$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json) Hash identifier: nVENdKZBPcml9MhgUcqaALeikTf5DtU2LBzD1wzcSDk= Subject key identifier: 5A:8D:D7:46:34:BE:1E:BC:66:83:76:62:D2:68:89:41:A2:2D:92:BC Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft Manifest number: 77 Signing time: Sun 05 Apr 2026 07:08:19 +0000 Manifest this update: Sun 05 Apr 2026 07:08:19 +0000 Manifest next update: Sun 12 Apr 2026 07:08:19 +0000 Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: 5T22Ip5q155p5OSfufNSfeQiczJpbTAj2yc2P13mcyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Validity Not Before: Apr 5 07:08:19 2026 GMT Not After : Apr 12 07:08:19 2026 GMT Subject: CN=69d20a63-95d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:29:93:c2:8e:50:56:d1:04:59:22:1e:a1: 15:e4:41:50:2c:93:04:74:4d:aa:26:e3:35:88:83: 86:92:f4:8b:9c:f7:1d:cc:81:25:6e:69:f5:74:fc: 50:e9:15:56:02:0d:ed:a4:e3:54:3b:e4:f9:10:10: 18:66:fa:0a:c3:36:ca:9e:a4:6f:62:fc:49:9a:cb: ba:29:a0:29:08:85:b9:4c:21:c9:40:cf:42:80:4e: 5e:91:66:dd:be:cb:5f:0c:40:b5:5f:77:5e:6d:ee: 45:95:3f:a2:a8:09:cb:84:e3:28:1b:7d:a4:c7:e9: 42:8b:a0:97:98:3f:7d:cc:75:b7:18:3d:3f:fa:87: 0f:11:36:0d:97:82:4c:96:fe:28:f3:76:ba:99:18: 15:58:18:be:1e:a7:6d:68:c7:18:57:f9:aa:3b:aa: f1:31:df:68:16:6b:85:b5:a2:78:ca:ab:66:90:e0: cb:ef:c9:a5:3f:63:26:57:10:3a:45:a8:01:2e:31: d6:b5:47:49:c1:ea:68:d6:51:a4:40:01:71:06:00: cc:6f:41:2b:f3:c7:d4:99:8e:ce:58:6e:50:47:a4: cb:80:34:ff:9c:a8:a5:9e:ae:68:80:20:10:55:1e: 8c:bd:fc:d2:f2:f3:16:e3:b1:61:98:7c:f4:8e:ec: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:D7:46:34:BE:1E:BC:66:83:76:62:D2:68:89:41:A2:2D:92:BC X509v3 Authority Key Identifier: keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:b1:4f:09:16:27:f4:bd:a5:ec:80:a0:49:85:dd:1e:f6: 28:09:7e:f3:69:6e:87:b9:a7:d8:03:8e:74:d8:3c:7d:84:36: d1:ff:8b:f1:c4:44:c7:8a:12:c1:86:9b:6d:7a:02:fc:ba:59: 4f:3a:76:25:7f:49:2a:81:8c:f2:b7:2f:3f:2d:cd:f4:4c:4c: 69:d8:99:4e:f2:46:1b:a1:f9:36:07:f4:66:74:d7:98:15:f0: af:50:6f:25:a0:df:9e:df:07:3b:ea:6c:22:aa:29:b0:21:78: 53:95:83:c5:ea:12:ed:99:04:f7:57:e3:ad:6d:61:8e:93:bf: de:b9:0c:a6:3e:14:f6:e6:90:c6:ae:8a:0b:7e:2f:6c:4f:f8: 47:ed:42:3a:cb:99:c8:e0:d5:5a:23:cd:ac:5e:d6:dc:40:d8: 4d:c7:a2:36:fe:54:79:db:ba:c5:0d:82:3d:d9:f3:42:6a:9c: a1:24:96:90:4e:26:d0:62:8f:be:f8:a4:71:32:e0:57:ea:99: 08:7f:5d:b6:c9:71:06:72:ba:dc:73:c8:18:c4:c4:0b:08:c2: 44:2c:67:f0:86:10:0d:0f:ce:66:38:ce:7d:55:ea:4a:3e:da: fe:24:68:6a:a3:d4:a6:7a:bf:41:36:33:46:76:71:cc:09:2e: e5:d3:97:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoNDg4NzA3RTM3NjMxNEFERDU0NUNDNjYwQURFQ0UyMjk4 NjRDMTNFMDAeFw0yNjA0MDUwNzA4MTlaFw0yNjA0MTIwNzA4MTlaMBgxFjAUBgNV BAMTDTY5ZDIwYTYzLTk1ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbNSmTwo5QVtEEWSIeoRXkQVAskwR0Taom4zWIg4aS9Iuc9x3MgSVuafV0/FDp FVYCDe2k41Q75PkQEBhm+grDNsqepG9i/Emay7opoCkIhblMIclAz0KATl6RZt2+ y18MQLVfd15t7kWVP6KoCcuE4ygbfaTH6UKLoJeYP33MdbcYPT/6hw8RNg2XgkyW /ijzdrqZGBVYGL4ep21oxxhX+ao7qvEx32gWa4W1onjKq2aQ4MvvyaU/YyZXEDpF qAEuMda1R0nB6mjWUaRAAXEGAMxvQSvzx9SZjs5YblBHpMuANP+cqKWermiAIBBV Hoy9/NLy8xbjsWGYfPSO7IuRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWo3XRjS+ Hrxmg3Zi0miJQaItkrwwHwYDVR0jBBgwFoAUSIcH43YxSt1UXMZgreziKYZME+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0M5OEQ1NUZBN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3QxVVhNWmdyZXppS1laTUUt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0ljSDQzWXhTdDFVWE1aZ3JlemlLWVpNRS1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0M5OEQ1NUZBN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3Qx VVhNWmdyZXppS1laTUUtQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBH8LFPCRYn9L2l7ICgSYXdHvYoCX7zaW6HuafYA4502Dx9hDbR/4vxxETHihLB hpttegL8ullPOnYlf0kqgYzyty8/Lc30TExp2JlO8kYbofk2B/RmdNeYFfCvUG8l oN+e3wc76mwiqimwIXhTlYPF6hLtmQT3V+OtbWGOk7/euQymPhT25pDGrooLfi9s T/hH7UI6y5nI4NVaI82sXtbcQNhNx6I2/lR527rFDYI92fNCapyhJJaQTibQYo++ +KRxMuBX6pkIf122yXEGcrrcc8gYxMQLCMJELGfwhhAND85mOM59VepKPtr+JGhq o9Smer9BNjNGdnHMCS7l05cE -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:59 2026 by rpki-client