$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: MRYzXUZXzTXjV6drtEMgLYyLWWmnw4mIcmxleHbspGM= Subject key identifier: B7:35:2B:A4:C5:7E:4E:7C:13:0D:6B:D6:8E:EA:91:63:7F:5D:A6:36 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 0123 Signing time: Sun 05 Apr 2026 05:08:51 +0000 Manifest this update: Sun 05 Apr 2026 05:08:51 +0000 Manifest next update: Sun 12 Apr 2026 05:08:51 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: 6weuaYcsuFV9kJOk72UzOgKc2NBOtnE5mDKbNHVqY1M=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Apr 5 05:08:51 2026 GMT Not After : Apr 12 05:08:51 2026 GMT Subject: CN=69d1ee63-fe02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:af:64:b7:f5:8b:01:fb:ac:76:23:ed:df: 3f:c5:77:0e:67:1c:59:1f:27:fa:f5:5a:c0:1f:f8: 16:21:d6:92:1b:f5:14:a9:25:15:9f:5e:55:d3:b7: 27:04:16:4b:f4:ab:64:b7:1a:c0:46:8d:39:37:db: bd:36:f1:05:51:30:7d:aa:8a:31:38:6d:e9:1e:a5: 50:f2:34:ef:83:06:87:ce:da:71:e4:d6:e3:bc:63: c6:cc:b6:fe:bb:93:a8:6b:92:63:35:61:bd:03:a7: 17:4f:92:98:90:23:f5:00:de:35:90:05:bc:a4:c3: bd:fe:15:25:47:4f:04:f4:e4:47:ce:2f:20:e6:8a: 04:06:fb:3d:e5:4d:bb:65:bf:f8:97:a9:9b:36:8f: 98:4a:81:b6:e5:30:4e:e7:1c:af:16:28:3e:82:5c: db:25:75:5f:3f:6b:70:5c:ce:1d:0d:fe:27:84:fa: 67:b7:9d:7f:25:9e:9f:65:01:92:47:d3:9d:ff:96: 0f:bb:f2:bb:9b:1b:86:61:6c:0c:cd:94:7e:f6:bf: ba:85:f0:3a:46:32:48:45:de:b4:95:3d:6d:cb:c0: f3:36:fd:10:5d:ae:4f:a2:9f:f0:ed:17:80:b5:3a: c9:35:c0:d9:4b:a1:09:97:23:05:fd:62:d5:2a:c7: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:2B:A4:C5:7E:4E:7C:13:0D:6B:D6:8E:EA:91:63:7F:5D:A6:36 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:90:84:55:25:32:38:c3:8e:57:2f:fa:30:fe:de:3c:3b:b7: 54:f6:f4:55:2e:95:3f:a5:58:10:24:ac:b8:78:0e:c9:eb:57: 94:75:a0:db:db:6d:86:0c:97:0c:13:68:e8:04:81:62:21:7d: f8:31:cf:6a:55:8c:d2:17:5e:b3:5e:e6:2d:f4:e2:05:d5:8a: 3d:02:f2:87:18:08:88:2e:77:25:3a:ac:5b:75:26:de:9c:ed: b4:ac:09:e0:ec:0a:aa:77:44:b4:c9:e8:36:77:1b:b2:54:fd: 23:94:c0:fe:ed:a0:c8:80:df:e0:b7:ba:bc:90:c4:72:18:4e: 66:24:eb:85:8a:2c:e8:b7:48:2f:fe:4e:86:84:c2:35:4c:72: da:c0:a1:80:8f:92:0c:45:fc:b4:68:21:1e:63:22:c5:59:49: 3d:49:1e:23:e8:cb:db:69:0b:ee:3a:b5:d4:26:01:20:75:70: be:2a:41:9e:07:6e:2d:22:5a:de:46:de:db:15:9e:4c:67:96: c2:1a:ed:5c:dd:b4:23:e6:52:ac:12:b3:97:47:ac:34:d3:58: 69:5f:80:38:f2:44:3d:0b:96:ea:ad:cf:ee:c8:bd:86:39:24: 45:d6:e4:bb:56:a9:16:79:78:3c:e5:4b:d6:12:fc:d4:a0:4c: be:12:41:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwNDA1MDUwODUxWhcNMjYwNDEyMDUwODUxWjAYMRYwFAYD VQQDEw02OWQxZWU2My1mZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqCvZLf1iwH7rHYj7d8/xXcOZxxZHyf69VrAH/gWIdaSG/UUqSUVn15V07cn BBZL9KtktxrARo05N9u9NvEFUTB9qooxOG3pHqVQ8jTvgwaHztpx5NbjvGPGzLb+ u5Ooa5JjNWG9A6cXT5KYkCP1AN41kAW8pMO9/hUlR08E9ORHzi8g5ooEBvs95U27 Zb/4l6mbNo+YSoG25TBO5xyvFig+glzbJXVfP2twXM4dDf4nhPpnt51/JZ6fZQGS R9Od/5YPu/K7mxuGYWwMzZR+9r+6hfA6RjJIRd60lT1ty8DzNv0QXa5Pop/w7ReA tTrJNcDZS6EJlyMF/WLVKsfk5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLc1K6TF fk58Ew1r1o7qkWN/XaY2MB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd5CEVSUyOMOOVy/6MP7ePDu3VPb0VS6VP6VYECSsuHgOyetXlHWg29tthgyX DBNo6ASBYiF9+DHPalWM0hdes17mLfTiBdWKPQLyhxgIiC53JTqsW3Um3pzttKwJ 4OwKqndEtMnoNncbslT9I5TA/u2gyIDf4Le6vJDEchhOZiTrhYos6LdIL/5OhoTC NUxy2sChgI+SDEX8tGghHmMixVlJPUkeI+jL22kL7jq11CYBIHVwvipBngduLSJa 3kbe2xWeTGeWwhrtXN20I+ZSrBKzl0esNNNYaV+AOPJEPQuW6q3P7si9hjkkRdbk u1apFnl4POVL1hL81KBMvhJBJg== -----END CERTIFICATE-----Generated at Mon Apr 6 05:00:22 2026 by rpki-client