$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json) Hash identifier: cYfSaG0A7tjKmK8Bc1flmRw4htWydALn5p2roOonk6I= Subject key identifier: 1B:F6:0A:19:D9:30:D5:BC:1F:FF:EF:62:AD:81:9D:43:BB:14:5A:03 Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft Manifest number: 0109 Signing time: Sun 05 Apr 2026 05:51:00 +0000 Manifest this update: Sun 05 Apr 2026 05:51:00 +0000 Manifest next update: Sun 12 Apr 2026 05:51:00 +0000 Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: 8GkjjkHtfSX2/h8f5vo5nntbYNYvMo7fJ3kiLLkPVIo=) 2: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: HqC74BaNIFmQgf5fwQEJTWp7cLFg8PUR+S6AsCpz7RE=) 3: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: Nl4kN6jm52cuyAkdi4em+9Vsp1W9ZdwhxrwVDXbPRaA=) 4: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: eSNXNT3NWZ6GsZhGHaO1BXwN0Y2Sx0KnClUlxO8jfHM=) 5: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: 5Lek0/TY1VnVxY+8seA94qWb37v69wiqgc1rAck09Kw=) 6: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: xvCQat8cEUCOVzKUZe2Y4zreB9P77CYReFAzizbnP0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA Validity Not Before: Apr 5 05:51:00 2026 GMT Not After : Apr 12 05:51:00 2026 GMT Subject: CN=69d1f844-1727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1f:f5:12:38:be:09:a8:92:ab:24:f1:42:cc: 68:00:ff:ab:78:0f:5e:a8:96:bf:a2:20:b0:14:ba: da:00:72:34:e0:72:97:09:dc:33:b7:b3:e8:f6:5b: a4:f2:10:56:1a:e5:e8:73:24:2f:60:f0:54:7d:90: dd:fd:a6:7a:22:38:e0:d5:13:9c:86:e2:55:04:65: ff:23:d2:74:bb:f7:5f:52:49:97:5d:39:9d:28:b0: 3c:d3:3a:eb:f6:b1:0e:39:bf:37:83:68:ea:ab:92: c1:09:98:1d:ee:32:d0:21:75:19:af:ff:ea:3b:89: 1b:90:0a:54:79:30:91:8a:fe:f8:ba:5f:08:b5:43: 31:6f:88:2b:7c:24:2d:d8:85:d0:ee:b4:98:56:af: b1:e8:aa:3a:f5:d0:35:c7:93:4c:9d:47:d5:5a:d1: e3:fb:a8:cf:15:03:0a:e1:17:d0:07:95:9d:cc:22: 27:9b:e3:d4:13:ea:36:f1:ba:cc:ba:fb:3b:15:70: 24:99:8b:a4:05:42:60:89:83:09:31:e7:d3:3c:3c: 6e:28:53:8a:87:8e:71:2f:2e:65:b0:5a:05:a8:1c: 7d:21:47:a6:5e:d4:31:f4:ed:b2:8e:85:7f:1d:6f: f7:58:95:5c:b3:f6:75:57:26:36:c1:d9:90:a5:c7: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F6:0A:19:D9:30:D5:BC:1F:FF:EF:62:AD:81:9D:43:BB:14:5A:03 X509v3 Authority Key Identifier: keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b4:1f:ba:29:32:3c:03:c6:8b:90:84:6f:65:2b:90:a2:49: 60:6c:4b:1b:c6:71:94:94:7c:fb:bb:8f:92:b2:39:1d:59:06: d8:10:6a:0e:97:33:b1:5d:30:a6:dc:c3:7a:fb:72:18:e3:dc: 5f:db:cc:7c:61:f7:80:a1:fa:80:65:8d:a8:eb:8a:2d:b5:be: 23:20:09:47:ae:86:fc:3c:df:4c:bd:d1:69:fa:a5:13:d1:e1: 08:fb:9d:50:13:94:1e:8e:42:22:b7:fc:fe:b3:9c:d9:24:4e: dd:f0:d5:95:a2:22:6d:db:27:e5:1a:b5:3a:a4:a9:86:c7:ca: 38:32:37:b7:61:75:d6:17:f7:bf:8c:69:ba:c7:b1:21:7e:58: 8a:cd:8a:ed:53:c7:36:59:80:25:35:59:cf:9b:e8:bc:e7:ea: c1:1a:9c:df:8a:ad:f0:db:45:5c:a6:16:12:66:a3:12:88:db: f7:2c:6c:74:b5:91:cf:48:bf:79:e7:30:8e:f8:a2:b7:dd:d3: 85:ce:43:12:16:ff:03:46:c9:8a:5d:b2:bb:57:69:95:63:51: 2e:af:df:d9:95:7f:44:c3:d6:61:4c:ca:98:7b:b1:d1:4f:c6: ee:38:bd:85:cb:be:20:e9:cd:82:a0:70:cb:61:46:76:a6:7b: cc:33:56:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0 QjY4RkY1Q0EwHhcNMjYwNDA1MDU1MTAwWhcNMjYwNDEyMDU1MTAwWjAYMRYwFAYD VQQDEw02OWQxZjg0NC0xNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5h/1Eji+CaiSqyTxQsxoAP+reA9eqJa/oiCwFLraAHI04HKXCdwzt7Po9luk 8hBWGuXocyQvYPBUfZDd/aZ6Ijjg1ROchuJVBGX/I9J0u/dfUkmXXTmdKLA80zrr 9rEOOb83g2jqq5LBCZgd7jLQIXUZr//qO4kbkApUeTCRiv74ul8ItUMxb4grfCQt 2IXQ7rSYVq+x6Ko69dA1x5NMnUfVWtHj+6jPFQMK4RfQB5WdzCInm+PUE+o28brM uvs7FXAkmYukBUJgiYMJMefTPDxuKFOKh45xLy5lsFoFqBx9IUemXtQx9O2yjoV/ HW/3WJVcs/Z1VyY2wdmQpccsBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv2ChnZ MNW8H//vYq2BnUO7FFoDMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAebQfuikyPAPGi5CEb2UrkKJJYGxLG8ZxlJR8+7uPkrI5HVkG2BBqDpczsV0w ptzDevtyGOPcX9vMfGH3gKH6gGWNqOuKLbW+IyAJR66G/DzfTL3RafqlE9HhCPud UBOUHo5CIrf8/rOc2SRO3fDVlaIibdsn5Rq1OqSphsfKODI3t2F11hf3v4xpusex IX5Yis2K7VPHNlmAJTVZz5vovOfqwRqc34qt8NtFXKYWEmajEojb9yxsdLWRz0i/ eecwjviit93Thc5DEhb/A0bJil2yu1dplWNRLq/f2ZV/RMPWYUzKmHux0U/G7ji9 hcu+IOnNgqBwy2FGdqZ7zDNWJQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:57 2026 by rpki-client