$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: VYkHZ7LJoER1ftcS0RBNTgSYlfOdDXKLovhmdKFkHRU= Subject key identifier: 02:2F:B2:74:AF:2F:09:4A:72:C7:80:7D:7B:20:1E:AA:AC:B2:79:57 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 08AF Signing time: Sat 04 Apr 2026 20:14:10 +0000 Manifest this update: Sat 04 Apr 2026 20:14:10 +0000 Manifest next update: Sat 11 Apr 2026 20:14:10 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: vBiZg3gdn7gF5a/49q1fSfc5KoUzNt+c7cZmpOeAQ+0=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: D05It9UAiO51r8ILKVDfdiFJE2qz6LfsL6XWmNrhCuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Apr 4 20:14:10 2026 GMT Not After : Apr 11 20:14:10 2026 GMT Subject: CN=69d17112-f588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:66:6e:0e:2c:78:d3:2b:4f:41:9c:9b:e3: c8:23:f3:09:19:73:52:ec:2b:bc:ce:c0:36:32:cf: 57:b6:59:46:10:dd:39:d7:70:69:2e:44:78:a7:64: 74:99:78:89:42:cd:e3:c1:d6:9e:84:47:77:3f:49: 1d:20:ab:c0:f3:76:10:de:7d:87:ae:14:5f:ca:9c: e4:45:20:57:a3:70:9c:98:9a:cd:e3:58:c6:3d:c3: aa:7e:18:3b:39:c5:d8:ef:d9:27:7f:7c:a0:e6:37: d5:98:82:b1:59:a7:de:a5:fa:03:d8:ad:21:0e:f1: f9:45:a8:44:a4:96:b8:74:49:ed:c3:0a:ca:26:35: a4:e9:1d:a1:08:77:cc:f9:10:24:38:35:1b:78:b1: 1c:0c:67:fc:ac:32:66:06:08:d2:a0:3c:c5:51:5a: d1:c0:7c:74:bd:e8:5c:87:a2:81:a5:fe:4f:fd:f4: ef:ef:cb:82:e3:8d:9c:fc:5c:79:56:99:3f:a5:94: db:d9:b7:93:d9:f5:39:b2:c6:ad:10:c9:77:32:c9: ae:1a:d0:2f:6a:7e:a2:f0:4f:ad:04:2d:6a:4e:93: 0b:ea:8d:b6:9a:61:4f:1c:00:cf:09:a7:18:02:76: fa:54:ad:52:ab:18:ce:44:00:1d:43:e3:10:4f:56: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2F:B2:74:AF:2F:09:4A:72:C7:80:7D:7B:20:1E:AA:AC:B2:79:57 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b9:ed:1d:37:9f:18:03:8a:b6:b4:ec:27:73:4a:9c:2d:4e: 58:01:5c:79:f8:24:79:65:66:38:69:a2:3c:41:1f:fb:56:8f: 87:1e:8f:ae:e0:25:a0:27:04:83:64:d0:ae:a7:cd:1c:73:89: 6d:69:f3:55:47:f0:88:41:a9:f3:24:f7:e8:10:d5:02:85:f1: 16:32:ef:f4:a7:1e:b1:bf:17:06:8d:f9:b9:a2:f1:a8:b3:16: d5:8c:ec:54:2f:39:1a:98:db:35:77:3f:3e:f4:59:a7:fe:97: dd:b5:da:76:50:90:0e:e9:2c:b7:40:cf:df:94:df:39:93:fd: 70:14:7f:1e:9b:11:98:c6:a4:ef:2e:a2:94:96:61:f5:11:53: ea:17:d2:5c:ca:51:cb:f8:d0:94:bb:72:f2:8a:70:04:1e:2a: 07:84:4f:2f:42:04:4a:1c:19:b5:5f:6e:d6:00:5b:c9:9b:08: b9:87:7c:d1:50:7f:7b:62:91:6e:98:ac:62:93:fc:cd:fd:ce: c2:60:d4:83:fa:b9:35:66:fc:93:15:ee:e7:df:9d:e0:76:9e: b7:11:a2:e9:ed:d6:41:ee:cc:72:fa:44:c7:cf:16:d1:61:cc: e5:68:26:5b:e8:3a:1e:dd:fc:f5:ee:04:0f:46:51:d2:f7:fc: 34:a6:f2:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjYwNDA0MjAxNDEwWhcNMjYwNDExMjAxNDEwWjAYMRYwFAYD VQQDEw02OWQxNzExMi1mNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9C9mbg4seNMrT0Gcm+PII/MJGXNS7Cu8zsA2Ms9XtllGEN0513BpLkR4p2R0 mXiJQs3jwdaehEd3P0kdIKvA83YQ3n2HrhRfypzkRSBXo3CcmJrN41jGPcOqfhg7 OcXY79knf3yg5jfVmIKxWafepfoD2K0hDvH5RahEpJa4dEntwwrKJjWk6R2hCHfM +RAkODUbeLEcDGf8rDJmBgjSoDzFUVrRwHx0vehch6KBpf5P/fTv78uC442c/Fx5 Vpk/pZTb2beT2fU5ssatEMl3MsmuGtAvan6i8E+tBC1qTpML6o22mmFPHADPCacY Anb6VK1SqxjORAAdQ+MQT1aGnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIvsnSv LwlKcseAfXsgHqqssnlXMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLntHTefGAOKtrTsJ3NKnC1OWAFcefgkeWVmOGmiPEEf+1aPhx6PruAloCcE g2TQrqfNHHOJbWnzVUfwiEGp8yT36BDVAoXxFjLv9Kcesb8XBo35uaLxqLMW1Yzs VC85GpjbNXc/PvRZp/6X3bXadlCQDukst0DP35TfOZP9cBR/HpsRmMak7y6ilJZh 9RFT6hfSXMpRy/jQlLty8opwBB4qB4RPL0IEShwZtV9u1gBbyZsIuYd80VB/e2KR bpisYpP8zf3OwmDUg/q5NWb8kxXu59+d4HaetxGi6e3WQe7McvpEx88W0WHM5Wgm W+g6Ht389e4ED0ZR0vf8NKbyAw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:31 2026 by rpki-client