$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: Y0IxQuFLzx+DnN5mbPsRCr4TUTDc4z1BVld/Mhu+4EI= Subject key identifier: 1E:9F:1F:EC:3B:DB:62:FC:E2:15:72:01:06:5B:F6:94:F5:4C:6C:40 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 0229 Signing time: Sun 05 Apr 2026 02:14:28 +0000 Manifest this update: Sun 05 Apr 2026 02:14:28 +0000 Manifest next update: Sun 12 Apr 2026 02:14:28 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: pCiETVurfs8UVnZG9IMbq5O7iXXoNf+Txgks7iflscc=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: 1qv+Y4Kd1SuwcWW5nSTbql7n0CDsusRmzUBuj3QR9BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Apr 5 02:14:28 2026 GMT Not After : Apr 12 02:14:28 2026 GMT Subject: CN=69d1c584-1400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:53:79:a5:5f:41:12:32:e2:21:df:26:4b: 45:96:c7:6d:3c:a2:c0:59:fb:23:a5:26:96:6d:21: 6f:ee:55:a9:80:99:03:98:fa:72:9d:53:a6:42:56: 60:45:bc:69:78:1c:ce:16:99:22:28:b7:9f:3b:78: cf:f3:62:9c:c8:84:2b:68:2c:93:79:d1:84:34:54: 8e:51:28:54:65:69:4a:f1:d5:57:f8:04:c3:db:93: 60:b5:c4:74:67:db:65:79:ce:d8:2f:11:bf:9b:cf: af:c5:8e:5b:bf:66:30:14:c8:ad:66:39:bb:dc:87: ec:cd:6d:ff:e9:02:fe:c2:bf:0d:d4:8f:bb:d3:27: 1e:8e:88:96:07:3d:65:bc:bd:44:ad:a8:6c:85:f1: 96:7e:5c:bb:38:dd:b5:65:29:94:8f:4e:8b:ba:ff: 28:d2:28:bd:b3:80:6e:f3:16:5c:62:6c:35:33:53: 13:c2:d9:6a:c3:9f:5f:6a:d8:22:d8:60:4f:f0:40: 8c:d7:d4:38:94:fa:b2:4d:3f:8d:f6:e6:00:cd:c8: b0:1c:cc:f6:6e:10:e6:d1:71:2d:3e:bb:61:03:38: 59:ca:81:23:37:19:75:e4:a6:de:3b:ba:6b:9d:2a: 42:8d:32:44:c8:9d:d1:fb:42:fb:10:f4:25:4b:b2: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9F:1F:EC:3B:DB:62:FC:E2:15:72:01:06:5B:F6:94:F5:4C:6C:40 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:bf:5f:16:cd:9a:d8:d4:b0:bf:9e:86:4c:fe:18:9b:5e:02: df:d6:8e:e0:0a:d3:47:7f:5e:fc:8f:c2:ef:75:e8:2b:9f:b9: cd:5c:df:95:e8:d6:dd:d3:de:cb:94:d1:8f:03:22:50:09:d9: f5:8f:aa:59:26:e3:6f:72:ac:9d:43:b3:b3:d6:65:7d:ad:5d: f3:2f:e2:3c:65:52:6b:3c:bd:91:30:78:13:37:4b:c6:00:a6: 11:6b:25:d3:fb:60:b1:93:8c:6f:0c:5d:bc:da:92:91:1e:74: 52:2c:1e:3d:7b:4e:52:9e:8b:ef:21:ca:5d:f6:9a:eb:33:22: 9f:41:78:9e:e3:18:e6:cd:65:2c:20:b1:8f:19:30:a2:ab:cf: 7f:7a:3b:1c:6f:8c:0f:7c:c7:94:8e:0b:63:eb:94:75:7a:23: 6a:82:de:5c:44:b5:3c:15:69:bb:dc:5d:42:e3:b1:7f:ab:09: 45:29:2f:c2:75:2f:35:80:b0:8e:e6:3a:8a:cd:a9:d5:e1:5a: 22:15:a5:e9:7e:c1:22:12:ba:97:47:98:68:3c:4d:12:d1:60: 2f:14:0e:cb:e0:34:ec:8c:e8:52:80:66:5c:a9:89:26:34:0c: 9e:66:6c:d2:f9:3c:89:42:1e:c7:9c:4b:a0:fa:46:30:ad:55: 24:85:f6:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjYwNDA1MDIxNDI4WhcNMjYwNDEyMDIxNDI4WjAYMRYwFAYD VQQDEw02OWQxYzU4NC0xNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwidTeaVfQRIy4iHfJktFlsdtPKLAWfsjpSaWbSFv7lWpgJkDmPpynVOmQlZg RbxpeBzOFpkiKLefO3jP82KcyIQraCyTedGENFSOUShUZWlK8dVX+ATD25NgtcR0 Z9tlec7YLxG/m8+vxY5bv2YwFMitZjm73IfszW3/6QL+wr8N1I+70ycejoiWBz1l vL1ErahshfGWfly7ON21ZSmUj06Luv8o0ii9s4Bu8xZcYmw1M1MTwtlqw59fatgi 2GBP8ECM19Q4lPqyTT+N9uYAzciwHMz2bhDm0XEtPrthAzhZyoEjNxl15KbeO7pr nSpCjTJEyJ3R+0L7EPQlS7Lp2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6fH+w7 22L84hVyAQZb9pT1TGxAMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp79fFs2a2NSwv56GTP4Ym14C39aO4ArTR39e/I/C73XoK5+5zVzflejW3dPe y5TRjwMiUAnZ9Y+qWSbjb3KsnUOzs9Zlfa1d8y/iPGVSazy9kTB4EzdLxgCmEWsl 0/tgsZOMbwxdvNqSkR50UiwePXtOUp6L7yHKXfaa6zMin0F4nuMY5s1lLCCxjxkw oqvPf3o7HG+MD3zHlI4LY+uUdXojaoLeXES1PBVpu9xdQuOxf6sJRSkvwnUvNYCw juY6is2p1eFaIhWl6X7BIhK6l0eYaDxNEtFgLxQOy+A07IzoUoBmXKmJJjQMnmZs 0vk8iUIex5xLoPpGMK1VJIX2Dw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:19 2026 by rpki-client