$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: B6ldnNTy+Q8Ox701iID+erL40um26BJKQQ2znNQTclI= Subject key identifier: F1:F0:CB:0C:5F:26:11:8E:84:02:76:7A:13:D8:50:20:66:39:6E:04 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 097A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 0953 Signing time: Sat 04 Apr 2026 19:58:11 +0000 Manifest this update: Sat 04 Apr 2026 19:58:10 +0000 Manifest next update: Sat 11 Apr 2026 19:58:10 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: O2oD0xWnOeB6MHD+5Y6eg3wNvpzClZ54OpVo0cgxqxg=) 2: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: 1/1W8qYx2zRT+SB1jArsVcARbCr/b03bu7LoiR2N3yc=) 3: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: jyCcQPHB1GYl8fSSLexidNgFWzesxj3u8rWectLDfq0=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 4FteVAZhXJnMTtQSuLVXL/Dj2oifA5aqn3kTr1yXK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2426 (0x97a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Apr 4 19:58:10 2026 GMT Not After : Apr 11 19:58:10 2026 GMT Subject: CN=69d16d53-4a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:48:19:ed:0b:18:a2:70:b7:c0:c2:c2:f4: d6:9a:af:40:c3:f0:84:4d:bb:ce:22:f6:67:1c:11: 02:e2:f5:e2:d7:43:41:0d:38:20:b7:e4:61:7c:4f: 85:23:15:a7:3e:f6:26:a4:15:e3:9f:83:0d:89:46: 68:22:ed:64:57:23:01:27:15:3e:cb:e6:ee:3e:7d: 14:20:06:68:22:39:30:f5:09:d8:39:50:ac:60:aa: c8:aa:b5:39:4f:78:0c:20:96:db:9a:b5:62:6c:c4: a9:22:19:88:4b:06:2a:dc:7e:89:fe:05:3f:d5:dc: 80:c6:4b:e2:e2:61:58:13:35:7a:71:fd:00:fd:65: 76:19:a9:c9:b5:32:75:b3:15:eb:32:09:c0:e8:2a: 94:97:2f:70:2d:ee:57:78:47:dd:a0:10:83:c9:e8: c3:27:3f:57:ff:ab:38:ea:b2:0b:2f:1f:32:98:64: e5:9a:65:72:13:f2:f9:e3:f6:6a:59:98:02:d1:67: b7:65:c7:54:ec:3b:9b:34:fc:d0:0f:eb:f2:f0:f7: 38:7d:e6:4d:17:af:7e:85:08:70:9d:3e:2c:12:df: e0:99:5f:58:ae:18:ff:c3:33:1d:ef:e9:39:10:ae: d5:7b:58:7b:d7:1d:b4:94:ed:57:b6:13:4e:31:b5: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F0:CB:0C:5F:26:11:8E:84:02:76:7A:13:D8:50:20:66:39:6E:04 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3d:f3:f2:c7:36:16:ac:c8:14:b2:78:16:47:dd:95:59:2c: fa:7a:23:ac:cf:7a:b6:15:73:f0:60:33:7f:57:67:af:6c:57: 38:91:0c:2f:f5:79:f9:d0:66:08:29:52:83:7f:fc:4e:2b:ff: d4:39:8e:97:15:c9:eb:a3:08:cc:ba:eb:76:0a:ef:05:fd:bf: 47:5f:61:7e:c1:6e:54:8b:7c:90:27:7b:a8:63:c9:17:96:4e: ab:38:30:14:ed:81:b4:03:c8:a3:89:0a:9a:19:a7:23:bc:50: ac:c0:ac:4f:14:d6:90:d0:29:60:77:f9:d7:4e:7d:97:d0:fd: cc:17:dd:d2:3c:25:34:77:16:cb:9c:fb:40:73:c2:00:91:1b: 58:05:80:7d:64:17:bc:0b:35:f6:15:c0:15:84:bf:3c:64:9d: bf:be:17:15:54:0e:6f:fa:f3:e0:a0:ee:43:7d:d5:cd:4f:89: db:ff:67:f2:ad:37:5a:1b:82:75:c4:8e:e6:1d:2a:eb:6c:89: 07:99:17:f3:81:06:3d:b3:db:86:7a:2f:82:9c:1c:95:93:0c: 28:8d:ad:7a:1f:fd:8e:34:ca:94:80:d7:97:d2:dc:20:c2:53: ea:9b:e4:09:25:7b:8b:e4:05:eb:f7:03:4b:85:50:50:79:34: a6:3d:2b:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjYwNDA0MTk1ODEwWhcNMjYwNDExMTk1ODEwWjAYMRYwFAYD VQQDEw02OWQxNmQ1My00YThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwppIGe0LGKJwt8DCwvTWmq9Aw/CETbvOIvZnHBEC4vXi10NBDTggt+RhfE+F IxWnPvYmpBXjn4MNiUZoIu1kVyMBJxU+y+buPn0UIAZoIjkw9QnYOVCsYKrIqrU5 T3gMIJbbmrVibMSpIhmISwYq3H6J/gU/1dyAxkvi4mFYEzV6cf0A/WV2GanJtTJ1 sxXrMgnA6CqUly9wLe5XeEfdoBCDyejDJz9X/6s46rILLx8ymGTlmmVyE/L54/Zq WZgC0We3ZcdU7DubNPzQD+vy8Pc4feZNF69+hQhwnT4sEt/gmV9Yrhj/wzMd7+k5 EK7Ve1h71x20lO1XthNOMbUIcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHwywxf JhGOhAJ2ehPYUCBmOW4EMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAT3z8sc2FqzIFLJ4FkfdlVks+nojrM96thVz8GAzf1dnr2xXOJEML/V5+dBm CClSg3/8Tiv/1DmOlxXJ66MIzLrrdgrvBf2/R19hfsFuVIt8kCd7qGPJF5ZOqzgw FO2BtAPIo4kKmhmnI7xQrMCsTxTWkNApYHf51059l9D9zBfd0jwlNHcWy5z7QHPC AJEbWAWAfWQXvAs19hXAFYS/PGSdv74XFVQOb/rz4KDuQ33VzU+J2/9n8q03WhuC dcSO5h0q62yJB5kX84EGPbPbhnovgpwclZMMKI2teh/9jjTKlIDXl9LcIMJT6pvk CSV7i+QF6/cDS4VQUHk0pj0rnw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:48:58 2026 by rpki-client