$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: KtauorXfvzXLYh0ZEpxvE3B8UiuxRV/LUiCu+smuR5I= Subject key identifier: 8C:48:F6:67:F8:CB:7B:CB:7A:25:66:43:E3:82:D1:E3:75:48:CA:8E Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 1728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 170B Signing time: Sun 26 Apr 2026 16:32:53 +0000 Manifest this update: Sun 26 Apr 2026 16:32:52 +0000 Manifest next update: Sun 03 May 2026 16:32:52 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: bzqZHZpO21J+0+idbFO9U9qhLaEBiKUUbLk7BQZT45g=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: bxgVx+Ckcae/iQQ31WregWFbQ2YBNnnGGH36C1uq1eE=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: sk2XL2BNft3Qb5DlW0IYmAxdXBhZMlrkB9WLp+WKc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 16:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5928 (0x1728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Apr 26 16:32:52 2026 GMT Not After : May 3 16:32:52 2026 GMT Subject: CN=69ee3e35-e43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:83:69:54:a6:c3:6b:05:46:6d:b8:4b:48: 5f:d3:16:d8:47:13:9f:48:6e:c8:ff:4e:ec:bf:16: 4f:dd:1a:67:f2:e2:db:4d:1b:e8:3d:15:ca:40:cd: 8e:a9:ce:42:e3:94:6e:44:50:96:41:25:62:2d:27: 14:be:b8:5f:c0:70:e9:53:ce:75:e4:fa:81:12:71: 22:f2:e9:55:85:0f:c5:9a:87:4e:1b:1d:6a:f0:6e: 13:32:37:ec:e7:d2:01:69:43:37:18:28:a5:a1:7e: 65:97:cc:0e:be:29:db:ea:2a:d4:b2:5a:ca:82:d0: af:88:b7:8f:2c:d3:a8:68:dd:da:e6:eb:6a:3e:3f: 49:94:09:c9:21:41:f4:8f:c7:a4:41:b9:08:2b:10: f1:81:c1:0f:54:cb:20:47:2f:a4:93:3d:b3:9d:ac: da:84:7c:5a:c5:1a:c8:3e:97:6a:36:ea:79:26:3a: fa:70:25:79:78:4e:a4:60:d8:2e:b8:02:78:5f:db: 12:f9:f6:11:0c:c2:e3:c5:f6:45:81:44:43:1d:b0: 14:ea:7d:3a:fc:86:fe:df:8a:8b:3c:e7:b1:65:bf: fe:b8:18:38:b1:d8:88:20:ad:a0:a2:26:56:23:f4: d4:57:83:2e:d8:cd:65:b8:85:38:32:20:be:12:0c: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:48:F6:67:F8:CB:7B:CB:7A:25:66:43:E3:82:D1:E3:75:48:CA:8E X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:54:4e:b5:dd:e2:25:8b:4b:78:71:a4:aa:67:04:fc:07:36: b6:b4:85:34:80:64:5a:7f:06:0c:30:e2:68:e7:8d:f5:7a:ad: 89:2c:1f:db:b3:6b:08:82:2e:c2:8f:8b:ab:91:31:c1:c3:be: 97:dc:b0:33:0a:45:f1:00:6b:ce:db:d4:6d:c6:95:b5:61:2d: 1b:65:be:57:2d:29:02:d4:5a:31:50:81:b1:2d:e6:72:af:89: a9:6d:bb:20:4b:b9:af:a4:91:8f:63:6a:68:a8:3a:8e:03:ca: dc:04:69:01:42:b6:6e:78:0b:f2:ef:41:9e:01:f7:1b:9e:83: 4b:fc:d4:2f:a0:e7:2d:5d:ce:4e:bd:35:6e:cb:a3:41:29:ef: dc:00:0a:28:3b:63:91:9f:07:bb:63:36:7e:a0:e7:fa:d8:e7: 26:a8:11:e3:23:52:6c:f7:6c:c9:38:fd:53:20:fd:7c:a5:1b: 27:90:de:92:d2:e7:f0:36:d2:37:7e:98:61:8e:6b:d5:06:8a: 7d:54:74:4e:19:3a:76:e5:4f:84:b7:0b:43:81:6d:74:85:b7: b0:e8:8d:c4:ba:34:bf:58:24:9e:bc:31:f5:e9:4f:d4:12:87: a9:d3:38:d7:c5:77:38:50:bc:53:d6:8b:85:30:9d:18:99:2f: 91:80:3c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjYwNDI2MTYzMjUyWhcNMjYwNTAzMTYzMjUyWjAYMRYwFAYD VQQDEw02OWVlM2UzNS1lNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+qDaVSmw2sFRm24S0hf0xbYRxOfSG7I/07svxZP3Rpn8uLbTRvoPRXKQM2O qc5C45RuRFCWQSViLScUvrhfwHDpU8515PqBEnEi8ulVhQ/FmodOGx1q8G4TMjfs 59IBaUM3GCiloX5ll8wOvinb6irUslrKgtCviLePLNOoaN3a5utqPj9JlAnJIUH0 j8ekQbkIKxDxgcEPVMsgRy+kkz2znazahHxaxRrIPpdqNup5Jjr6cCV5eE6kYNgu uAJ4X9sS+fYRDMLjxfZFgURDHbAU6n06/Ib+34qLPOexZb/+uBg4sdiIIK2goiZW I/TUV4Mu2M1luIU4MiC+EgybpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxI9mf4 y3vLeiVmQ+OC0eN1SMqOMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaFROtd3iJYtLeHGkqmcE/Ac2trSFNIBkWn8GDDDiaOeN9XqtiSwf27NrCIIu wo+Lq5ExwcO+l9ywMwpF8QBrztvUbcaVtWEtG2W+Vy0pAtRaMVCBsS3mcq+JqW27 IEu5r6SRj2NqaKg6jgPK3ARpAUK2bngL8u9BngH3G56DS/zUL6DnLV3OTr01bsuj QSnv3AAKKDtjkZ8Hu2M2fqDn+tjnJqgR4yNSbPdsyTj9UyD9fKUbJ5DektLn8DbS N36YYY5r1QaKfVR0Thk6duVPhLcLQ4FtdIW3sOiNxLo0v1gknrwx9elP1BKHqdM4 18V3OFC8U9aLhTCdGJkvkYA8sA== -----END CERTIFICATE-----Generated at Tue Apr 28 04:31:42 2026 by rpki-client