$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: 9JZWSp7vpwVY25RyBEkVsglG7UBmeSVlHyfWDvNuUDo= Subject key identifier: F5:04:13:85:68:CE:D2:09:8E:52:34:9F:F0:E3:90:71:8C:FF:FE:FB Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0CE2 Signing time: Sat 04 Apr 2026 18:08:07 +0000 Manifest this update: Sat 04 Apr 2026 18:08:07 +0000 Manifest next update: Sat 11 Apr 2026 18:08:07 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: hDb4kslBcervJxPRIQT5cTFGzbNmCq2alrobIwntjPU=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: lLzLMFvq75P6s11FcUbySa49RP0prDTXCNFomk88MZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Apr 4 18:08:07 2026 GMT Not After : Apr 11 18:08:07 2026 GMT Subject: CN=69d15387-22a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:c7:f0:f1:43:8b:83:4d:5f:15:0f:cb:96: af:cb:20:67:72:c2:35:83:44:ae:ad:f1:13:ff:12: 2b:b0:31:21:c5:25:46:13:ea:cb:83:be:94:a2:0e: 69:63:c0:98:c1:b7:18:0e:ac:87:da:8b:37:d8:93: a5:22:72:96:22:e5:16:53:58:c1:bc:b0:a1:a7:35: 0e:14:fb:cb:47:8e:87:5a:34:2d:67:72:55:13:af: aa:b7:f2:02:f9:16:f5:cf:05:98:03:ed:e7:8c:e4: 14:e0:9d:a0:e1:b3:ac:e5:93:9d:d0:5a:03:b7:1c: c6:10:a9:cf:72:7d:0b:d2:2a:d1:86:95:04:34:e9: 22:65:d7:24:22:cb:3b:36:7f:d6:d0:f5:5c:7b:b5: 75:ca:75:0c:ba:88:0c:c0:cd:c3:5c:5f:31:5f:50: 6d:33:3a:36:a2:66:97:73:8f:d5:f3:4a:6a:89:6d: 6e:3b:b1:ce:59:98:f7:33:d6:03:4b:ed:39:01:ae: 30:29:6c:09:86:32:80:0d:31:ca:e4:61:9c:31:e8: 07:3b:09:29:e5:8e:2d:db:e9:9e:11:ab:b0:82:c2: d9:ba:e6:92:df:32:e9:ec:80:9f:33:41:6d:14:88: 06:cc:2e:b4:5a:de:18:b4:e7:e2:11:9b:86:d7:a3: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:04:13:85:68:CE:D2:09:8E:52:34:9F:F0:E3:90:71:8C:FF:FE:FB X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e0:44:94:f4:01:18:28:19:0c:8d:1f:20:64:bb:61:67:d3: 52:8c:43:d5:47:a9:0a:a1:2a:e8:4b:5b:82:20:43:22:6e:03: 8d:4b:8e:0e:7f:95:a4:d2:09:83:3c:21:05:d6:84:17:9a:5d: e5:6f:e7:31:c7:87:fb:fa:24:ac:fa:8a:f6:82:e3:87:bc:e8: de:aa:e1:62:81:91:d4:c6:80:d1:e6:01:a4:a8:e3:0b:6e:b8: b8:89:b0:da:0a:f4:c8:66:58:9d:ed:14:a3:dc:a7:72:e3:0f: 41:69:68:3f:9d:50:b2:ee:1b:c2:c5:1b:ca:2b:60:e0:5c:56: 66:81:64:65:bf:51:17:c1:14:d8:20:55:35:bb:2c:d0:53:54: 94:b3:95:0f:6d:52:10:2b:2d:e6:00:70:83:f5:9b:21:38:78: 03:4d:f6:65:35:47:bc:47:60:c1:cc:bf:42:de:a9:fe:13:81: 77:85:c6:6b:fe:4c:c2:82:f8:f4:8b:d9:47:73:a8:f4:c6:d4: ae:81:71:e4:d8:01:29:c5:27:35:13:1b:6d:0b:b3:44:ce:35: 78:0a:1a:94:c2:5d:2a:ed:4b:ba:c2:2f:e9:72:4b:d9:90:36: 65:b9:f5:5a:c9:78:93:23:dc:3c:d8:ee:79:03:12:af:aa:9a: 7c:11:eb:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjYwNDA0MTgwODA3WhcNMjYwNDExMTgwODA3WjAYMRYwFAYD VQQDEw02OWQxNTM4Ny0yMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CLH8PFDi4NNXxUPy5avyyBncsI1g0SurfET/xIrsDEhxSVGE+rLg76Uog5p Y8CYwbcYDqyH2os32JOlInKWIuUWU1jBvLChpzUOFPvLR46HWjQtZ3JVE6+qt/IC +Rb1zwWYA+3njOQU4J2g4bOs5ZOd0FoDtxzGEKnPcn0L0irRhpUENOkiZdckIss7 Nn/W0PVce7V1ynUMuogMwM3DXF8xX1BtMzo2omaXc4/V80pqiW1uO7HOWZj3M9YD S+05Aa4wKWwJhjKADTHK5GGcMegHOwkp5Y4t2+meEauwgsLZuuaS3zLp7ICfM0Ft FIgGzC60Wt4YtOfiEZuG16MknwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUEE4Vo ztIJjlI0n/DjkHGM//77MB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqOBElPQBGCgZDI0fIGS7YWfTUoxD1UepCqEq6EtbgiBDIm4DjUuODn+VpNIJ gzwhBdaEF5pd5W/nMceH+/okrPqK9oLjh7zo3qrhYoGR1MaA0eYBpKjjC264uImw 2gr0yGZYne0Uo9yncuMPQWloP51Qsu4bwsUbyitg4FxWZoFkZb9RF8EU2CBVNbss 0FNUlLOVD21SECst5gBwg/WbITh4A032ZTVHvEdgwcy/Qt6p/hOBd4XGa/5MwoL4 9IvZR3Oo9MbUroFx5NgBKcUnNRMbbQuzRM41eAoalMJdKu1LusIv6XJL2ZA2Zbn1 Wsl4kyPcPNjueQMSr6qafBHr2g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:03 2026 by rpki-client