$ rpki-client -vvf rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft File: AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft (raw, json) Hash identifier: 4v33/avDd7IEvKXKBUXvaveYm9XJ5W265AmP2boXJds= Subject key identifier: 66:29:16:2E:51:EF:2E:E1:90:E9:4D:73:9D:C1:E7:77:96:CF:CE:BF Authority key identifier: 02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B Certificate issuer: /CN=A9188064/serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft Manifest number: 22 Signing time: Sun 05 Apr 2026 08:12:20 +0000 Manifest this update: Sun 05 Apr 2026 08:12:19 +0000 Manifest next update: Sun 12 Apr 2026 08:12:19 +0000 Files and hashes: 1: AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl (hash: DaUxMqk43i+LezJ0L5z4/QoYh/+R8lab9s6lgl5J0XI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188064, serialNumber=02FB40F5F34CF2E57C214F0CD7141B4D8DA42B6B Validity Not Before: Apr 5 08:12:19 2026 GMT Not After : Apr 12 08:12:19 2026 GMT Subject: CN=69d21964-95ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:26:f9:93:d8:ad:2b:e1:63:b0:27:21:0e: bc:02:95:05:1d:e8:4f:9a:33:f1:6a:2c:66:bf:ad: 45:21:ed:72:82:8e:ef:a3:d3:81:8c:53:3b:37:fa: 9c:72:bb:4e:1b:ba:6e:fa:e6:13:75:b4:89:99:d9: ac:f5:4a:48:18:3a:73:81:eb:21:c5:3d:46:30:af: 9a:8e:ca:5d:ba:d0:10:62:f4:e2:5c:a8:54:5d:4f: fa:29:58:0f:06:e1:d7:33:c9:20:ee:a2:59:e2:eb: 38:f6:a7:a6:33:64:20:4a:2e:57:a6:b8:ca:3f:a4: a3:6c:b3:97:48:97:37:00:d2:c1:db:2b:d3:8c:ae: c9:d5:9a:69:e1:8e:e2:41:2e:87:f2:68:17:27:de: f4:da:f8:bd:ce:91:97:b0:69:70:ad:0c:68:c6:71: 31:72:a2:09:71:3c:ce:bc:ef:7e:85:95:46:cb:f7: be:ab:c6:45:5b:40:36:ef:85:f6:b6:22:9c:9a:8e: 25:5c:b1:02:05:a1:1f:51:5a:41:86:93:5f:0e:3c: 02:a3:9a:33:45:7f:33:b1:a5:f2:c8:cd:e3:31:fe: a6:c7:de:9b:ab:9f:44:d9:3c:ad:47:01:01:2b:95: df:00:ce:5c:02:07:a8:1b:7b:c0:ee:57:99:b0:21: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:29:16:2E:51:EF:2E:E1:90:E9:4D:73:9D:C1:E7:77:96:CF:CE:BF X509v3 Authority Key Identifier: keyid:02:FB:40:F5:F3:4C:F2:E5:7C:21:4F:0C:D7:14:1B:4D:8D:A4:2B:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AvtA9fNM8uV8IU8M1xQbTY2kK2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188064/F0AF85E4024611F19251606D1F3D8C67/AvtA9fNM8uV8IU8M1xQbTY2kK2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:a7:b4:27:74:12:3a:2c:ae:ef:6d:4c:7d:be:5f:1d:b7: 43:06:ff:62:2b:8e:38:42:c0:f3:59:23:19:ea:7f:22:c5:f0: ee:e4:f0:85:08:e4:b6:23:0c:20:6d:3f:1d:1d:5c:35:14:b0: 11:8a:ea:0e:99:ac:19:86:c4:1f:31:84:cf:68:7c:17:a6:a3: 2b:de:40:67:ab:75:ac:24:43:f4:e9:54:10:0d:65:f4:0e:8d: 4a:8f:27:af:17:bd:68:ad:52:5a:16:48:ee:9f:c2:29:cd:79: 6a:16:e0:3e:43:a3:ad:9b:9d:f8:8a:56:18:b3:ee:cf:48:ce: a0:a0:5b:c9:a2:be:06:0f:4d:35:32:e8:0f:5a:35:80:4f:dc: 53:6a:80:55:75:4f:a9:1e:14:b3:44:ed:35:a3:39:9a:14:ee: 9b:31:9b:80:a4:2b:14:1c:ff:cb:32:24:3c:bb:ec:42:01:c3: fd:59:0d:f0:16:3a:e1:0d:d8:18:9c:0b:1a:ff:1b:71:c1:56: 63:68:c5:e3:3a:b8:05:c2:41:07:7a:a1:3b:6e:2c:ed:1c:e5: 7a:78:07:8c:73:81:a0:fd:0a:18:48:ea:91:32:98:4a:bb:fc: 4c:10:d7:fc:c9:bd:77:64:b2:c9:bb:98:8a:f2:65:48:75:20: a6:c9:2b:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODA2NDExMC8GA1UEBRMoMDJGQjQwRjVGMzRDRjJFNTdDMjE0RjBDRDcxNDFCNEQ4 REE0MkI2QjAeFw0yNjA0MDUwODEyMTlaFw0yNjA0MTIwODEyMTlaMBgxFjAUBgNV BAMTDTY5ZDIxOTY0LTk1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSzib5k9itK+FjsCchDrwClQUd6E+aM/FqLGa/rUUh7XKCju+j04GMUzs3+pxy u04bum765hN1tImZ2az1SkgYOnOB6yHFPUYwr5qOyl260BBi9OJcqFRdT/opWA8G 4dczySDuolni6zj2p6YzZCBKLlemuMo/pKNss5dIlzcA0sHbK9OMrsnVmmnhjuJB LofyaBcn3vTa+L3OkZewaXCtDGjGcTFyoglxPM68736FlUbL976rxkVbQDbvhfa2 IpyajiVcsQIFoR9RWkGGk18OPAKjmjNFfzOxpfLIzeMx/qbH3purn0TZPK1HAQEr ld8AzlwCB6gbe8DuV5mwIfrtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZikWLlHv LuGQ6U1zncHnd5bPzr8wHwYDVR0jBBgwFoAUAvtA9fNM8uV8IU8M1xQbTY2kK2sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MDY0L0YwQUY4NUU0MDI0 NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVWOElVOE0xeFFiVFkya0sy cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQXZ0QTlmTk04dVY4SVU4TTF4UWJUWTJrSzJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MDY0L0YwQUY4NUU0MDI0NjExRjE5MjUxNjA2RDFGM0Q4QzY3L0F2dEE5Zk5NOHVW OElVOE0xeFFiVFkya0sycy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC2uae0J3QSOiyu721Mfb5fHbdDBv9iK444QsDzWSMZ6n8ixfDu5PCFCOS2Iwwg bT8dHVw1FLARiuoOmawZhsQfMYTPaHwXpqMr3kBnq3WsJEP06VQQDWX0Do1Kjyev F71orVJaFkjun8IpzXlqFuA+Q6Otm534ilYYs+7PSM6goFvJor4GD001MugPWjWA T9xTaoBVdU+pHhSzRO01ozmaFO6bMZuApCsUHP/LMiQ8u+xCAcP9WQ3wFjrhDdgY nAsa/xtxwVZjaMXjOrgFwkEHeqE7biztHOV6eAeMc4Gg/QoYSOqRMphKu/xMENf8 yb13ZLLJu5iK8mVIdSCmySvU -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:47 2026 by rpki-client