$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: 8NguK1nn6Q2r7lH4rm8qqa3jAPIbDd5Jwj0J0RxQzzs= Subject key identifier: 09:DE:A8:85:77:FB:5F:E9:44:3B:19:AD:FB:5B:16:AD:07:0D:A6:1C Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 07 Signing time: Sun 05 Apr 2026 08:31:34 +0000 Manifest this update: Sun 05 Apr 2026 08:31:34 +0000 Manifest next update: Sun 12 Apr 2026 08:31:34 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: BxavTGS2GdFIJV5CgXlQeHgeScczMgoTQS6KkQuitjg=) 2: E667E45629D211F19DF1399897833773.roa (hash: In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Apr 5 08:31:34 2026 GMT Not After : Apr 12 08:31:34 2026 GMT Subject: CN=69d21de6-6f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:b7:dd:d9:29:57:df:2f:d7:34:4c:d1:33: 27:8b:3d:63:b7:c6:03:97:11:68:b0:22:75:90:b6: f6:b1:fa:9b:07:db:6f:cd:b4:2c:f5:bf:c7:88:08: 42:81:b1:1a:cb:d1:53:0f:30:ca:ee:1c:e9:ea:7a: 58:79:70:f1:20:aa:f2:ef:10:72:d1:42:a0:48:e6: c5:62:ba:d2:fd:c6:af:33:f1:3f:7c:3e:84:38:05: e7:fe:68:06:41:cb:4f:96:65:df:33:c3:89:5b:0e: 06:59:4e:48:c3:33:af:ba:e5:21:13:e2:69:6b:ea: d1:3c:cc:a8:e4:67:25:ea:a8:23:1d:6d:57:13:d5: de:3a:72:ab:f5:c1:78:77:10:a8:a9:49:cf:04:67: 7d:3b:39:d5:5c:39:cd:ae:40:77:ea:2a:83:e5:36: 05:5f:cb:3c:ec:d0:3f:b7:e9:75:b3:b9:d4:08:eb: 6b:f7:1c:96:87:bf:94:65:d8:e2:63:dc:a6:54:56: 20:d3:cb:44:1f:bb:77:b2:8a:b5:e0:fb:d6:59:f1: 45:2e:cb:69:a5:29:50:31:5a:8c:d3:78:46:bf:78: 21:de:0c:14:a2:1f:fd:e5:a8:10:e0:a0:44:3a:d6: ca:53:39:6a:9f:50:de:c9:ae:98:1c:79:5d:a5:48: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:A8:85:77:FB:5F:E9:44:3B:19:AD:FB:5B:16:AD:07:0D:A6:1C X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f7:98:44:ae:c5:20:40:39:3f:bb:61:b0:6f:17:53:fd:8e: 99:08:f3:06:3f:0d:fc:00:a1:2b:4f:9f:e3:c6:8f:f4:94:96: e6:a9:a3:c2:71:86:61:1d:39:c9:eb:ca:98:e8:8b:ff:93:9b: ba:84:61:bb:a1:76:64:7b:73:23:40:08:92:fd:67:26:d4:04: 33:a1:c3:de:0e:c6:0b:b8:e0:17:c4:f5:7e:93:5d:9a:8c:4b: ed:52:cd:61:d6:de:ac:b5:f1:da:3f:44:ab:8a:fd:54:bb:f9: 93:c6:40:35:f1:ff:28:42:bb:e7:81:12:da:10:29:f8:55:81: 6d:5e:e1:4a:f7:e9:78:87:17:ca:67:ce:29:8d:bf:bc:e7:06: c8:97:a6:0e:81:10:83:8c:36:a5:5b:fb:77:b6:2c:63:a8:e5: d1:cb:55:ea:1d:02:4c:3e:d0:8d:7d:e7:e0:0a:b1:50:af:85: b5:c1:e2:23:d7:3e:d1:18:24:ad:2f:e3:cc:a3:13:f7:32:d8: e4:d7:c1:d0:1e:ed:9f:d3:95:c1:b4:70:b1:07:ba:3d:e0:62: 5f:70:6a:d1:cd:04:93:46:53:b9:34:fb:04:5b:49:a5:e5:f2: a9:15:e8:0e:63:15:ae:a5:7b:fb:4a:bd:43:b3:1a:4a:cf:48: e2:22:97:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA0MDUwODMxMzRaFw0yNjA0MTIwODMxMzRaMBgxFjAUBgNV BAMTDTY5ZDIxZGU2LTZmOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX87fd2SlX3y/XNEzRMyeLPWO3xgOXEWiwInWQtvax+psH22/NtCz1v8eICEKB sRrL0VMPMMruHOnqelh5cPEgqvLvEHLRQqBI5sViutL9xq8z8T98PoQ4Bef+aAZB y0+WZd8zw4lbDgZZTkjDM6+65SET4mlr6tE8zKjkZyXqqCMdbVcT1d46cqv1wXh3 EKipSc8EZ307OdVcOc2uQHfqKoPlNgVfyzzs0D+36XWzudQI62v3HJaHv5Rl2OJj 3KZUViDTy0Qfu3eyirXg+9ZZ8UUuy2mlKVAxWozTeEa/eCHeDBSiH/3lqBDgoEQ6 1spTOWqfUN7JrpgceV2lSIMNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCd6ohXf7 X+lEOxmt+1sWrQcNphwwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCc95hErsUgQDk/u2GwbxdT/Y6ZCPMGPw38AKErT5/jxo/0lJbmqaPCcYZhHTnJ 68qY6Iv/k5u6hGG7oXZke3MjQAiS/Wcm1AQzocPeDsYLuOAXxPV+k12ajEvtUs1h 1t6stfHaP0Sriv1Uu/mTxkA18f8oQrvngRLaECn4VYFtXuFK9+l4hxfKZ84pjb+8 5wbIl6YOgRCDjDalW/t3tixjqOXRy1XqHQJMPtCNfefgCrFQr4W1weIj1z7RGCSt L+PMoxP3Mtjk18HQHu2f05XBtHCxB7o94GJfcGrRzQSTRlO5NPsEW0ml5fKpFegO YxWupXv7Sr1DsxpKz0jiIpcP -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:40 2026 by rpki-client