$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: c8rE7s3/FB5VaGgm3QGrj1wcqwyZi2/ZaQusVEaLV9k= Subject key identifier: 06:F5:5A:33:16:17:56:F6:77:B6:95:0C:A2:38:EF:7A:35:7B:23:CA Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 01D0 Signing time: Sun 05 Apr 2026 03:22:44 +0000 Manifest this update: Sun 05 Apr 2026 03:22:44 +0000 Manifest next update: Sun 12 Apr 2026 03:22:44 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: rhXwOEtShSOZuISIDTn69ZiL8ygDTiwBQiqSc+R5zKc=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Apr 5 03:22:44 2026 GMT Not After : Apr 12 03:22:44 2026 GMT Subject: CN=69d1d584-a05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:f0:dd:22:40:b9:5b:fb:be:07:a0:94:3b: dd:d9:31:bb:92:ab:35:68:ac:e5:4b:93:a4:8e:c6: 32:c2:c6:3f:c5:0c:db:f5:cb:50:d3:65:23:8d:09: a5:9b:7d:18:fb:9e:f1:b6:88:6f:67:4a:ea:95:4b: 4c:a3:03:91:57:36:96:4d:0a:c0:65:d9:28:9e:73: 04:2d:e4:29:a9:86:37:6e:87:1d:30:a8:4c:0c:97: b4:59:64:0b:f6:23:60:91:7f:18:5f:b8:b6:e0:b7: d6:45:ea:83:31:35:8c:da:73:53:6a:c1:1b:eb:8b: 3c:ab:89:3d:17:70:60:a6:87:3d:68:4e:c4:a2:0b: d5:85:07:56:3c:7f:3c:de:64:9e:47:13:1d:cf:42: 6e:24:9e:df:78:d4:59:93:92:31:9e:68:2c:de:51: d6:3c:c5:84:5b:3c:33:f4:ee:cc:bd:66:49:cc:fa: 27:1b:38:30:0a:f7:dc:26:3d:fb:be:f8:bf:5d:64: b3:80:61:f9:30:15:88:a7:c2:71:5d:9e:06:34:16: 4e:57:44:d0:64:79:f1:48:1d:8d:0c:cb:94:f6:56: c2:88:f8:20:18:8a:8b:af:68:b5:4a:90:06:90:2d: e9:ec:8a:6c:56:c5:a9:ec:4f:7b:ee:d4:b6:05:14: 25:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:5A:33:16:17:56:F6:77:B6:95:0C:A2:38:EF:7A:35:7B:23:CA X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ac:a9:eb:43:7a:74:40:16:bd:5d:54:64:de:70:89:c3:bc: 85:6c:c4:c4:0c:26:a1:d2:f0:c1:79:50:67:ed:3a:6e:4d:85: fe:a4:10:94:12:c1:7a:c8:15:2a:29:34:f2:f2:d0:44:33:3a: 0d:0c:25:37:69:66:fe:29:ab:be:9a:ea:d6:92:1e:95:25:f2: dd:2e:68:40:37:af:4e:4e:73:b0:c0:00:73:49:3f:01:28:bf: 11:b1:02:ce:f8:94:36:71:4e:29:6d:83:fd:4c:db:3d:52:ae: 1d:99:70:92:b3:60:2e:2c:3d:13:bd:09:43:3c:3a:2d:40:b6: 5e:b5:23:99:0b:15:11:a9:1e:c1:43:97:97:ac:08:5a:26:9f: 6c:26:da:71:8c:aa:97:de:8c:36:a2:18:de:89:ce:22:87:86: f3:d1:63:48:8f:e5:90:20:b0:80:6c:9f:03:80:77:9c:e9:e6: d9:82:52:1e:7b:48:21:37:c3:81:0a:89:c9:82:48:f9:a9:73: 0f:81:b4:6d:96:5b:55:c7:5f:c1:70:37:b1:39:97:7a:21:f8: 29:08:81:51:27:c8:a2:03:9a:7b:e9:36:04:cf:c7:de:ad:b1: e5:e4:ce:8f:e7:ed:12:3a:92:9d:95:04:19:13:c0:8f:e9:72: 9f:fb:b7:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwNDA1MDMyMjQ0WhcNMjYwNDEyMDMyMjQ0WjAYMRYwFAYD VQQDEw02OWQxZDU4NC1hMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz7w3SJAuVv7vgeglDvd2TG7kqs1aKzlS5OkjsYywsY/xQzb9ctQ02UjjQml m30Y+57xtohvZ0rqlUtMowORVzaWTQrAZdkonnMELeQpqYY3bocdMKhMDJe0WWQL 9iNgkX8YX7i24LfWReqDMTWM2nNTasEb64s8q4k9F3Bgpoc9aE7EogvVhQdWPH88 3mSeRxMdz0JuJJ7feNRZk5Ixnmgs3lHWPMWEWzwz9O7MvWZJzPonGzgwCvfcJj37 vvi/XWSzgGH5MBWIp8JxXZ4GNBZOV0TQZHnxSB2NDMuU9lbCiPggGIqLr2i1SpAG kC3p7IpsVsWp7E977tS2BRQlWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAb1WjMW F1b2d7aVDKI473o1eyPKMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJayp60N6dEAWvV1UZN5wicO8hWzExAwmodLwwXlQZ+06bk2F/qQQlBLBesgV Kik08vLQRDM6DQwlN2lm/imrvprq1pIelSXy3S5oQDevTk5zsMAAc0k/ASi/EbEC zviUNnFOKW2D/UzbPVKuHZlwkrNgLiw9E70JQzw6LUC2XrUjmQsVEakewUOXl6wI WiafbCbacYyql96MNqIY3onOIoeG89FjSI/lkCCwgGyfA4B3nOnm2YJSHntIITfD gQqJyYJI+alzD4G0bZZbVcdfwXA3sTmXeiH4KQiBUSfIogOae+k2BM/H3q2x5eTO j+ftEjqSnZUEGRPAj+lyn/u30A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:33 2026 by rpki-client