:08:BF:B5:8B:CD:73:FF:47:EA:3B:1D:48:68 Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft Manifest number: 0F Signing time: Sun 05 Apr 2026 08:24:12 +0000 Manifest this update: Sun 05 Apr 2026 08:24:11 +0000 Manifest next update: Sun 12 Apr 2026 08:24:11 +0000 Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: hwkarSpOZPG05IF7wU534RzPA4vMtdYwxbQRuORaVKc=) 2: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=) 3: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Validity Not Before: Apr 5 08:24:11 2026 GMT Not After : Apr 12 08:24:11 2026 GMT Subject: CN=69d21c2b-7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:24:bf:78:fe:f3:42:1b:72:c6:ba:fe:d6: 95:fb:67:37:8e:49:98:6f:08:45:5a:98:2b:0c:73: e8:97:50:a5:74:a7:ba:26:12:4d:4a:d5:1e:37:b5: 8b:a3:2d:d0:ea:78:26:7d:4b:e2:bf:05:45:78:ac: 6f:d5:8d:f9:dd:fc:32:ad:a3:96:fe:9d:a6:7f:b5: a5:45:39:79:e8:21:40:a1:0a:90:4d:8e:d2:2f:1e: b6:01:35:69:75:65:51:f0:2d:17:d2:fc:6b:a2:43: 92:a8:d7:6d:f0:e3:f2:94:fc:09:ef:6c:05:0c:87: 78:fc:e4:c9:1f:e2:4d:96:12:22:15:91:18:1f:1b: b1:7d:f8:60:c3:8b:63:b7:3d:93:60:7d:9d:ee:ed: b6:21:d6:ca:35:3b:66:c7:f3:1c:4d:98:6d:74:b1: b9:31:c6:92:66:e7:0d:b7:78:3c:32:3e:de:4f:2a: c0:cb:4e:f5:90:fb:6b:de:fb:4e:66:3c:ee:05:d2: 74:db:23:46:f8:b1:e3:14:c3:6b:c8:5a:11:2c:cf: b2:d2:31:6d:50:10:8c:14:d2:11:b4:d7:bc:c7:53: 3c:ff:fb:7e:a2:ca:62:93:b5:5f:e5:7d:4c:c5:03: 06:ab:5a:63:98:8d:4d:0a:f7:c2:cf:21:04:eb:c2: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EB:2C:BE:33:5A:69:08:BF:B5:8B:CD:73:FF:47:EA:3B:1D:48:68 X509v3 Authority Key Identifier: keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cf:c5:22:0a:77:5d:f0:24:c2:ec:20:b5:18:4d:dd:9a:3a: 76:0e:c5:2c:8b:76:e5:90:6e:60:c1:f0:95:c1:af:f8:71:3e: e2:3c:68:25:1b:7e:0f:c2:68:7f:cc:00:8b:6f:58:40:c6:69: e1:2e:7c:8d:c1:0f:a6:71:c2:56:1a:1f:58:47:db:e0:e3:61: bf:b0:80:32:45:09:75:4e:db:94:e8:c5:71:3d:2b:be:97:89: ec:05:1e:73:26:53:78:63:7e:eb:01:14:7f:8e:6e:23:fd:cf: 48:b8:08:7d:19:38:06:fb:bd:4b:1d:e9:b4:f3:1c:20:50:31: 84:42:3e:fa:f1:22:ca:bf:97:38:41:ba:08:61:1c:5d:1c:6e: 33:2e:ab:05:4c:a7:ab:c1:6d:57:1c:26:8b:99:0c:6a:74:fd: 46:4a:0c:bc:18:de:df:fb:07:0d:ca:23:d4:4c:61:b9:99:1f: 94:4f:f8:2f:aa:9d:da:38:0a:e0:b7:9f:02:4c:69:03:88:db: 17:00:5b:a3:1e:e3:04:e9:28:1b:f4:17:ca:cd:0f:67:60:6e: 4c:cc:76:a6:50:d9:ae:16:69:c8:fb:2e:6c:a0:eb:68:04:85: 1d:84:be:16:23:6d:3d:f8:ec:d7:98:34:c6:df:77:a8:2c:95: 8c:e1:e4:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUMwNTExMC8GA1UEBRMoMDA4RDRGOUY1ODY4RUMyMkE3QTkxRUNBQURDRDdFMEQz QjMxMTE3RjAeFw0yNjA0MDUwODI0MTFaFw0yNjA0MTIwODI0MTFaMBgxFjAUBgNV BAMTDTY5ZDIxYzJiLTcyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpDSS/eP7zQhtyxrr+1pX7ZzeOSZhvCEVamCsMc+iXUKV0p7omEk1K1R43tYuj LdDqeCZ9S+K/BUV4rG/Vjfnd/DKto5b+naZ/taVFOXnoIUChCpBNjtIvHrYBNWl1 ZVHwLRfS/GuiQ5Ko123w4/KU/AnvbAUMh3j85Mkf4k2WEiIVkRgfG7F9+GDDi2O3 PZNgfZ3u7bYh1so1O2bH8xxNmG10sbkxxpJm5w23eDwyPt5PKsDLTvWQ+2ve+05m PO4F0nTbI0b4seMUw2vIWhEsz7LSMW1QEIwU0hG017zHUzz/+36iymKTtV/lfUzF AwarWmOYjU0K98LPIQTrwqpfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMussvjNa aQi/tYvNc/9H6jsdSGgwHwYDVR0jBBgwFoAUAI1Pn1ho7CKnqR7Krc1+DTsxEX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzA1Lzc3QkFDNDMwMUQw MDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NLbnFSN0tyYzEtRFRzeEVY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUkxUG4xaG83Q0tucVI3S3JjMS1EVHN4RVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzA1Lzc3QkFDNDMwMUQwMDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NL bnFSN0tyYzEtRFRzeEVYOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsz8UiCndd8CTC7CC1GE3dmjp2DsUsi3blkG5gwfCVwa/4cT7iPGglG34Pwmh/ zACLb1hAxmnhLnyNwQ+mccJWGh9YR9vg42G/sIAyRQl1TtuU6MVxPSu+l4nsBR5z JlN4Y37rARR/jm4j/c9IuAh9GTgG+71LHem08xwgUDGEQj768SLKv5c4QboIYRxd HG4zLqsFTKerwW1XHCaLmQxqdP1GSgy8GN7f+wcNyiPUTGG5mR+UT/gvqp3aOArg t58CTGkDiNsXAFujHuME6Sgb9BfKzQ9nYG5MzHamUNmuFmnI+y5soOtoBIUdhL4W I209+OzXmDTG33eoLJWM4eT6 -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:21 2026 by rpki-client