$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: otTko7xh0c7t7jL9YuXhLcbqdz5GmGfeIggsR2H15jw= Subject key identifier: 5D:3B:6A:F7:84:00:D1:67:53:82:56:7B:9A:CE:42:94:E1:C0:A9:6C Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 0184 Signing time: Sun 05 Apr 2026 03:56:37 +0000 Manifest this update: Sun 05 Apr 2026 03:56:36 +0000 Manifest next update: Sun 12 Apr 2026 03:56:36 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: m0Cfy6D2IgGl4R2nCyo2mhyR2e5tlsl+1w2AgRIZu1w=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: jCjUHPVQsJaqVu7vufX+mmPVYe7rI/psWHiQFh1SNOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Apr 5 03:56:36 2026 GMT Not After : Apr 12 03:56:36 2026 GMT Subject: CN=69d1dd74-3942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:91:f3:e5:5a:83:c7:c6:a4:4f:e0:9b:a8: 09:bb:08:31:2a:c2:42:0b:bf:ee:8d:82:d9:ae:b6: 10:6a:9e:80:b4:b2:74:fb:e1:40:74:f5:58:be:d5: 43:45:1b:a8:4f:1e:c0:75:03:7c:e0:db:fa:cd:a7: be:94:b3:05:2c:61:1f:8c:5a:c3:59:6b:db:04:ca: 89:a4:6e:26:56:95:8b:8a:1f:70:d6:76:af:59:ca: e9:eb:3b:65:13:4c:86:83:e7:55:ce:26:4f:9a:cc: b9:a5:27:0d:89:4f:63:3f:9a:52:ec:3c:48:cd:07: ce:4d:df:3b:56:e6:bd:4d:cd:cb:fe:08:98:97:65: 41:d4:6a:2a:44:3f:34:1c:69:50:bd:c2:a5:1e:7e: 11:7e:08:2f:34:7b:b3:4c:e8:24:85:44:e0:14:a5: fb:35:03:8b:4e:2a:a2:26:c7:74:00:73:4e:f8:02: f6:7e:a8:c7:7e:6d:7d:9d:f7:60:ae:68:02:d6:61: 1f:e1:4d:fc:09:33:21:34:e5:ef:c9:f4:c4:79:95: 50:f8:41:2c:ba:ca:ac:7f:06:75:90:c6:e0:a1:70: e5:e9:53:c1:27:cc:4d:00:1f:8c:bf:88:cc:b1:bf: a0:d0:6f:77:e6:06:da:18:6d:fb:5a:5a:64:a9:0e: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:6A:F7:84:00:D1:67:53:82:56:7B:9A:CE:42:94:E1:C0:A9:6C X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e9:aa:1a:c8:6a:8b:ea:13:2f:d2:10:f2:62:ba:b2:96:30: d9:5c:26:e4:af:1e:de:33:7f:80:06:20:4d:8c:7c:34:ee:92: eb:11:92:08:79:fd:cd:47:53:82:a6:97:3e:6f:83:90:ca:91: 8d:82:02:62:99:c8:12:19:01:91:6c:fc:18:23:67:15:32:bf: 6c:42:bc:e7:9c:ef:6e:f1:11:45:3d:02:8e:b0:2e:11:d3:5b: 6a:2f:4d:8f:72:39:c1:0a:0b:43:ad:91:6e:17:c8:7d:df:ad: 47:1a:44:dc:cd:c4:a8:86:2c:a5:67:61:a8:a1:2b:68:3d:2b: 08:ad:72:3a:fd:b9:02:48:dc:bc:4e:a9:19:50:03:6a:65:07: 70:cb:1e:9e:57:f8:58:0e:22:ea:ea:9e:ea:9a:14:f9:9b:a5: 85:8f:fc:78:9e:34:d4:23:7f:75:00:aa:b5:22:eb:9f:d3:63: 7d:cf:8c:93:27:9a:dc:0e:fc:51:16:3e:e3:87:44:3c:63:75: 77:fc:7b:79:d2:4e:ba:3c:bf:a9:92:ab:d0:5d:c7:5d:cc:59: cf:61:d9:10:d7:0d:ed:50:ff:2e:1e:84:49:af:dd:f7:e5:07: 23:4c:b3:47:5a:54:59:04:56:17:ff:36:19:c7:17:04:6a:5d: 64:49:12:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjYwNDA1MDM1NjM2WhcNMjYwNDEyMDM1NjM2WjAYMRYwFAYD VQQDEw02OWQxZGQ3NC0zOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjwWR8+Vag8fGpE/gm6gJuwgxKsJCC7/ujYLZrrYQap6AtLJ0++FAdPVYvtVD RRuoTx7AdQN84Nv6zae+lLMFLGEfjFrDWWvbBMqJpG4mVpWLih9w1navWcrp6ztl E0yGg+dVziZPmsy5pScNiU9jP5pS7DxIzQfOTd87Vua9Tc3L/giYl2VB1GoqRD80 HGlQvcKlHn4RfggvNHuzTOgkhUTgFKX7NQOLTiqiJsd0AHNO+AL2fqjHfm19nfdg rmgC1mEf4U38CTMhNOXvyfTEeZVQ+EEsusqsfwZ1kMbgoXDl6VPBJ8xNAB+Mv4jM sb+g0G935gbaGG37WlpkqQ4FNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF07aveE ANFnU4JWe5rOQpThwKlsMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHumqGshqi+oTL9IQ8mK6spYw2Vwm5K8e3jN/gAYgTYx8NO6S6xGSCHn9zUdT gqaXPm+DkMqRjYICYpnIEhkBkWz8GCNnFTK/bEK855zvbvERRT0CjrAuEdNbai9N j3I5wQoLQ62RbhfIfd+tRxpE3M3EqIYspWdhqKEraD0rCK1yOv25AkjcvE6pGVAD amUHcMsenlf4WA4i6uqe6poU+ZulhY/8eJ401CN/dQCqtSLrn9Njfc+Mkyea3A78 URY+44dEPGN1d/x7edJOujy/qZKr0F3HXcxZz2HZENcN7VD/Lh6ESa/d9+UHI0yz R1pUWQRWF/82GccXBGpdZEkSgw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:27 2026 by rpki-client