$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: JrpmaWVkvqC54XCxSACJxnu8ZbKOC8XXxn6FjRFs2zk= Subject key identifier: 08:7C:AE:11:FA:AD:DB:CE:F7:98:90:BD:C3:D4:17:8E:C6:6D:BD:9D Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0B0E Signing time: Sun 26 Apr 2026 19:16:01 +0000 Manifest this update: Sun 26 Apr 2026 19:16:01 +0000 Manifest next update: Sun 03 May 2026 19:16:01 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: 0qRweRXtWyKyqgBKdysi8/RFR8ixrettd99UUmR6v/Y=) 2: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=) 4: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Apr 26 19:16:01 2026 GMT Not After : May 3 19:16:01 2026 GMT Subject: CN=69ee6471-1b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:bc:1d:d8:66:93:27:05:c8:4c:91:02:6d: 62:0d:88:b0:50:c4:e2:2f:20:7a:95:e1:02:bf:e3: 22:2d:a4:85:47:f3:b6:14:53:49:f3:77:c1:ec:db: f4:2f:59:b7:6e:4b:7e:3a:90:f7:be:e5:12:7f:c6: b4:d0:e2:90:61:84:d5:99:cc:fc:dc:c3:eb:03:ce: e8:72:19:9f:ec:9e:08:46:68:7c:45:d4:6e:f8:ee: 19:d9:b7:1a:d4:74:62:c3:58:b7:7f:4a:e1:36:a6: f1:31:06:20:4c:f2:c8:c2:6b:c1:41:44:ad:c1:1b: d2:6a:20:67:7c:16:fe:8b:fa:e4:f0:c1:5f:e3:eb: 75:d3:a7:5a:02:c2:26:95:e0:0b:23:82:84:0f:22: e1:76:55:2d:b5:70:f5:bf:d4:e3:f7:80:84:bc:2d: ed:f2:c5:1a:0b:cb:e1:d4:33:0c:7a:d9:d2:55:bb: 6d:71:cb:a3:99:75:e6:f4:6a:58:54:0a:8c:aa:5c: f6:42:f3:f3:bf:42:ac:6f:f7:17:51:68:f6:db:b0: 6e:a5:fc:10:27:e7:85:04:e3:be:e0:a2:92:62:29: 22:9c:8f:42:85:fb:f7:c1:cd:4f:48:26:34:4b:46: 15:e8:cf:59:18:58:46:98:8c:cb:38:7e:7a:fc:6f: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:AE:11:FA:AD:DB:CE:F7:98:90:BD:C3:D4:17:8E:C6:6D:BD:9D X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8b:cb:95:45:2f:f7:31:d9:2a:0b:35:11:f4:03:1f:13:28: b8:8d:23:36:50:9d:fd:4e:f0:d2:f5:10:6e:18:f7:b6:f1:ab: 77:48:d5:98:17:a8:59:b2:ef:65:dd:95:1b:b0:e4:51:d2:eb: fe:28:f5:85:5a:8d:28:f0:92:f6:7e:74:9c:96:04:74:09:10: 21:8e:3a:a4:4c:bf:48:41:d4:43:65:2c:b0:61:21:c3:19:89: e1:3c:29:c5:3b:a5:aa:76:c2:02:6b:a6:d0:b0:b0:02:3d:f1: 5c:23:ff:85:ed:0a:f5:d5:57:d3:a4:70:f4:82:ad:7e:92:d0: bc:55:55:af:a4:07:ad:b1:10:e6:22:38:a8:e8:82:78:95:15: f8:12:00:08:72:a9:47:f5:35:50:80:49:73:c7:6c:2a:df:3a: 91:52:04:ad:ed:0f:f9:d2:b9:e1:4d:6f:3c:9b:23:d6:95:83: fc:87:72:0d:57:95:c9:30:bf:e4:a9:6f:25:9a:ae:26:ec:ae: 0c:98:c1:c2:46:15:e1:72:99:36:5e:03:7d:eb:81:46:83:27: 14:2e:e3:ee:c9:0c:8a:38:4f:20:dc:46:c5:74:81:b5:6a:d2: 21:f5:36:c3:09:1b:fa:61:15:ca:b8:48:92:50:f9:1d:41:fa: 7d:21:ae:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjYwNDI2MTkxNjAxWhcNMjYwNTAzMTkxNjAxWjAYMRYwFAYD VQQDEw02OWVlNjQ3MS0xYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIK8HdhmkycFyEyRAm1iDYiwUMTiLyB6leECv+MiLaSFR/O2FFNJ83fB7Nv0 L1m3bkt+OpD3vuUSf8a00OKQYYTVmcz83MPrA87ochmf7J4IRmh8RdRu+O4Z2bca 1HRiw1i3f0rhNqbxMQYgTPLIwmvBQUStwRvSaiBnfBb+i/rk8MFf4+t106daAsIm leALI4KEDyLhdlUttXD1v9Tj94CEvC3t8sUaC8vh1DMMetnSVbttccujmXXm9GpY VAqMqlz2QvPzv0Ksb/cXUWj227BupfwQJ+eFBOO+4KKSYikinI9Chfv3wc1PSCY0 S0YV6M9ZGFhGmIzLOH56/G/3PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAh8rhH6 rdvO95iQvcPUF47Gbb2dMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ4vLlUUv9zHZKgs1EfQDHxMouI0jNlCd/U7w0vUQbhj3tvGrd0jVmBeoWbLv Zd2VG7DkUdLr/ij1hVqNKPCS9n50nJYEdAkQIY46pEy/SEHUQ2UssGEhwxmJ4Twp xTulqnbCAmum0LCwAj3xXCP/he0K9dVX06Rw9IKtfpLQvFVVr6QHrbEQ5iI4qOiC eJUV+BIACHKpR/U1UIBJc8dsKt86kVIEre0P+dK54U1vPJsj1pWD/IdyDVeVyTC/ 5KlvJZquJuyuDJjBwkYV4XKZNl4DfeuBRoMnFC7j7skMijhPINxGxXSBtWrSIfU2 wwkb+mEVyrhIklD5HUH6fSGuzg== -----END CERTIFICATE-----Generated at Tue Apr 28 08:22:05 2026 by rpki-client