$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft File: IjvkLOOp2KZWIHnlEHR8D_xFImM.mft (raw, json) Hash identifier: uG3NHWIezoBnylc0XZMEokuo1WaTKasNHbVPzhPZ0Gc= Subject key identifier: 72:29:4E:75:97:FD:23:8D:2B:37:E2:11:44:C4:A1:F1:8C:A7:CF:07 Authority key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 Certificate issuer: /CN=A9156BBA/serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft Manifest number: 1C Signing time: Sun 05 Apr 2026 08:16:29 +0000 Manifest this update: Sun 05 Apr 2026 08:16:28 +0000 Manifest next update: Sun 12 Apr 2026 08:16:28 +0000 Files and hashes: 1: IjvkLOOp2KZWIHnlEHR8D_xFImM.crl (hash: WOAk/eQzMrSgZ+mQ1pPV0wh1X1nHurXX2H5y5Bk7JR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263 Validity Not Before: Apr 5 08:16:28 2026 GMT Not After : Apr 12 08:16:28 2026 GMT Subject: CN=69d21a5d-fe75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:a4:3e:85:a2:56:e5:7f:b0:c3:fc:f3:0a: be:4c:b7:90:f8:a9:46:d3:49:74:07:f4:f5:49:7d: 39:b9:29:94:30:81:4f:ab:ca:9c:20:37:26:f7:af: 2e:68:51:60:fb:4d:0a:5c:2c:b9:ae:98:97:77:a3: e3:b2:66:20:84:2f:d8:29:9a:ae:13:41:0c:b8:92: f8:29:7f:56:47:c8:a8:f2:71:bc:30:e9:36:b1:0f: a3:5f:19:2c:28:3d:91:ff:0d:a2:c0:d6:92:ad:58: 74:32:1b:35:40:90:9c:a7:ca:3e:37:be:4a:7d:5d: c2:53:2b:74:76:0d:a6:00:48:23:82:a9:13:71:74: 1f:4f:20:96:a0:a4:8a:e3:43:24:c9:37:89:d8:23: b6:ba:39:e2:ab:6f:b2:8b:ea:7e:a6:7c:9d:62:4a: 47:64:44:7e:63:f7:31:46:33:7c:5f:52:e8:0d:d0: 34:51:3b:79:4f:e9:a5:3d:fc:8a:e0:59:40:09:ce: 3d:24:cf:32:a2:9b:76:83:95:f0:88:c7:19:b9:76: 8d:23:2e:44:0a:ca:f5:f9:43:29:65:8c:54:00:1f: 15:68:b9:60:e5:5f:ac:a6:40:29:d5:22:31:2b:95: 8b:22:0a:60:0c:c6:f1:be:98:31:10:9d:0e:49:64: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:4E:75:97:FD:23:8D:2B:37:E2:11:44:C4:A1:F1:8C:A7:CF:07 X509v3 Authority Key Identifier: keyid:22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6c:e4:dc:c5:3b:17:2c:1c:3e:fb:12:bf:d2:8b:fb:af:c3: a9:2a:2e:c9:32:c6:1a:d9:6a:be:a2:17:dc:03:06:9f:e3:67: 6d:33:d2:91:50:03:d4:56:a0:fe:b5:04:e9:63:92:21:32:01: d6:39:9a:5c:60:41:9f:b7:56:7b:dc:9b:63:1c:ce:e0:ad:b0: 7c:0f:2b:bd:06:00:80:39:ad:a3:e0:16:d7:f1:f3:d8:c9:bd: a7:f0:56:29:47:de:3a:7d:8b:80:c8:17:82:7f:b6:4d:1c:33: 7a:01:46:97:34:df:8e:0f:59:8d:87:74:5d:ab:a5:a1:43:03: 58:9c:3f:58:67:5f:36:5d:d1:8d:5f:72:1d:97:75:5c:84:46: 0b:ac:26:21:02:f0:ba:f8:64:0f:d2:44:df:de:1d:07:73:5a: 5f:4f:7f:21:07:55:94:c3:c1:5e:e5:43:d5:2f:47:10:91:4e: 76:85:5a:71:20:37:43:18:8b:fa:13:15:d2:b1:a9:b7:b6:c8: 01:17:34:a3:6e:0d:b4:1e:f0:24:1e:83:48:f8:74:9d:70:98: 0f:d5:b0:cc:65:9b:03:af:9e:4f:d5:e6:28:0c:2a:24:5f:eb: dc:c6:a1:43:35:0e:76:99:48:00:01:ec:33:0f:2e:1b:c0:19: bc:b5:13:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkJCQTExMC8GA1UEBRMoMjIzQkU0MkNFM0E5RDhBNjU2MjA3OUU1MTA3NDdDMEZG QzQ1MjI2MzAeFw0yNjA0MDUwODE2MjhaFw0yNjA0MTIwODE2MjhaMBgxFjAUBgNV BAMTDTY5ZDIxYTVkLWZlNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqEqQ+haJW5X+ww/zzCr5Mt5D4qUbTSXQH9PVJfTm5KZQwgU+rypwgNyb3ry5o UWD7TQpcLLmumJd3o+OyZiCEL9gpmq4TQQy4kvgpf1ZHyKjycbww6TaxD6NfGSwo PZH/DaLA1pKtWHQyGzVAkJynyj43vkp9XcJTK3R2DaYASCOCqRNxdB9PIJagpIrj QyTJN4nYI7a6OeKrb7KL6n6mfJ1iSkdkRH5j9zFGM3xfUugN0DRRO3lP6aU9/Irg WUAJzj0kzzKim3aDlfCIxxm5do0jLkQKyvX5QylljFQAHxVouWDlX6ymQCnVIjEr lYsiCmAMxvG+mDEQnQ5JZCezAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcilOdZf9 I40rN+IRRMSh8YynzwcwHwYDVR0jBBgwFoAUIjvkLOOp2KZWIHnlEHR8D/xFImMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0EyQ0E0M0RDMEQy MjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMktaV0lIbmxFSFI4RF94Rklt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWp2a0xPT3AyS1pXSUhubEVIUjhEX3hGSW1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QkJBL0EyQ0E0M0RDMEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L0lqdmtMT09wMkta V0lIbmxFSFI4RF94RkltTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCPbOTcxTsXLBw++xK/0ov7r8OpKi7JMsYa2Wq+ohfcAwaf42dtM9KRUAPUVqD+ tQTpY5IhMgHWOZpcYEGft1Z73JtjHM7grbB8Dyu9BgCAOa2j4BbX8fPYyb2n8FYp R946fYuAyBeCf7ZNHDN6AUaXNN+OD1mNh3Rdq6WhQwNYnD9YZ182XdGNX3Idl3Vc hEYLrCYhAvC6+GQP0kTf3h0Hc1pfT38hB1WUw8Fe5UPVL0cQkU52hVpxIDdDGIv6 ExXSsam3tsgBFzSjbg20HvAkHoNI+HSdcJgP1bDMZZsDr55P1eYoDCokX+vcxqFD NQ52mUgAAewzDy4bwBm8tRPw -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:47 2026 by rpki-client