$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: BmYoNSwSiT+OmhsficE8+A8jOuCE9wdzKWi5DiAuk4o= Subject key identifier: 58:FB:26:C7:FB:91:F9:79:E6:C2:F1:15:AC:09:AF:E2:14:92:91:8F Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 0580 Signing time: Sat 04 Apr 2026 23:03:55 +0000 Manifest this update: Sat 04 Apr 2026 23:03:55 +0000 Manifest next update: Sat 11 Apr 2026 23:03:55 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: E4j/2U9sLeBuZWZZRXmZgyyV9uLU/St1h7cl58j/3Gg=) 2: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: Axsa0uyuPTjbrC5wnPZ4BHAIMgaPThG3uMiLY0ziBzQ=) 3: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: +WJvFTxAonY5wxNQGiwRI3ZI8HmyeaPv5VFRCqzMfWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Apr 4 23:03:55 2026 GMT Not After : Apr 11 23:03:55 2026 GMT Subject: CN=69d198db-94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:17:2f:d8:4b:af:cc:fe:be:26:48:7c:cd: 3b:62:71:4b:48:bb:b6:61:47:95:cd:e1:c2:6c:e9: 6b:99:bd:76:4d:be:00:f2:52:88:ee:3b:9b:7e:0f: 5c:4a:2a:e4:8b:03:87:2a:b6:c5:37:3a:3f:49:2b: 0e:71:13:22:76:78:2a:ed:40:95:b0:b7:b4:c9:9d: fa:4d:30:a1:ee:dd:b7:9f:e0:27:0a:a9:01:0e:e7: 6e:3d:16:fc:66:66:07:f9:37:56:75:03:e8:8a:08: f6:f0:b7:04:06:1b:0b:0c:70:ab:6e:6e:b2:3b:a3: a0:e0:e6:23:6f:9d:54:9b:49:3b:4a:98:c2:03:60: 9d:88:03:96:7d:9c:ff:7e:b7:03:cc:fb:74:6d:b0: fb:cd:a2:b2:96:f7:5e:c1:2e:52:8e:82:03:1b:14: 2e:c8:94:47:52:40:d1:d3:03:89:76:ef:ca:1a:82: ce:cc:5e:27:01:4a:a2:7b:06:6d:28:bd:01:c1:65: b1:40:78:d6:87:d6:1d:eb:c9:40:8b:99:c4:05:03: 31:95:f2:24:6c:3c:46:b6:5b:af:f7:33:e8:83:03: 06:6a:44:92:15:c6:67:d5:2b:e5:b5:e0:09:b6:fd: fe:1e:dc:7b:18:90:34:df:65:67:61:9c:12:5c:d9: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FB:26:C7:FB:91:F9:79:E6:C2:F1:15:AC:09:AF:E2:14:92:91:8F X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:a9:4b:7c:65:a2:6e:4a:54:73:f4:2f:f7:d3:b4:64:36:c3: 52:8e:3d:00:05:37:d8:d7:f9:ac:bf:a6:8c:a9:84:33:e6:ef: f9:ab:25:4d:7d:81:62:e4:ad:0a:10:98:f9:6d:6b:55:43:9f: f1:f7:94:f0:0a:9d:5f:34:21:db:c1:8c:7b:68:31:43:8a:6b: 1a:2a:98:4d:c3:3b:34:6d:ca:8d:a8:ec:d4:65:f4:4b:81:0f: 9d:2f:f1:d8:94:58:dd:fd:86:06:50:78:35:a7:b4:8e:f9:f1: cb:1c:df:64:37:76:9a:80:0a:db:df:1f:aa:f1:34:e1:77:e4: 6d:67:c0:bc:3f:82:ed:12:fa:48:52:df:a1:2e:4a:1f:d2:4d: db:c8:b6:4a:be:15:b1:a0:82:8b:82:83:ed:f3:8f:5d:53:75: e8:fc:38:c6:b1:95:2e:41:14:7d:4d:ee:f9:05:2f:38:9a:c9: 98:b0:06:0e:1b:58:d6:b2:ca:e0:d9:11:90:a9:58:aa:7c:72: a0:91:d6:c5:17:33:a2:3b:85:16:7c:6b:ec:63:9f:f3:30:f4: bc:e7:99:45:e6:37:5f:d0:c5:01:c5:59:a1:ad:1d:51:b5:93: 19:e4:21:1d:1e:9a:5c:d6:d2:ca:cd:73:51:97:05:00:79:e6: b5:4b:f5:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjYwNDA0MjMwMzU1WhcNMjYwNDExMjMwMzU1WjAYMRYwFAYD VQQDEw02OWQxOThkYi05NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5UXL9hLr8z+viZIfM07YnFLSLu2YUeVzeHCbOlrmb12Tb4A8lKI7jubfg9c SirkiwOHKrbFNzo/SSsOcRMidngq7UCVsLe0yZ36TTCh7t23n+AnCqkBDuduPRb8 ZmYH+TdWdQPoigj28LcEBhsLDHCrbm6yO6Og4OYjb51Um0k7SpjCA2CdiAOWfZz/ frcDzPt0bbD7zaKylvdewS5SjoIDGxQuyJRHUkDR0wOJdu/KGoLOzF4nAUqiewZt KL0BwWWxQHjWh9Yd68lAi5nEBQMxlfIkbDxGtluv9zPogwMGakSSFcZn1SvlteAJ tv3+Htx7GJA032VnYZwSXNmaSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFj7Jsf7 kfl55sLxFawJr+IUkpGPMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyqlLfGWibkpUc/Qv99O0ZDbDUo49AAU32Nf5rL+mjKmEM+bv+aslTX2BYuSt ChCY+W1rVUOf8feU8AqdXzQh28GMe2gxQ4prGiqYTcM7NG3Kjajs1GX0S4EPnS/x 2JRY3f2GBlB4Nae0jvnxyxzfZDd2moAK298fqvE04XfkbWfAvD+C7RL6SFLfoS5K H9JN28i2Sr4VsaCCi4KD7fOPXVN16Pw4xrGVLkEUfU3u+QUvOJrJmLAGDhtY1rLK 4NkRkKlYqnxyoJHWxRczojuFFnxr7GOf8zD0vOeZReY3X9DFAcVZoa0dUbWTGeQh HR6aXNbSys1zUZcFAHnmtUv16g== -----END CERTIFICATE-----Generated at Mon Apr 6 01:04:01 2026 by rpki-client