$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft File: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft (raw, json) Hash identifier: Z9D09ZnwVeeLqs8I+/4uYfo7FbgUEUajCVivZJqQ9ok= Subject key identifier: 9F:6E:08:3F:78:58:E7:50:8B:40:D6:67:B0:B7:30:FF:4B:A4:C5:D6 Authority key identifier: E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7 Certificate issuer: /CN=A9189D79/serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft Manifest number: 0F Signing time: Sun 05 Apr 2026 08:29:12 +0000 Manifest this update: Sun 05 Apr 2026 08:29:12 +0000 Manifest next update: Sun 12 Apr 2026 08:29:12 +0000 Files and hashes: 1: 4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl (hash: IctXgdk5U4ahhjKmTcJls+W+M6n+B5s8zC+h6O31iOc=) 2: 192C64F2252311F18B88524DC4833773.roa (hash: hVhdvs7GH6X86vaiCeryWerFVJfvpNrRVfFuhErwgtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D79, serialNumber=E0EE5F5B4CCE72C02CB1B165DD8D6D03E11815C7 Validity Not Before: Apr 5 08:29:12 2026 GMT Not After : Apr 12 08:29:12 2026 GMT Subject: CN=69d21d58-4756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:e2:54:de:10:86:cb:e7:fc:6b:a1:bc:b6: 4a:43:9a:cb:ef:66:dd:71:26:61:f5:86:bc:99:51: 75:5a:30:05:0e:b9:24:09:54:c6:ee:2a:e3:f1:ba: 86:99:04:a7:d3:c1:e9:00:b7:ca:64:3b:2f:e5:96: 3b:c4:01:10:3d:a7:2a:35:ee:38:c5:68:57:8a:0a: 1c:61:66:09:ef:9d:f1:3a:2e:f7:2d:3d:f2:48:36: ed:63:48:76:75:0e:6d:3c:67:48:2d:42:c9:7e:96: c9:63:33:f2:bd:0c:b4:d7:af:96:46:49:86:48:6f: 89:0e:37:44:08:39:0d:eb:26:06:0e:58:2e:e2:f2: 3d:92:fb:b4:ad:70:54:f4:63:ae:b0:18:55:1f:87: 4a:1e:40:b8:5b:fd:ab:3a:e0:3a:00:fd:63:fd:25: 07:2c:86:79:3b:ce:c1:63:51:08:09:5d:42:15:b4: 22:00:a1:a7:63:42:93:ab:0b:32:c9:c2:ec:01:c2: 22:60:fa:78:40:99:f9:75:56:22:bf:a1:b6:54:12: 6a:42:14:e2:bd:59:2d:d4:73:ee:6e:8e:38:e3:f1: 7c:fa:89:78:8c:a0:8d:eb:8d:f5:c4:30:d9:78:0e: 9c:12:e0:2e:36:15:51:b0:48:16:60:73:0e:a5:a3: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:08:3F:78:58:E7:50:8B:40:D6:67:B0:B7:30:FF:4B:A4:C5:D6 X509v3 Authority Key Identifier: keyid:E0:EE:5F:5B:4C:CE:72:C0:2C:B1:B1:65:DD:8D:6D:03:E1:18:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4O5fW0zOcsAssbFl3Y1tA-EYFcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/43C2A69224DB11F1B1F5BBA5AC833773/4O5fW0zOcsAssbFl3Y1tA-EYFcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:ae:b1:2c:4e:dd:b6:07:b0:24:9a:21:a7:f5:0d:d4:9b: a2:30:3e:a6:d5:a5:cf:93:b7:9d:ea:eb:cd:e3:d2:15:dc:27: ba:cf:dc:3c:56:d5:fa:d2:88:6b:74:8f:89:c5:ca:f6:a5:a6: 37:0c:1b:eb:d9:76:bb:a1:ea:8d:5d:b8:02:52:09:c7:f1:ca: 08:29:4d:a6:55:5a:1c:e6:56:75:83:c0:f6:d1:cb:a1:b1:08: eb:f0:a3:cb:30:c9:66:7b:54:bf:9a:bc:76:50:93:13:e4:1f: 97:ed:92:56:cf:12:c9:20:64:f0:e3:22:1d:c5:f3:3d:f1:b5: 4a:0e:a3:11:05:8a:3a:aa:b3:fe:16:80:59:4d:65:88:15:99: e5:87:5a:ce:01:c8:bd:ed:a9:ee:14:33:d0:a4:6e:c9:46:63: 3b:30:18:23:a2:7b:83:ac:47:96:65:9c:49:6a:58:7c:38:18: 6f:9c:a2:c4:06:f7:93:eb:bb:12:2e:db:0f:f5:c6:35:99:f4: a5:11:4f:56:7c:d8:76:45:5f:f2:ab:e5:7b:50:9f:43:be:c8: 0d:43:6c:0b:6c:89:f0:3e:70:a3:bc:fe:cd:31:36:da:95:a8: f0:85:c4:db:0b:95:ae:cb:b4:ba:bf:17:cd:2f:8d:db:e2:f7: 47:97:e9:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ3OTExMC8GA1UEBRMoRTBFRTVGNUI0Q0NFNzJDMDJDQjFCMTY1REQ4RDZEMDNF MTE4MTVDNzAeFw0yNjA0MDUwODI5MTJaFw0yNjA0MTIwODI5MTJaMBgxFjAUBgNV BAMTDTY5ZDIxZDU4LTQ3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC3OJU3hCGy+f8a6G8tkpDmsvvZt1xJmH1hryZUXVaMAUOuSQJVMbuKuPxuoaZ BKfTwekAt8pkOy/lljvEARA9pyo17jjFaFeKChxhZgnvnfE6LvctPfJINu1jSHZ1 Dm08Z0gtQsl+lsljM/K9DLTXr5ZGSYZIb4kON0QIOQ3rJgYOWC7i8j2S+7StcFT0 Y66wGFUfh0oeQLhb/as64DoA/WP9JQcshnk7zsFjUQgJXUIVtCIAoadjQpOrCzLJ wuwBwiJg+nhAmfl1ViK/obZUEmpCFOK9WS3Uc+5ujjjj8Xz6iXiMoI3rjfXEMNl4 DpwS4C42FVGwSBZgcw6lo5IFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn24IP3hY 51CLQNZnsLcw/0ukxdYwHwYDVR0jBBgwFoAU4O5fW0zOcsAssbFl3Y1tA+EYFccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzQzQzJBNjkyMjRE QjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NBc3NiRmwzWTF0QS1FWUZj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNE81Zlcwek9jc0Fzc2JGbDNZMXRBLUVZRmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDc5LzQzQzJBNjkyMjREQjExRjFCMUY1QkJBNUFDODMzNzczLzRPNWZXMHpPY3NB c3NiRmwzWTF0QS1FWUZjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwkq6xLE7dtgewJJohp/UN1JuiMD6m1aXPk7ed6uvN49IV3Ce6z9w8VtX60ohr dI+Jxcr2paY3DBvr2Xa7oeqNXbgCUgnH8coIKU2mVVoc5lZ1g8D20cuhsQjr8KPL MMlme1S/mrx2UJMT5B+X7ZJWzxLJIGTw4yIdxfM98bVKDqMRBYo6qrP+FoBZTWWI FZnlh1rOAci97anuFDPQpG7JRmM7MBgjonuDrEeWZZxJalh8OBhvnKLEBveT67sS LtsP9cY1mfSlEU9WfNh2RV/yq+V7UJ9DvsgNQ2wLbInwPnCjvP7NMTbalajwhcTb C5Wuy7S6vxfNL43b4vdHl+nW -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:47 2026 by rpki-client