$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json) Hash identifier: 8Ga8cYi9uWolAx4n8pfAi3bXyCm8VYALEZvCnD4ft9w= Subject key identifier: 3C:C7:B7:34:09:6D:DD:26:AF:09:31:1C:BE:A9:F2:16:D5:12:8F:BA Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft Manifest number: 27 Signing time: Sun 05 Apr 2026 08:11:33 +0000 Manifest this update: Sun 05 Apr 2026 08:11:33 +0000 Manifest next update: Sun 12 Apr 2026 08:11:33 +0000 Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: bC3ywhIBwR/16bWG8L1DhoOMM1zW6QEzWgO1eBfQ600=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Validity Not Before: Apr 5 08:11:33 2026 GMT Not After : Apr 12 08:11:33 2026 GMT Subject: CN=69d21935-9621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:c0:7b:4c:60:e0:fa:d7:37:49:49:65:26: bc:f6:de:e3:10:96:ff:44:c6:68:c3:b1:32:87:34: dd:70:61:45:ae:ea:ca:ed:e5:a2:33:56:ea:99:e4: 33:e0:ad:70:1d:eb:8a:78:23:90:53:11:c6:ef:1a: 85:f4:0b:1b:ae:a5:1c:9b:a7:e4:55:b1:b3:cc:3e: 31:46:69:8c:4b:95:94:e1:1b:bd:8f:ba:b5:3f:2f: 9f:60:9d:48:a6:6c:62:cc:71:45:81:fc:36:e4:9e: 35:76:73:8d:d9:0f:e7:7a:fe:5f:92:0d:7c:16:08: de:ca:61:2f:8c:85:57:b3:d4:6d:8c:95:4d:e7:27: ea:ed:17:d8:f4:1f:60:be:9d:46:2f:21:c8:1b:1a: 5d:5b:c0:2a:05:f0:30:e6:6b:66:c2:01:4c:4f:ed: 97:1f:59:82:fc:bc:7f:c5:b0:13:43:b6:a0:6b:f9: 50:44:40:da:0c:b6:9b:8f:4e:59:6f:11:85:96:15: e9:ca:12:c2:6a:71:9d:e1:90:d7:c2:a6:c5:db:c9: 81:28:a0:df:f0:e6:16:33:72:e1:c0:24:ef:5e:8e: 38:68:5b:78:13:28:44:e7:0f:9f:7f:36:b0:9a:f3: 98:4c:5f:f9:9a:e7:1a:13:96:be:49:ec:ba:94:da: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:B7:34:09:6D:DD:26:AF:09:31:1C:BE:A9:F2:16:D5:12:8F:BA X509v3 Authority Key Identifier: keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:77:ba:84:e5:82:de:b6:fb:19:b1:55:a6:bb:37:35:51:ee: 57:b1:05:b6:c5:72:b0:da:ea:ca:61:16:18:c2:d7:3e:ac:35: bb:43:b8:97:cc:de:1f:c7:1a:ca:d2:2b:89:a4:47:52:8f:07: ef:6d:96:16:6f:e7:4a:91:84:34:92:a1:3d:d4:4b:2e:7f:df: f0:54:cd:c7:ab:6b:c7:fe:93:7c:bc:c4:76:d1:d4:06:bb:33: 68:bf:5e:6a:9e:e2:0f:67:46:e4:f2:44:aa:76:5e:35:8a:c8: 1a:66:2c:29:79:56:a0:48:22:7e:85:55:aa:25:cb:87:4c:43: d3:e0:b2:33:22:91:0c:3f:ac:86:43:00:15:84:e3:f0:1f:fc: f4:3f:6d:4e:76:01:63:be:16:7c:1b:4b:70:a9:48:97:e1:c4: 02:85:68:00:28:d7:11:fe:f5:24:58:0a:1d:5a:e5:47:7e:0f: 3f:7a:dc:47:69:5d:61:3d:46:ff:a1:9e:a9:1f:5c:12:2d:76: ca:7f:09:19:ff:84:97:2e:2b:38:5e:f1:f3:90:82:ec:e2:53: 75:67:8a:24:54:b5:0e:7c:13:a0:00:97:6e:ec:8c:b7:88:98: 0a:30:80:e9:0c:af:8e:09:d8:57:2f:64:98:e4:45:c9:41:0c: 54:11:d7:3c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1 OTU4REMwNTAeFw0yNjA0MDUwODExMzNaFw0yNjA0MTIwODExMzNaMBgxFjAUBgNV BAMTDTY5ZDIxOTM1LTk2MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwScB7TGDg+tc3SUllJrz23uMQlv9ExmjDsTKHNN1wYUWu6srt5aIzVuqZ5DPg rXAd64p4I5BTEcbvGoX0CxuupRybp+RVsbPMPjFGaYxLlZThG72PurU/L59gnUim bGLMcUWB/DbknjV2c43ZD+d6/l+SDXwWCN7KYS+MhVez1G2MlU3nJ+rtF9j0H2C+ nUYvIcgbGl1bwCoF8DDma2bCAUxP7ZcfWYL8vH/FsBNDtqBr+VBEQNoMtpuPTllv EYWWFenKEsJqcZ3hkNfCpsXbyYEooN/w5hYzcuHAJO9ejjhoW3gTKETnD59/NrCa 85hMX/ma5xoTlr5J7LqU2oWHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPMe3NAlt 3SavCTEcvqnyFtUSj7owHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0M3QjBBM0JDMDBERTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFdu S3Z6UGp6a1hJcWxsWTNBVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKd7qE5YLetvsZsVWmuzc1Ue5XsQW2xXKw2urKYRYYwtc+rDW7Q7iXzN4fxxrK 0iuJpEdSjwfvbZYWb+dKkYQ0kqE91Esuf9/wVM3Hq2vH/pN8vMR20dQGuzNov15q nuIPZ0bk8kSqdl41isgaZiwpeVagSCJ+hVWqJcuHTEPT4LIzIpEMP6yGQwAVhOPw H/z0P21OdgFjvhZ8G0twqUiX4cQChWgAKNcR/vUkWAodWuVHfg8/etxHaV1hPUb/ oZ6pH1wSLXbKfwkZ/4SXLis4XvHzkILs4lN1Z4okVLUOfBOgAJdu7Iy3iJgKMIDp DK+OCdhXL2SY5EXJQQxUEdc8 -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:04 2026 by rpki-client