$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json) Hash identifier: sEBjZdaWzrtPFfy/e1ZV9stuSbosux6+pmsNKmYp1hE= Subject key identifier: E4:1B:0F:01:CC:DC:36:90:F2:3E:9B:76:7D:CF:22:9C:7A:61:D0:9F Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft Manifest number: 0870 Signing time: Sat 04 Apr 2026 20:28:49 +0000 Manifest this update: Sat 04 Apr 2026 20:28:48 +0000 Manifest next update: Sat 11 Apr 2026 20:28:48 +0000 Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: PGjskId/qjtwkbGWWlXR39hY2RFus6BftL0836bial8=) 2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: Apr 4 20:28:48 2026 GMT Not After : Apr 11 20:28:48 2026 GMT Subject: CN=69d17481-d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:a7:65:e8:08:b7:3a:a9:fe:87:01:a9:00: 6b:28:e7:98:50:ed:ac:81:8c:fe:99:eb:f0:0a:03: f8:eb:c5:74:9c:32:8b:8f:c8:38:1e:3d:f0:83:62: 0c:90:4a:05:06:a7:f8:fb:30:36:54:66:48:94:90: 33:d7:93:05:5c:a3:e3:70:c6:66:db:b2:03:5c:95: 64:22:d9:29:b9:92:42:a4:61:16:f6:70:56:33:2d: 44:15:f3:ae:00:29:cc:94:43:a0:3c:39:f2:74:ef: 84:c6:c7:e2:fc:8c:3c:77:5d:a1:d9:e3:9c:7c:b0: 37:0f:98:c2:82:34:57:4c:86:5f:40:31:75:1a:9d: 39:6d:0e:40:4e:12:80:f4:39:52:62:15:7e:bd:13: db:97:42:24:c6:69:04:5b:60:c6:16:46:b6:49:02: ca:1d:10:61:d0:f7:ee:8c:12:2c:2f:e6:c8:e3:76: f6:ab:b2:ce:36:ec:ce:5e:25:3d:ce:66:af:c2:d1: 4b:a1:b0:e7:e0:2e:a2:d7:f1:b1:07:ef:2b:69:50: 9b:d7:b4:a9:b9:29:8f:8c:cc:77:a2:d4:2e:5b:d9: ba:fb:be:17:d0:65:05:6a:80:56:e3:41:f8:12:f1: bd:26:24:76:17:58:fc:45:4e:23:26:cb:69:2f:b9: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1B:0F:01:CC:DC:36:90:F2:3E:9B:76:7D:CF:22:9C:7A:61:D0:9F X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1b:9a:24:50:a5:8c:12:b0:70:ff:71:9c:bc:ca:a8:85:69: d7:54:0f:05:78:7e:3e:41:66:65:08:c9:bc:b9:a5:a0:5b:44: 17:cc:7c:ea:a7:33:b0:d7:4c:24:22:8a:e5:ac:36:ef:aa:cd: c9:44:b4:9d:03:71:54:08:b7:cf:b3:5e:7f:9b:81:81:d4:1a: 46:9a:23:5f:f7:d6:e6:95:60:51:be:bd:ee:23:23:87:9a:a3: e6:f5:01:89:c1:a3:53:d9:80:50:c2:ee:12:9b:c6:c4:68:0d: 15:d0:d2:62:5c:20:67:7d:de:60:e6:54:f4:7b:52:91:ef:9d: b4:01:ee:d7:5e:2e:fa:91:e7:be:ab:14:bd:6e:2f:6e:18:27: d7:ba:8d:c7:ba:6f:58:db:fe:14:26:1f:23:52:14:0a:d8:3b: 58:20:7c:29:d4:05:b3:da:c5:1e:f5:6e:4e:1c:cc:94:b5:9d: ec:48:bc:7e:3e:93:2e:73:99:10:06:9c:8d:b3:9f:b2:e4:b6: 94:f2:a8:60:cf:88:c6:cb:e1:29:37:8f:ea:b2:6c:f0:86:f9: 8a:68:d3:30:63:1a:9f:3d:7a:29:8e:49:60:35:72:36:de:2c: 0e:73:18:df:41:d6:4e:90:d4:a4:59:38:0f:92:11:6a:fd:5c: ec:b4:93:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjYwNDA0MjAyODQ4WhcNMjYwNDExMjAyODQ4WjAYMRYwFAYD VQQDEw02OWQxNzQ4MS1kMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/OnZegItzqp/ocBqQBrKOeYUO2sgYz+mevwCgP468V0nDKLj8g4Hj3wg2IM kEoFBqf4+zA2VGZIlJAz15MFXKPjcMZm27IDXJVkItkpuZJCpGEW9nBWMy1EFfOu ACnMlEOgPDnydO+Exsfi/Iw8d12h2eOcfLA3D5jCgjRXTIZfQDF1Gp05bQ5AThKA 9DlSYhV+vRPbl0IkxmkEW2DGFka2SQLKHRBh0PfujBIsL+bI43b2q7LONuzOXiU9 zmavwtFLobDn4C6i1/GxB+8raVCb17SpuSmPjMx3otQuW9m6+74X0GUFaoBW40H4 EvG9JiR2F1j8RU4jJstpL7k35QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQbDwHM 3DaQ8j6bdn3PIpx6YdCfMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp S3hISXgtbEs2d1FPM1dxd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlRuaJFCljBKwcP9xnLzKqIVp11QPBXh+PkFmZQjJvLmloFtEF8x86qczsNdM JCKK5aw276rNyUS0nQNxVAi3z7Nef5uBgdQaRpojX/fW5pVgUb697iMjh5qj5vUB icGjU9mAUMLuEpvGxGgNFdDSYlwgZ33eYOZU9HtSke+dtAHu114u+pHnvqsUvW4v bhgn17qNx7pvWNv+FCYfI1IUCtg7WCB8KdQFs9rFHvVuThzMlLWd7Ei8fj6TLnOZ EAacjbOfsuS2lPKoYM+IxsvhKTeP6rJs8Ib5imjTMGManz16KY5JYDVyNt4sDnMY 30HWTpDUpFk4D5IRav1c7LST5g== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:08 2026 by rpki-client