$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: nlx8ZEErYDll6k7slgnytlN46ANKuT4IjunwhmAOAOA= Subject key identifier: AF:36:9B:91:DA:CD:AB:26:33:26:52:89:85:C4:FA:5D:64:30:2C:6C Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: FE Signing time: Sun 05 Apr 2026 05:35:44 +0000 Manifest this update: Sun 05 Apr 2026 05:35:44 +0000 Manifest next update: Sun 12 Apr 2026 05:35:44 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: UUfb0L8ofo2ewU9QtZGrIPh8vH1sRdmF7V7IJeW+X0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Apr 5 05:35:44 2026 GMT Not After : Apr 12 05:35:44 2026 GMT Subject: CN=69d1f4b0-a82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:53:a6:79:e0:3d:75:55:f8:11:fa:d2:b8: 23:4d:d5:2f:13:15:2c:8d:d2:81:7c:2e:e9:30:8b: f9:cd:9e:79:4b:3b:64:b3:07:68:95:cf:e9:6f:3e: 6c:3b:09:ab:68:81:2f:02:38:ff:3d:43:6d:b7:03: ec:e5:ce:96:9b:83:b4:70:a0:1a:b6:43:af:ea:e1: c2:2f:2d:a2:56:2a:b9:26:3d:cf:55:31:b4:e0:2e: 06:f6:05:49:14:20:60:9c:ac:c7:07:e8:e4:8e:0e: 84:71:bc:83:ec:bd:17:b1:74:70:57:5f:07:e8:ea: c8:1e:df:56:ef:60:dc:f8:37:ed:2d:63:57:c5:53: 20:50:b2:e9:41:58:6c:6a:b8:6b:7f:9c:66:32:fb: 2b:0a:61:79:88:38:37:d4:47:8a:f5:ac:3e:ee:65: 4c:bc:32:63:d8:1a:5d:08:99:0a:21:ea:dd:a4:07: e8:d6:e7:54:cd:7d:ea:3f:15:ff:4e:b2:c4:cd:d8: b9:06:82:65:c6:c6:6f:ba:8e:8e:11:dc:98:0a:a9: 3a:0c:64:f4:06:de:b4:f7:ca:36:99:a5:ec:7e:bb: cf:32:37:2d:6b:70:39:9e:6f:81:74:cf:85:3a:50: 96:17:ea:42:ea:7d:ba:00:24:0a:69:2b:9e:08:ae: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:36:9B:91:DA:CD:AB:26:33:26:52:89:85:C4:FA:5D:64:30:2C:6C X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:59:dc:e2:d8:cc:ee:5c:59:d2:d8:57:e5:d9:65:03:23:6b: 2e:10:9f:4a:f7:33:86:d7:a5:12:2d:ef:8e:6f:8e:56:4d:79: 58:1b:42:de:e1:95:a5:d8:70:cb:f2:4e:b2:e4:f8:60:a5:5e: 0d:6c:9d:28:4d:da:96:07:f7:5f:67:0a:4a:96:83:e4:22:9c: 61:d4:a0:e1:6f:4e:64:9a:96:6b:8d:00:10:b2:f6:f0:f0:81: c9:ed:df:fc:ac:55:e3:9d:b9:aa:41:8b:40:4c:5f:6a:a8:7f: db:31:7e:01:94:6f:cd:5d:b8:49:64:26:a2:36:44:6d:64:5c: c2:5b:49:2f:0f:08:8d:ed:9a:c6:7d:33:67:3a:77:e8:6b:72: ca:49:c0:e8:9b:8d:1d:60:d7:69:92:cd:c8:87:0a:4e:91:c8: ef:90:52:c8:74:b2:09:3e:8d:45:99:47:29:46:42:29:70:9e: a0:98:49:a1:cf:e1:24:25:4c:fb:00:2e:0e:49:8f:3e:de:d4: e4:0a:7d:d0:39:50:72:b0:46:7c:21:76:e4:0c:88:31:7e:c9: 0e:98:81:f8:81:e1:1b:8b:c5:64:5e:83:23:e9:13:be:7b:60: 98:de:00:62:c4:41:bf:58:cc:ab:de:a9:b6:9b:04:23:d9:35: 0a:7a:d9:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjYwNDA1MDUzNTQ0WhcNMjYwNDEyMDUzNTQ0WjAYMRYwFAYD VQQDEw02OWQxZjRiMC1hODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rFTpnngPXVV+BH60rgjTdUvExUsjdKBfC7pMIv5zZ55Sztkswdolc/pbz5s OwmraIEvAjj/PUNttwPs5c6Wm4O0cKAatkOv6uHCLy2iViq5Jj3PVTG04C4G9gVJ FCBgnKzHB+jkjg6EcbyD7L0XsXRwV18H6OrIHt9W72Dc+DftLWNXxVMgULLpQVhs arhrf5xmMvsrCmF5iDg31EeK9aw+7mVMvDJj2BpdCJkKIerdpAfo1udUzX3qPxX/ TrLEzdi5BoJlxsZvuo6OEdyYCqk6DGT0Bt6098o2maXsfrvPMjcta3A5nm+BdM+F OlCWF+pC6n26ACQKaSueCK6IhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK82m5Ha zasmMyZSiYXE+l1kMCxsMB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1nc4tjM7lxZ0thX5dllAyNrLhCfSvczhtelEi3vjm+OVk15WBtC3uGVpdhw y/JOsuT4YKVeDWydKE3algf3X2cKSpaD5CKcYdSg4W9OZJqWa40AELL28PCBye3f /KxV4525qkGLQExfaqh/2zF+AZRvzV24SWQmojZEbWRcwltJLw8Ije2axn0zZzp3 6GtyyknA6JuNHWDXaZLNyIcKTpHI75BSyHSyCT6NRZlHKUZCKXCeoJhJoc/hJCVM +wAuDkmPPt7U5Ap90DlQcrBGfCF25AyIMX7JDpiB+IHhG4vFZF6DI+kTvntgmN4A YsRBv1jMq96ptpsEI9k1CnrZUQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:05:32 2026 by rpki-client