$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: TXkKjMGWrgQp25XrNilCFjpQ805fcejC0se6PHg1KiM= Subject key identifier: 73:BA:2A:B8:D5:D7:19:DF:02:35:D5:61:98:8E:30:10:73:68:5E:19 Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0DF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0DE7 Signing time: Sat 04 Apr 2026 17:43:18 +0000 Manifest this update: Sat 04 Apr 2026 17:43:17 +0000 Manifest next update: Sat 11 Apr 2026 17:43:17 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: vg1APhKYQA9wcA0fsc9aZ0GVmuwR6XOtrzCHHpnCc7s=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: e4kOFF05o5VdluZF/kOk4uZ8x60T66NPK/E1N2Z8lgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: Apr 4 17:43:17 2026 GMT Not After : Apr 11 17:43:17 2026 GMT Subject: CN=69d14db5-e231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:1f:7e:a0:48:6d:52:8e:2d:55:61:73:59: e5:0a:87:05:d4:7b:03:2e:bf:bc:ab:47:d8:bb:5f: 38:6d:0a:f6:36:ee:96:2b:94:60:0a:f5:a8:e8:cc: cd:1d:c3:c8:14:55:d3:34:29:3d:5f:db:ec:b2:ee: a9:3f:b4:25:e0:b7:7b:92:c1:96:44:b3:cd:49:8e: 0b:86:25:d3:50:44:a9:9e:dc:0e:92:59:13:fa:83: 34:53:01:66:97:8a:b2:6d:86:ce:88:71:9c:2c:13: b1:fa:93:54:89:8e:fe:0b:d7:39:b3:ad:7e:98:c3: c4:1e:c8:83:6b:85:ba:ac:a8:3f:31:8e:47:e9:12: 81:07:46:46:76:99:3d:ae:67:74:78:09:24:70:4d: 21:00:2a:37:e2:a1:50:b2:8f:1d:6e:67:c1:ec:6c: fe:34:c1:01:12:bc:ab:5b:f2:c8:c4:bb:b4:00:22: 43:a9:5c:6d:5f:4c:0f:98:7e:a7:c4:33:e3:3d:1b: ab:18:98:19:06:ea:0f:26:cf:6f:fb:8a:fb:19:a9: 66:36:f2:c4:e2:47:72:7b:58:70:99:f1:56:cd:fa: d2:32:c5:bc:b7:50:eb:fa:4f:9a:68:0e:c0:b9:5b: f3:ed:29:4c:f6:89:4c:dd:fe:87:1a:f5:3d:1f:f1: 73:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BA:2A:B8:D5:D7:19:DF:02:35:D5:61:98:8E:30:10:73:68:5E:19 X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:07:f3:2a:fa:22:ac:56:bb:51:8b:6e:a2:ad:97:3f:78:0a: 6e:d6:54:16:61:bd:e7:0d:5d:ba:87:ac:4e:e8:6a:09:73:91: 48:2a:e2:06:74:20:27:41:11:81:05:f8:65:21:be:87:fd:32: c1:00:fd:a0:b4:d9:d2:d2:9a:6f:8c:55:5d:7e:8b:5b:ba:c3: b5:a9:c3:fa:42:f5:2f:00:0d:05:9e:f3:53:a7:ce:63:c3:c1: 03:0a:98:a4:52:d9:ef:11:29:51:83:15:f8:f5:87:ca:f9:8e: fc:4b:e2:e7:6d:0d:f2:4e:1d:ed:9a:ce:77:f0:0e:98:30:00: f2:ef:9a:e8:46:30:8a:95:6f:c8:d1:ee:2a:08:f0:fc:9a:dc: a1:02:25:21:61:b4:f7:09:f4:0f:11:27:89:bf:83:bb:73:4f: b6:1d:b3:c6:44:0c:cb:bb:6d:72:b7:d8:e5:e5:bb:b0:ee:bf: a2:90:75:9e:60:c3:1a:d8:2f:09:d0:a3:10:3b:b8:fc:7e:03: 68:fb:27:f1:69:3c:b6:3e:9e:9e:b7:03:54:d4:98:4c:2e:f9: 3a:10:f4:b7:f0:d3:55:60:33:59:53:b6:cf:5a:80:d5:be:05: 75:c5:c2:22:9b:a9:f8:1c:4b:ee:e5:42:9f:e3:fd:18:a0:53: f7:68:a3:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjYwNDA0MTc0MzE3WhcNMjYwNDExMTc0MzE3WjAYMRYwFAYD VQQDEw02OWQxNGRiNS1lMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZkffqBIbVKOLVVhc1nlCocF1HsDLr+8q0fYu184bQr2Nu6WK5RgCvWo6MzN HcPIFFXTNCk9X9vssu6pP7Ql4Ld7ksGWRLPNSY4LhiXTUESpntwOklkT+oM0UwFm l4qybYbOiHGcLBOx+pNUiY7+C9c5s61+mMPEHsiDa4W6rKg/MY5H6RKBB0ZGdpk9 rmd0eAkkcE0hACo34qFQso8dbmfB7Gz+NMEBEryrW/LIxLu0ACJDqVxtX0wPmH6n xDPjPRurGJgZBuoPJs9v+4r7GalmNvLE4kdye1hwmfFWzfrSMsW8t1Dr+k+aaA7A uVvz7SlM9olM3f6HGvU9H/FzXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO6KrjV 1xnfAjXVYZiOMBBzaF4ZMB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZAfzKvoirFa7UYtuoq2XP3gKbtZUFmG95w1duoesTuhqCXORSCriBnQgJ0ER gQX4ZSG+h/0ywQD9oLTZ0tKab4xVXX6LW7rDtanD+kL1LwANBZ7zU6fOY8PBAwqY pFLZ7xEpUYMV+PWHyvmO/Evi520N8k4d7ZrOd/AOmDAA8u+a6EYwipVvyNHuKgjw /JrcoQIlIWG09wn0DxEnib+Du3NPth2zxkQMy7ttcrfY5eW7sO6/opB1nmDDGtgv CdCjEDu4/H4DaPsn8Wk8tj6enrcDVNSYTC75OhD0t/DTVWAzWVO2z1qA1b4FdcXC Ipup+BxL7uVCn+P9GKBT92ijUA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:18 2026 by rpki-client