$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: 4QQ7JPzlwtLhbLfV1zXmCZytnDllK8LGohfVyJE7pz0= Subject key identifier: 99:F1:18:69:A6:9D:97:B5:3C:8D:42:41:A9:D3:6B:C6:8E:1A:2C:16 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: 7A Signing time: Sun 05 Apr 2026 07:06:20 +0000 Manifest this update: Sun 05 Apr 2026 07:06:20 +0000 Manifest next update: Sun 12 Apr 2026 07:06:20 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: gC5KzqAV88d5tUZudgIw/UpcURdJ1UWf5kDg8vuMfHo=) 2: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: DLNHUZHuS4L6pQW1+bd0pYlrjjNIUCRkspT0sawq79s=) 3: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: iP831x/fULSZ/fmDwuHrWqBHoTP+BYRChB7pWllsa7M=) 4: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: Y8LpukABBo/pP9eZZ75cumiepSudrb+yKJGkwACmG7Q=) 5: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: 16ronhpfPjZ1J9jMJniqcKd5ZSFxc1jnc1AmD+Jt630=) 6: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: g58X+cu42Kh2zFwQ2h9g38vEcazE0TvlqkeIHRWL2eA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Apr 5 07:06:20 2026 GMT Not After : Apr 12 07:06:20 2026 GMT Subject: CN=69d209ec-d2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:ac:7f:e3:d7:23:3d:1d:04:6c:35:1d:c4: 94:19:1f:38:bb:e0:bf:a2:ae:a6:82:7e:37:b3:c2: 15:ba:76:2e:ab:91:93:84:73:69:37:9f:6b:7b:e0: a2:6f:a2:07:7f:b2:f9:10:6e:7f:dc:0a:ee:14:d6: 72:9f:4d:62:4c:ef:cd:8d:a9:4f:55:c2:2d:2f:d7: 53:ae:a8:67:71:fc:de:45:e2:33:d9:f7:0d:98:58: 11:37:c7:dd:ed:db:c4:38:d1:e3:d1:16:e0:a1:07: a5:de:6a:df:bc:96:6e:7d:a4:21:f6:df:98:0b:47: 35:d0:37:c2:c0:0c:7b:db:31:38:ea:64:08:3e:7b: 5c:76:41:a1:68:fc:36:33:02:bc:26:c1:bb:01:01: 9d:f9:ef:a2:f9:2a:ce:49:e4:bc:86:eb:d2:1d:f9: e4:4a:1e:99:b9:1f:cf:2f:de:10:cb:e3:30:5f:74: 32:06:40:0d:8c:87:c2:67:dc:11:26:0a:e7:95:9e: 7a:fe:18:fe:1d:94:ac:8d:f2:21:54:21:16:36:63: 55:3b:18:bf:69:c3:50:24:18:34:17:68:54:f7:1d: a5:b2:78:4d:ca:c9:2d:17:97:a4:77:bc:c6:3b:4a: 66:8c:a6:cf:a4:c7:ee:3d:3b:fe:e3:4b:b0:b3:1b: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:18:69:A6:9D:97:B5:3C:8D:42:41:A9:D3:6B:C6:8E:1A:2C:16 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:14:b7:46:02:f5:76:a2:45:0f:8f:23:84:12:cf:5f:39:1f: dc:30:5a:f4:4a:c7:31:7d:a0:6d:fe:f2:ab:23:6f:d6:60:ef: 16:38:25:36:d5:83:a1:5d:55:8b:9f:18:34:e7:f5:f6:d1:42: 76:82:75:cf:58:31:36:25:df:dd:c2:61:0e:b4:4d:81:85:ed: b0:9b:86:08:3b:8f:39:4d:92:a5:ab:3f:74:9c:7d:6f:ba:93: 13:19:8e:99:2f:74:4a:1f:ae:cf:a4:c2:5c:24:b9:7b:37:82: be:70:3b:c2:4a:7f:dc:3e:d1:fe:6e:4f:26:02:1f:aa:f3:3c: 48:49:43:24:b3:f2:70:e0:58:ed:0a:4c:f6:7f:b7:a8:91:34: 80:2b:9f:f7:70:48:62:43:cf:05:8b:b7:c3:cf:58:b3:87:a4: a7:12:d2:00:f7:c0:23:6e:a8:61:8f:8e:cc:8c:40:76:40:98: a1:18:00:75:e5:cb:da:45:a1:83:91:d5:4f:f4:24:93:10:57: 3e:a0:fd:ca:f2:fc:25:51:96:3b:9d:8e:5b:16:90:54:22:25: 32:bc:b1:6a:5e:97:cb:5a:15:04:61:37:46:41:cb:82:63:75: 3c:3d:a2:13:8a:9f:f7:b0:f5:bb:7c:e8:34:aa:b9:20:03:7e: 48:dc:cf:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwNDA1MDcwNjIwWhcNMjYwNDEyMDcwNjIwWjAYMRYwFAYD VQQDEw02OWQyMDllYy1kMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKmsf+PXIz0dBGw1HcSUGR84u+C/oq6mgn43s8IVunYuq5GThHNpN59re+Ci b6IHf7L5EG5/3AruFNZyn01iTO/NjalPVcItL9dTrqhncfzeReIz2fcNmFgRN8fd 7dvEONHj0RbgoQel3mrfvJZufaQh9t+YC0c10DfCwAx72zE46mQIPntcdkGhaPw2 MwK8JsG7AQGd+e+i+SrOSeS8huvSHfnkSh6ZuR/PL94Qy+MwX3QyBkANjIfCZ9wR JgrnlZ56/hj+HZSsjfIhVCEWNmNVOxi/acNQJBg0F2hU9x2lsnhNysktF5ekd7zG O0pmjKbPpMfuPTv+40uwsxurpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnxGGmm nZe1PI1CQanTa8aOGiwWMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIRS3RgL1dqJFD48jhBLPXzkf3DBa9ErHMX2gbf7yqyNv1mDvFjglNtWDoV1V i58YNOf19tFCdoJ1z1gxNiXf3cJhDrRNgYXtsJuGCDuPOU2Spas/dJx9b7qTExmO mS90Sh+uz6TCXCS5ezeCvnA7wkp/3D7R/m5PJgIfqvM8SElDJLPycOBY7QpM9n+3 qJE0gCuf93BIYkPPBYu3w89Ys4ekpxLSAPfAI26oYY+OzIxAdkCYoRgAdeXL2kWh g5HVT/QkkxBXPqD9yvL8JVGWO52OWxaQVCIlMryxal6Xy1oVBGE3RkHLgmN1PD2i E4qf97D1u3zoNKq5IAN+SNzPUA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:09 2026 by rpki-client