$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: +H3AGbqYYych8J8xaO0SaYS7N56aQoDqpA40fqTJSx8= Subject key identifier: F5:C0:E0:DD:91:2B:76:AB:11:B9:53:FB:9C:B1:73:B2:C5:4F:9E:83 Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0C40 Signing time: Sat 04 Apr 2026 18:35:24 +0000 Manifest this update: Sat 04 Apr 2026 18:35:23 +0000 Manifest next update: Sat 11 Apr 2026 18:35:23 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: rtmy9BqO+VfnyQ++jPxpxls+c+4zJVQweL/7SPoFbZA=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: XVQ4vbjL6icjdKZX/LPthrQnXfbccFG9ShLv4t7665I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Apr 4 18:35:23 2026 GMT Not After : Apr 11 18:35:23 2026 GMT Subject: CN=69d159ec-e398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d0:d9:8d:78:44:f4:04:25:29:7b:a3:94:02: c6:0a:dc:70:48:e8:84:fd:c7:2f:5e:6a:e3:40:39: a6:c5:d9:73:0c:24:c2:16:8e:9e:dc:c9:40:87:bf: 46:d3:38:19:e9:91:69:9f:df:5e:5e:ab:d7:8f:d6: 1a:dc:74:34:17:63:ce:dd:90:66:4d:c6:6a:0d:f7: 09:62:07:7d:06:e4:6d:7c:08:c9:f9:b5:60:f2:48: ba:0c:f5:37:c5:06:37:90:d7:2c:b4:83:f9:0e:ba: ef:df:6d:e3:fe:4a:f9:0b:b7:d9:05:78:2d:d3:0f: e1:23:6b:26:f1:73:21:dc:31:99:02:a3:ba:5d:61: 61:b8:67:b2:0c:da:ee:16:c3:56:00:25:cd:86:6c: ee:de:53:88:3f:9a:38:9d:56:75:e3:02:c8:03:86: c7:61:03:34:4e:42:43:b8:ee:8a:4b:43:a1:ca:12: 53:96:4c:cd:46:8f:73:04:2b:73:b5:dc:fb:22:f9: ea:ae:78:c6:84:d9:39:fe:bd:e6:bf:85:07:7d:d0: 0c:cc:70:ea:04:1e:22:21:fc:5e:2e:d7:fb:01:2e: 99:8e:67:be:7c:de:a1:bc:98:45:24:85:d7:bc:0c: 3b:fd:63:37:49:bc:99:0f:85:2e:40:df:10:0e:a7: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:E0:DD:91:2B:76:AB:11:B9:53:FB:9C:B1:73:B2:C5:4F:9E:83 X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:3a:ac:1a:5b:1f:16:47:e2:b3:8c:d2:d6:da:fc:9a:eb: fc:71:66:d8:42:34:8a:67:39:0c:6e:69:b2:dd:4d:43:11:f0: 8c:d6:98:57:03:8b:3f:ed:30:4d:3f:5c:fa:65:3b:16:b8:dc: dd:1b:0f:d9:bc:b6:48:ce:31:8c:1c:4c:93:68:9e:dd:1f:26: 29:a3:d0:34:ec:46:1a:87:82:0a:71:43:c0:b0:08:4d:64:3c: e2:34:4d:f6:10:a2:c6:c4:03:e5:8f:fd:5d:3a:50:61:cb:70: b8:43:c9:43:55:ba:3b:a6:4a:4d:2a:91:3d:5c:20:e4:d6:8f: 56:89:af:e8:9d:0d:5d:47:31:5c:81:b9:d1:83:0c:70:ff:59: fe:21:c4:a9:c1:52:db:54:ae:7a:30:2d:cb:75:95:0b:f6:3f: 25:5d:b9:13:50:2f:ef:de:0b:14:3a:30:52:9a:76:68:a7:ea: f6:ea:0e:62:8b:ce:95:87:8c:3b:7d:1f:a0:ff:8c:4a:4c:4a: fd:3f:51:04:62:b1:73:15:cb:a8:bd:6c:20:a7:a2:78:bb:1a: d4:a3:6c:63:7f:8b:f4:23:75:7c:db:d5:82:f3:dc:36:29:51: 7f:00:6d:cd:cc:a9:3b:f8:1b:5e:4d:b6:6d:fa:b5:e4:e0:4a: 3d:85:b2:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjYwNDA0MTgzNTIzWhcNMjYwNDExMTgzNTIzWjAYMRYwFAYD VQQDEw02OWQxNTllYy1lMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tDZjXhE9AQlKXujlALGCtxwSOiE/ccvXmrjQDmmxdlzDCTCFo6e3MlAh79G 0zgZ6ZFpn99eXqvXj9Ya3HQ0F2PO3ZBmTcZqDfcJYgd9BuRtfAjJ+bVg8ki6DPU3 xQY3kNcstIP5Drrv323j/kr5C7fZBXgt0w/hI2sm8XMh3DGZAqO6XWFhuGeyDNru FsNWACXNhmzu3lOIP5o4nVZ14wLIA4bHYQM0TkJDuO6KS0OhyhJTlkzNRo9zBCtz tdz7IvnqrnjGhNk5/r3mv4UHfdAMzHDqBB4iIfxeLtf7AS6Zjme+fN6hvJhFJIXX vAw7/WM3SbyZD4UuQN8QDqcA5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXA4N2R K3arEblT+5yxc7LFT56DMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHF46rBpbHxZH4rOM0tba/Jrr/HFm2EI0imc5DG5pst1NQxHwjNaYVwOLP+0w TT9c+mU7Frjc3RsP2by2SM4xjBxMk2ie3R8mKaPQNOxGGoeCCnFDwLAITWQ84jRN 9hCixsQD5Y/9XTpQYctwuEPJQ1W6O6ZKTSqRPVwg5NaPVomv6J0NXUcxXIG50YMM cP9Z/iHEqcFS21SuejAty3WVC/Y/JV25E1Av794LFDowUpp2aKfq9uoOYovOlYeM O30foP+MSkxK/T9RBGKxcxXLqL1sIKeieLsa1KNsY3+L9CN1fNvVgvPcNilRfwBt zcypO/gbXk22bfq15OBKPYWytw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:16 2026 by rpki-client