$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: t6P4ZYC0ex7+dcxpbP5pihV8lmuIzOVajhQbUB+XvZw= Subject key identifier: AE:BA:0A:CA:2A:7F:63:29:77:35:9C:65:88:1C:00:B5:39:3D:49:2E Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 01CD Signing time: Wed 29 Apr 2026 04:16:08 +0000 Manifest this update: Wed 29 Apr 2026 04:16:07 +0000 Manifest next update: Wed 06 May 2026 04:16:07 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: SSyAevyK4RJ0I0hVTO/gV1ppdhqw43DXoUXbvadzf6o=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 04:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Apr 29 04:16:07 2026 GMT Not After : May 6 04:16:07 2026 GMT Subject: CN=69f18607-5fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:08:7f:4b:3d:52:4e:c6:4a:1c:c3:14:ab: b4:cb:83:b4:e0:6c:0c:46:8e:9f:48:11:d7:83:7f: c7:0a:70:22:b2:a8:a8:37:1c:a3:af:c4:e0:50:0c: be:b4:0c:5b:67:36:82:01:1d:39:96:02:be:01:31: dd:85:ee:35:94:ae:ac:a7:fb:a3:1a:83:d8:a5:ed: 65:18:d2:1d:ff:51:2a:ad:dd:ec:b6:9b:df:b2:23: 80:a2:64:6d:ef:1e:af:00:e8:14:ae:e5:f8:7f:74: e1:f2:a5:b1:b3:6c:d9:62:56:dd:0b:60:d1:c9:ec: 83:51:72:7e:61:ec:a9:49:9d:48:ab:b8:1f:68:0b: 57:23:05:35:84:5e:7d:c3:8b:7a:f3:33:98:b7:8c: 42:75:7f:96:3c:c7:8a:d4:12:0e:45:30:50:61:ff: 1e:a5:0b:f3:4a:cb:5f:b5:05:1e:8b:b3:44:de:42: 7d:19:1d:ec:ab:b7:cf:d9:12:01:a5:7d:fb:88:4e: 9b:12:7a:1e:3f:7f:37:5a:b7:ed:fd:a8:22:69:0f: 8c:ca:c7:17:35:ce:cc:93:70:fb:96:3a:16:1b:50: 15:5f:56:4e:51:62:5e:00:97:03:87:7f:51:82:0e: 9e:8d:14:cf:34:86:92:1c:d7:7c:dd:61:6d:e8:2d: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:0A:CA:2A:7F:63:29:77:35:9C:65:88:1C:00:B5:39:3D:49:2E X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:31:f8:2f:26:87:82:40:81:14:0c:b8:0e:dd:4c:88:05:f0: e1:6f:b8:f7:2a:b5:25:9d:08:49:9c:21:dc:64:11:0b:77:5a: ec:8a:22:27:14:a0:ba:f3:e8:bb:ba:a8:cc:bf:a7:d1:62:88: 0b:01:b6:47:cc:21:f9:c6:f1:e0:a4:dc:a7:19:8d:6e:28:9d: 1c:ec:78:0e:6f:8c:e9:6d:35:03:dd:7f:85:68:f0:20:f9:1c: 4d:47:73:83:ac:d6:2d:1c:61:40:ae:93:25:d8:4e:3c:45:8f: 8d:4c:24:91:15:b0:11:60:30:a8:4f:ce:2b:7a:65:4b:7d:b8: ff:d4:f2:13:79:e8:50:bb:c4:be:17:9f:7a:12:35:94:96:03: 26:d8:26:0c:ee:5b:50:4e:f4:42:43:87:35:68:ea:1e:7f:46: 8c:0c:34:b3:ef:82:b1:7d:1d:da:1a:42:c2:a8:bf:04:63:14: ff:6b:10:30:53:fd:b4:14:85:01:42:e2:6f:6a:e0:51:70:96: 0a:88:48:9c:da:3b:36:1f:d2:63:f2:c5:87:40:37:74:c8:f7: 8b:7c:02:40:c9:b1:b8:ea:d0:0d:48:b4:44:23:c5:e3:a5:e6: c8:80:59:96:9e:67:22:c8:82:29:3a:51:0e:22:af:25:cb:35: de:e5:5c:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjYwNDI5MDQxNjA3WhcNMjYwNTA2MDQxNjA3WjAYMRYwFAYD VQQDEw02OWYxODYwNy01ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnc8If0s9Uk7GShzDFKu0y4O04GwMRo6fSBHXg3/HCnAisqioNxyjr8TgUAy+ tAxbZzaCAR05lgK+ATHdhe41lK6sp/ujGoPYpe1lGNId/1Eqrd3stpvfsiOAomRt 7x6vAOgUruX4f3Th8qWxs2zZYlbdC2DRyeyDUXJ+YeypSZ1Iq7gfaAtXIwU1hF59 w4t68zOYt4xCdX+WPMeK1BIORTBQYf8epQvzSstftQUei7NE3kJ9GR3sq7fP2RIB pX37iE6bEnoeP383Wrft/agiaQ+MyscXNc7Mk3D7ljoWG1AVX1ZOUWJeAJcDh39R gg6ejRTPNIaSHNd83WFt6C2oEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK66Csoq f2MpdzWcZYgcALU5PUkuMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeTH4LyaHgkCBFAy4Dt1MiAXw4W+49yq1JZ0ISZwh3GQRC3da7IoiJxSguvPo u7qozL+n0WKICwG2R8wh+cbx4KTcpxmNbiidHOx4Dm+M6W01A91/hWjwIPkcTUdz g6zWLRxhQK6TJdhOPEWPjUwkkRWwEWAwqE/OK3plS324/9TyE3noULvEvhefehI1 lJYDJtgmDO5bUE70QkOHNWjqHn9GjAw0s++CsX0d2hpCwqi/BGMU/2sQMFP9tBSF AULib2rgUXCWCohInNo7Nh/SY/LFh0A3dMj3i3wCQMmxuOrQDUi0RCPF46XmyIBZ lp5nIsiCKTpRDiKvJcs13uVcKQ== -----END CERTIFICATE-----Generated at Wed Apr 29 16:59:25 2026 by rpki-client