$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: hs6DIjBX1UI4ISatGUUTNf39+UEkWB7l1e9i1pIGw5A= Subject key identifier: 1B:30:F3:B9:4B:6B:A0:5F:CC:B7:84:D9:C5:F6:48:A5:19:29:02:41 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 015C Signing time: Sun 05 Apr 2026 04:26:09 +0000 Manifest this update: Sun 05 Apr 2026 04:26:09 +0000 Manifest next update: Sun 12 Apr 2026 04:26:09 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: O85dvGkZs7KXfNnTdFZaJLkVqkrsfLnQyav6SbuObuI=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: Hjw+siIQ5fbdFdcnCepGzCI/276MBHifwin1GKcNedI=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: MnaX3T0zyBvJ0bwY6OhmDdwRp34O+rk5wwsxDth8dQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Apr 5 04:26:09 2026 GMT Not After : Apr 12 04:26:09 2026 GMT Subject: CN=69d1e461-d672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:7b:a7:cf:25:8e:73:c3:28:52:bb:3e:6f: 00:1c:b8:f6:b6:50:f7:96:fc:b0:c0:77:4d:80:d8: 6b:ba:f2:f6:4b:bd:19:1e:dd:3d:d1:af:22:8c:20: fd:50:be:ad:ec:89:cb:ed:f1:9d:ea:26:61:72:99: 79:f2:d5:4e:00:df:fb:f3:ee:4a:a2:c2:10:e7:e5: 23:16:f4:f5:3f:1e:07:73:a0:ff:36:ea:1f:a2:aa: 26:b5:1e:f3:e1:81:1b:5b:14:7c:24:c5:40:32:fd: 92:12:a0:e9:38:90:0b:07:e2:0a:7b:2d:d7:c7:cd: fa:83:1f:ab:d7:fe:08:fd:99:82:cf:9e:16:37:e4: 91:75:dd:33:2e:c7:f3:da:c4:6d:51:5b:fc:f2:d2: 62:44:de:0e:8d:97:ab:7a:5a:68:96:b2:2d:38:b3: 6a:93:28:52:79:98:90:a0:3c:bc:4b:60:da:61:dd: 22:a1:6b:f2:a7:bc:ca:7f:d5:e8:e9:dc:50:28:52: 94:88:54:0c:83:e3:76:43:c6:af:9e:92:7f:81:59: 11:65:bd:8c:a4:b9:cd:1f:83:46:d9:81:5e:7f:61: 85:87:2d:ac:be:6c:43:5d:16:b2:3d:0c:5b:af:20: 0d:08:bc:57:96:23:cc:a6:e6:df:dc:cb:9a:3b:d3: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:30:F3:B9:4B:6B:A0:5F:CC:B7:84:D9:C5:F6:48:A5:19:29:02:41 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:da:39:d5:ca:38:06:b3:a8:c0:2a:49:f7:bb:19:83:04:93: ec:5a:d6:57:97:64:f2:e2:8c:bf:83:8a:e3:1d:1e:5d:82:2e: 7b:45:ac:02:d3:8f:5d:78:41:ea:76:eb:be:cf:0a:9e:c1:f9: 64:86:5c:f5:c6:49:fc:7d:79:c3:03:00:11:d1:b6:86:68:27: b5:d1:44:a2:a6:54:73:ba:b0:af:17:5c:8b:e7:51:7b:ba:37: f9:cc:b0:8d:a3:7d:33:51:d3:d3:b2:3e:24:8c:ea:15:0c:f8: c9:e9:90:33:b9:1c:9c:66:5e:c3:90:a7:d8:c0:fd:34:61:fa: d8:ba:2e:83:a4:1c:3f:31:dd:23:4b:1a:f9:2f:db:84:46:be: db:83:6d:fc:fc:ea:69:74:de:df:28:de:af:f6:bb:93:97:da: f0:37:cb:d1:db:9b:5d:8c:32:78:2a:94:72:57:00:09:2e:d4: 46:78:5f:ca:75:9b:3e:73:89:db:ab:99:85:ac:69:09:80:aa: c5:0a:81:5e:71:dc:b3:80:48:9b:9b:6f:b2:93:89:4c:19:c8: 5a:08:f3:e8:5f:64:98:15:ce:a2:ec:c8:59:99:3b:b9:80:5e: dd:20:7e:73:7c:8b:a3:08:74:9d:f6:ed:09:99:5f:9c:f3:8e: be:09:c7:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjYwNDA1MDQyNjA5WhcNMjYwNDEyMDQyNjA5WjAYMRYwFAYD VQQDEw02OWQxZTQ2MS1kNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYB7p88ljnPDKFK7Pm8AHLj2tlD3lvywwHdNgNhruvL2S70ZHt090a8ijCD9 UL6t7InL7fGd6iZhcpl58tVOAN/78+5KosIQ5+UjFvT1Px4Hc6D/NuofoqomtR7z 4YEbWxR8JMVAMv2SEqDpOJALB+IKey3Xx836gx+r1/4I/ZmCz54WN+SRdd0zLsfz 2sRtUVv88tJiRN4OjZerelpolrItOLNqkyhSeZiQoDy8S2DaYd0ioWvyp7zKf9Xo 6dxQKFKUiFQMg+N2Q8avnpJ/gVkRZb2MpLnNH4NG2YFef2GFhy2svmxDXRayPQxb ryANCLxXliPMpubf3MuaO9OvowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsw87lL a6BfzLeE2cX2SKUZKQJBMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAdo51co4BrOowCpJ97sZgwST7FrWV5dk8uKMv4OK4x0eXYIue0WsAtOPXXhB 6nbrvs8KnsH5ZIZc9cZJ/H15wwMAEdG2hmgntdFEoqZUc7qwrxdci+dRe7o3+cyw jaN9M1HT07I+JIzqFQz4yemQM7kcnGZew5Cn2MD9NGH62Loug6QcPzHdI0sa+S/b hEa+24Nt/PzqaXTe3yjer/a7k5fa8DfL0dubXYwyeCqUclcACS7URnhfynWbPnOJ 26uZhaxpCYCqxQqBXnHcs4BIm5tvspOJTBnIWgjz6F9kmBXOouzIWZk7uYBe3SB+ c3yLowh0nfbtCZlfnPOOvgnHSw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:12 2026 by rpki-client