$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: dJPYm0A1Tpis/bhgVKB6IjyZngVPCepS2B/xjjFspy8= Subject key identifier: D8:A7:2B:61:62:59:69:53:F0:A3:7F:BC:02:55:84:96:6B:2F:F6:E7 Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 06E6 Signing time: Sat 04 Apr 2026 22:11:34 +0000 Manifest this update: Sat 04 Apr 2026 22:11:33 +0000 Manifest next update: Sat 11 Apr 2026 22:11:33 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: swJ1ZV/Hius2s3G2J0IrG6gq5OqBejMcOoVKya2yqlQ=) 2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: mjocAbD55sni/MpKHvpZIoG9vwTBNbsg26qx5ur9R1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Apr 4 22:11:33 2026 GMT Not After : Apr 11 22:11:33 2026 GMT Subject: CN=69d18c96-5efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:50:c5:dc:85:7a:10:2b:ea:5c:7b:18:fe: 0a:6b:42:e1:a3:94:2d:be:4b:71:8f:b5:d3:9d:1d: 57:3a:ca:68:00:08:39:fa:e3:d7:d9:6c:7d:cc:4d: 1c:61:66:14:50:01:d4:43:0b:f5:41:56:30:10:36: 7c:67:89:9f:c8:c6:8e:ae:37:16:04:00:8e:f5:9d: 37:3b:39:0c:86:03:62:78:a6:a2:7f:ab:51:e1:37: 7b:10:39:6d:15:f1:ec:ac:46:f0:67:ac:49:d3:73: 25:1e:64:3f:49:38:73:f8:7c:a4:7d:1b:ea:48:bd: ad:15:d0:63:f4:d7:69:9b:b9:72:7e:90:1e:91:9f: d5:01:a8:f6:56:37:2d:0e:21:7a:be:87:f2:52:72: 0c:80:e7:c6:85:7a:ce:b7:d3:03:11:9e:2b:0e:fb: 13:bb:15:48:4f:07:87:9c:76:64:66:a2:e4:de:ea: 1e:d0:e1:8d:5f:92:4e:94:a6:d5:a0:d9:70:c5:4d: 43:9b:6d:51:49:6f:12:b8:b6:e4:d0:09:a9:87:a8: bd:4a:bf:d4:e6:34:02:c4:6e:ac:2f:00:f0:68:ed: 54:98:77:87:05:25:ef:98:7f:0a:90:7a:2a:e6:f8: dd:c2:99:e9:f2:54:c0:02:c5:8f:26:94:db:b0:bc: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:2B:61:62:59:69:53:F0:A3:7F:BC:02:55:84:96:6B:2F:F6:E7 X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5a:ac:1a:0d:3c:2b:18:58:ae:b9:88:62:3a:47:ef:7d:5b: 14:73:7b:cf:5c:5e:d7:06:40:26:91:d5:ec:36:1e:49:0f:ee: 50:f9:e0:bc:47:f9:65:c0:cb:97:a7:6e:cc:d6:d6:0e:76:4b: 71:e4:85:34:39:77:c6:f9:e6:c9:bd:5e:9f:ec:31:4a:90:bd: 03:25:5a:20:5c:9e:f8:99:dd:1b:26:91:b9:c6:bc:71:eb:b1: a1:53:c6:9e:bb:23:c0:90:95:1a:9a:d6:e3:44:94:93:94:e6: b1:27:d5:02:65:37:51:23:0d:c5:70:6e:05:81:f7:61:06:33: fc:96:7e:9f:00:8b:73:0f:76:1d:71:87:62:54:83:4f:17:91: 03:35:09:e6:8e:9d:63:ea:c9:8b:22:b5:a9:e5:71:21:42:fb: 1c:22:b1:30:a0:d4:ff:e4:a9:93:d2:e7:98:87:e7:a7:07:ef: b0:e1:bc:20:43:a0:fc:ce:15:a3:51:98:09:78:68:78:33:62: 32:73:aa:c5:ce:cb:8e:4f:3b:6f:e9:9a:32:3f:0e:79:30:03: 56:bb:87:42:e1:83:2d:64:eb:53:b5:20:94:12:07:34:c4:79: 27:03:e0:c9:2a:e8:14:88:13:a3:16:d4:58:3c:8f:ac:c1:be: 2e:c3:f0:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjYwNDA0MjIxMTMzWhcNMjYwNDExMjIxMTMzWjAYMRYwFAYD VQQDEw02OWQxOGM5Ni01ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFRQxdyFehAr6lx7GP4Ka0Lho5Qtvktxj7XTnR1XOspoAAg5+uPX2Wx9zE0c YWYUUAHUQwv1QVYwEDZ8Z4mfyMaOrjcWBACO9Z03OzkMhgNieKaif6tR4Td7EDlt FfHsrEbwZ6xJ03MlHmQ/SThz+HykfRvqSL2tFdBj9Ndpm7lyfpAekZ/VAaj2Vjct DiF6vofyUnIMgOfGhXrOt9MDEZ4rDvsTuxVITweHnHZkZqLk3uoe0OGNX5JOlKbV oNlwxU1Dm21RSW8SuLbk0Amph6i9Sr/U5jQCxG6sLwDwaO1UmHeHBSXvmH8KkHoq 5vjdwpnp8lTAAsWPJpTbsLy7KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNinK2Fi WWlT8KN/vAJVhJZrL/bnMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMFqsGg08KxhYrrmIYjpH731bFHN7z1xe1wZAJpHV7DYeSQ/uUPngvEf5ZcDL l6duzNbWDnZLceSFNDl3xvnmyb1en+wxSpC9AyVaIFye+JndGyaRuca8ceuxoVPG nrsjwJCVGprW40SUk5TmsSfVAmU3USMNxXBuBYH3YQYz/JZ+nwCLcw92HXGHYlSD TxeRAzUJ5o6dY+rJiyK1qeVxIUL7HCKxMKDU/+Spk9LnmIfnpwfvsOG8IEOg/M4V o1GYCXhoeDNiMnOqxc7Ljk87b+maMj8OeTADVruHQuGDLWTrU7UglBIHNMR5JwPg ySroFIgToxbUWDyPrMG+LsPw9w== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:30 2026 by rpki-client