$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: q2dLVAHq+4SBYb1sbFpSYF9taCEJQYzwOoOzf+VdXmE= Subject key identifier: 85:42:52:3C:56:D8:15:40:65:2A:D2:39:01:0B:88:AD:12:B5:1E:77 Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: F4 Signing time: Sun 05 Apr 2026 05:51:36 +0000 Manifest this update: Sun 05 Apr 2026 05:51:36 +0000 Manifest next update: Sun 12 Apr 2026 05:51:36 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: pnjXOVz060SN76Y6EmxwnbhQyJFXI5cc2ZczgbqV0tQ=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: 8RwXImvokvSX9GnVWZYfh0skm/ZCGYwhT4s+TGjd6Vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Apr 5 05:51:36 2026 GMT Not After : Apr 12 05:51:36 2026 GMT Subject: CN=69d1f868-6a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:f5:6f:8b:01:67:f5:d9:13:ff:7d:3e:0b: 3f:16:11:d7:e3:d3:88:d9:d2:d2:44:9a:6f:b2:2b: 23:ec:33:ea:f9:76:46:b1:1b:d4:b9:25:5f:99:19: ac:b3:8a:cf:c6:38:7f:74:77:51:a1:c2:61:8c:a8: 31:9b:54:37:bd:8a:61:32:9c:ea:a3:35:57:10:7d: 3b:19:bc:67:94:1a:6a:1e:14:73:45:10:74:d0:bd: e7:f9:56:6d:28:74:00:da:bb:a6:ea:74:f3:9b:ee: 3c:83:01:bd:7e:bc:51:3f:16:07:d7:a3:ea:01:f0: 09:4d:6d:ea:d9:cf:eb:a0:c8:ed:59:ad:12:73:19: 49:05:f4:54:85:e8:76:48:45:2f:bf:70:a2:90:c7: 8d:74:46:a9:36:f0:3a:dc:05:e9:82:b5:1a:1b:ab: 7f:9b:29:fd:ba:84:09:97:11:6e:c0:95:b3:ae:e6: ac:82:82:0b:ed:a1:df:63:30:1c:7e:a2:8d:a8:08: a0:24:79:44:25:ff:73:13:0d:21:ac:4d:39:da:74: f2:39:27:ef:ae:19:ce:0b:ac:c4:b7:f9:04:29:93: f6:b2:51:e5:04:b2:47:2a:a6:d7:b7:f4:93:6f:df: 11:3d:d5:f7:b0:24:dd:30:1c:89:e0:e0:38:87:98: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:42:52:3C:56:D8:15:40:65:2A:D2:39:01:0B:88:AD:12:B5:1E:77 X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e5:8e:ba:97:4e:0a:2b:55:ea:07:15:bc:c6:ca:74:3d:59: 03:4d:4c:ad:3a:44:21:28:e9:f8:e6:25:5a:3f:67:f1:1e:f3: 40:97:b5:aa:05:ef:b9:d9:dc:55:09:e8:d6:d3:07:32:fe:0a: 99:37:27:68:99:a0:33:ef:6c:60:a7:d9:50:d5:54:2e:62:cb: 48:ea:60:dc:f8:ca:17:4f:12:7d:63:70:95:ad:40:94:8a:d3: 3a:86:2d:fd:ec:21:8b:fa:af:c5:22:76:7f:97:9b:38:e9:33: 59:16:34:88:30:9e:54:7c:d4:88:3a:a1:d8:68:1c:fe:28:3e: ab:8f:17:6b:1a:13:be:e5:44:94:3f:75:87:53:95:0d:4d:eb: 22:10:c1:0c:4a:57:7c:c4:63:ae:6e:64:18:f3:a1:6c:51:08: 26:bd:2a:80:d9:84:0b:15:1b:a1:b2:2f:1c:8e:ab:98:b6:de: c9:a0:2f:0a:e7:93:24:be:91:ee:e4:e9:43:a1:98:20:80:db: 26:59:1c:ca:3c:84:4f:29:64:a1:f8:bf:68:3e:4f:61:9d:c0: 03:fa:f7:fc:da:61:85:b3:01:4d:02:5c:ea:34:a4:e8:3f:59: 4b:ac:6c:61:23:c5:1b:66:70:b1:18:3f:6b:da:61:0b:87:00: 03:c1:27:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw QkVFQTQ4RDAwHhcNMjYwNDA1MDU1MTM2WhcNMjYwNDEyMDU1MTM2WjAYMRYwFAYD VQQDEw02OWQxZjg2OC02YTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArav1b4sBZ/XZE/99Pgs/FhHX49OI2dLSRJpvsisj7DPq+XZGsRvUuSVfmRms s4rPxjh/dHdRocJhjKgxm1Q3vYphMpzqozVXEH07GbxnlBpqHhRzRRB00L3n+VZt KHQA2rum6nTzm+48gwG9frxRPxYH16PqAfAJTW3q2c/roMjtWa0ScxlJBfRUheh2 SEUvv3CikMeNdEapNvA63AXpgrUaG6t/myn9uoQJlxFuwJWzruasgoIL7aHfYzAc fqKNqAigJHlEJf9zEw0hrE052nTyOSfvrhnOC6zEt/kEKZP2slHlBLJHKqbXt/ST b98RPdX3sCTdMByJ4OA4h5itvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVCUjxW 2BVAZSrSOQELiK0StR53MB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2 c05zTjVsWmZBc2tMN3FTTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATeWOupdOCitV6gcVvMbKdD1ZA01MrTpEISjp+OYlWj9n8R7zQJe1qgXvudnc VQno1tMHMv4KmTcnaJmgM+9sYKfZUNVULmLLSOpg3PjKF08SfWNwla1AlIrTOoYt /ewhi/qvxSJ2f5ebOOkzWRY0iDCeVHzUiDqh2Ggc/ig+q48XaxoTvuVElD91h1OV DU3rIhDBDEpXfMRjrm5kGPOhbFEIJr0qgNmECxUbobIvHI6rmLbeyaAvCueTJL6R 7uTpQ6GYIIDbJlkcyjyETylkofi/aD5PYZ3AA/r3/NphhbMBTQJc6jSk6D9ZS6xs YSPFG2ZwsRg/a9phC4cAA8En1w== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:52 2026 by rpki-client