$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: dFF0HMb8SRJ1kLKsHkBktslSagSzc/REwnaSqaoA96I= Subject key identifier: 38:36:C7:C4:69:38:3B:90:32:0C:7B:ED:5E:32:57:DB:F9:CB:E7:2E Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 0627 Signing time: Sat 04 Apr 2026 22:38:06 +0000 Manifest this update: Sat 04 Apr 2026 22:38:05 +0000 Manifest next update: Sat 11 Apr 2026 22:38:05 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 9ZOTNLeUJeso//Ea5n/xfAZOQoeW6rLrTgeidBZz1B8=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: RCoE8bQ2xQx3+6AG70lWii6WPBaMur94b8A3cmNzGaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Apr 4 22:38:05 2026 GMT Not After : Apr 11 22:38:05 2026 GMT Subject: CN=69d192ce-4240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f4:50:f1:d2:af:29:09:f1:81:93:79:85:a4: f3:56:c1:ba:90:5b:13:44:7f:cd:e7:b4:da:a5:0e: 6b:9e:d8:ad:ff:de:24:fd:58:fe:ca:3d:3c:30:3a: 20:6c:71:25:e4:7a:e7:b6:81:18:11:f8:84:a6:b4: 57:11:1b:ec:45:fb:ac:b4:c1:8b:1b:55:a5:06:5d: cc:8b:25:b3:6b:77:03:7c:42:b2:8c:a4:32:7b:74: f8:40:b9:1a:df:16:5b:e7:d1:f2:a2:76:fe:ae:8f: f1:fd:70:f3:ef:3e:39:fc:ff:0a:16:d7:01:96:02: 36:cb:4c:21:9d:45:d7:06:77:73:32:21:bf:65:a2: 1d:f0:46:b5:ae:e7:b6:20:a0:df:e9:7c:c6:83:26: 24:86:79:73:ba:83:fe:01:73:b2:11:ab:5d:e8:82: 0e:9c:e0:7d:f1:84:5b:58:2a:1b:ed:90:17:bc:38: 7b:37:f1:ae:e5:0c:1c:87:76:01:3f:3e:01:fc:7e: ad:4e:c4:da:02:e8:47:08:d2:3e:48:23:91:92:45: 73:22:e6:cf:c5:81:21:02:92:2e:1b:20:e8:27:9e: 14:cd:4d:62:e9:f1:29:f2:93:7f:5f:cd:e9:28:f9: e1:d4:b8:af:4a:cc:56:a8:93:34:ee:d9:c3:05:81: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:C7:C4:69:38:3B:90:32:0C:7B:ED:5E:32:57:DB:F9:CB:E7:2E X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:aa:f6:08:9d:13:98:36:91:65:de:2c:b9:86:66:e1:16:34: 53:3f:b8:f7:d4:ec:a7:8b:ef:17:b6:ff:ee:d6:3d:65:2b:e2: 19:27:f0:63:0b:46:55:98:0f:40:78:ea:52:3e:1b:d0:cd:a3: e8:8e:05:bc:74:dd:7c:90:91:86:cf:e1:69:db:8b:fb:f7:c4: 83:43:7b:97:c3:1b:ba:6c:61:67:e5:ed:ff:4d:76:3f:53:c0: 07:07:d0:93:57:a1:13:1c:fd:73:a1:07:ad:c9:f5:92:a4:37: bd:6b:33:4d:b9:01:f0:6d:18:d4:56:54:d6:0c:19:29:76:d0: c5:8a:3b:58:a0:23:c3:10:ca:40:19:90:bd:7a:67:df:49:10: 25:1a:3f:bb:9d:01:f1:40:4f:f9:36:1e:64:d7:ea:bc:a1:c9: 89:a1:3b:ee:b0:77:50:b8:33:d8:17:0d:4b:30:86:2d:22:c0: 4c:ff:dc:c2:a3:84:b0:d6:96:73:b3:ce:fe:e2:bd:9a:8a:bb: 41:35:4e:d0:41:3c:da:ea:35:88:6c:34:43:3a:98:0c:6e:12: 38:a7:2c:e6:79:80:2d:0a:78:21:2e:08:ac:13:37:d3:c9:f4: ff:61:29:69:f9:0d:6a:bd:3c:6d:2d:1f:9d:b8:8f:ec:90:99: df:74:8c:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjYwNDA0MjIzODA1WhcNMjYwNDExMjIzODA1WjAYMRYwFAYD VQQDEw02OWQxOTJjZS00MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/RQ8dKvKQnxgZN5haTzVsG6kFsTRH/N57TapQ5rntit/94k/Vj+yj08MDog bHEl5HrntoEYEfiEprRXERvsRfustMGLG1WlBl3MiyWza3cDfEKyjKQye3T4QLka 3xZb59Hyonb+ro/x/XDz7z45/P8KFtcBlgI2y0whnUXXBndzMiG/ZaId8Ea1rue2 IKDf6XzGgyYkhnlzuoP+AXOyEatd6IIOnOB98YRbWCob7ZAXvDh7N/Gu5Qwch3YB Pz4B/H6tTsTaAuhHCNI+SCORkkVzIubPxYEhApIuGyDoJ54UzU1i6fEp8pN/X83p KPnh1LivSsxWqJM07tnDBYFJNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDg2x8Rp ODuQMgx77V4yV9v5y+cuMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKr2CJ0TmDaRZd4suYZm4RY0Uz+499Tsp4vvF7b/7tY9ZSviGSfwYwtGVZgP QHjqUj4b0M2j6I4FvHTdfJCRhs/haduL+/fEg0N7l8MbumxhZ+Xt/012P1PABwfQ k1ehExz9c6EHrcn1kqQ3vWszTbkB8G0Y1FZU1gwZKXbQxYo7WKAjwxDKQBmQvXpn 30kQJRo/u50B8UBP+TYeZNfqvKHJiaE77rB3ULgz2BcNSzCGLSLATP/cwqOEsNaW c7PO/uK9moq7QTVO0EE82uo1iGw0QzqYDG4SOKcs5nmALQp4IS4IrBM308n0/2Ep afkNar08bS0fnbiP7JCZ33SM0A== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:29 2026 by rpki-client