$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft File: Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json) Hash identifier: vS7Ib/ysKusFDbiUou2P0oP3FqmINNCFOzwTlIl6u6E= Subject key identifier: EF:89:F7:B8:5E:2C:E2:9E:84:3F:FF:D5:BA:09:38:22:5D:CD:88:01 Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 Certificate issuer: /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft Manifest number: 028C Signing time: Sun 05 Apr 2026 01:27:16 +0000 Manifest this update: Sun 05 Apr 2026 01:27:16 +0000 Manifest next update: Sun 12 Apr 2026 01:27:16 +0000 Files and hashes: 1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: KoH+N3Y2yJCngfIntf15SEN2VmamKLn4ehqLh2FcP+w=) 2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: q5FKevNzsmGawtE5NPpNF5JroMkuiRvFoRzrdCWxt1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Validity Not Before: Apr 5 01:27:16 2026 GMT Not After : Apr 12 01:27:16 2026 GMT Subject: CN=69d1ba74-93cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:5a:49:44:f2:ee:b4:01:ba:32:dc:a5:9f: 65:a2:82:c0:11:92:e6:c9:c7:10:a6:b5:f8:bc:50: e2:64:76:0a:46:f5:8e:a2:6b:39:08:c6:b3:ca:4f: d6:78:bf:ad:c3:25:55:f7:09:ed:d4:e5:57:1c:2a: 1e:57:d1:60:b9:4b:fd:ef:6b:8d:99:5c:48:0d:1a: 3f:0a:81:94:48:f8:70:43:3a:78:79:ed:e8:50:56: 51:1c:97:fe:fa:83:85:ba:cb:85:4d:20:cd:12:8f: 57:f8:45:11:45:0c:4d:aa:82:d7:81:cf:49:b6:55: 01:fd:07:7d:54:5a:4c:38:8a:b7:15:ff:c1:1a:5f: e2:e6:65:07:27:7b:c4:16:cd:cd:25:c9:d9:06:82: c8:08:d4:42:5b:a2:85:5a:2d:e9:4e:1e:32:b4:99: a2:48:32:6d:77:cc:64:b6:31:c7:d6:37:fa:a6:3d: c7:3e:07:85:9d:11:3c:fb:59:82:e1:b5:65:71:32: b8:47:69:d6:9a:45:5b:78:ac:0f:7b:6b:30:ac:0b: 4d:c0:fb:a9:bb:b9:9d:ad:dd:ea:61:1b:27:8c:63: b7:e6:81:c8:72:78:64:df:95:a1:79:ce:e2:e6:28: 3c:95:a9:c7:a9:4d:79:a2:d6:2a:74:25:a3:e8:b5: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:89:F7:B8:5E:2C:E2:9E:84:3F:FF:D5:BA:09:38:22:5D:CD:88:01 X509v3 Authority Key Identifier: keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0f:3e:0b:7f:df:73:ef:9d:be:6e:27:7c:25:15:9b:56:ce: ff:01:0b:8c:24:ce:8f:18:6a:9f:e4:fa:04:96:b8:74:f4:3c: b1:10:f8:54:12:57:9d:7b:68:9d:c2:a8:4a:e5:d0:97:dc:f8: 77:ca:df:1e:3e:c9:e7:69:0f:95:4a:23:4d:0d:66:df:37:de: 4a:80:d3:c3:2b:20:56:d8:fb:7c:ee:00:71:a2:44:3c:ae:07: e8:99:e0:12:55:56:2a:f1:00:dd:ff:4d:a8:07:85:06:89:d3: 03:37:0f:d1:e9:5d:97:69:91:37:c6:79:94:33:61:88:33:f7: 73:f0:32:a0:63:aa:2d:63:72:dc:c1:0b:49:29:40:ee:02:4c: f5:35:19:76:72:23:ed:c5:c5:57:7f:93:fa:d7:dd:bf:97:62: 7c:81:26:69:11:c2:9f:f2:d7:da:8e:0e:c6:ec:23:2d:b1:dc: 74:58:ba:69:7a:f0:d6:99:4e:65:f5:2e:28:4b:f6:4a:b4:0d: 63:eb:04:fb:64:db:37:99:09:fc:a1:e0:26:c5:f4:21:51:13: 21:b0:cd:e7:6c:d1:ea:9a:a8:3b:8d:81:c4:63:fe:c7:1a:77: f0:48:10:f3:b6:d6:50:1c:cc:e4:47:19:4e:43:6e:ae:43:cb: 67:e7:58:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGRUYxMTAvBgNVBAUTKDMyMUQwQUI3OEExQUJFMzUxQTdEQjc5MzIwRDlGRkQz NzJBMDhDNDUwHhcNMjYwNDA1MDEyNzE2WhcNMjYwNDEyMDEyNzE2WjAYMRYwFAYD VQQDEw02OWQxYmE3NC05M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UlaSUTy7rQBujLcpZ9looLAEZLmyccQprX4vFDiZHYKRvWOoms5CMazyk/W eL+twyVV9wnt1OVXHCoeV9FguUv972uNmVxIDRo/CoGUSPhwQzp4ee3oUFZRHJf+ +oOFusuFTSDNEo9X+EURRQxNqoLXgc9JtlUB/Qd9VFpMOIq3Ff/BGl/i5mUHJ3vE Fs3NJcnZBoLICNRCW6KFWi3pTh4ytJmiSDJtd8xktjHH1jf6pj3HPgeFnRE8+1mC 4bVlcTK4R2nWmkVbeKwPe2swrAtNwPupu7mdrd3qYRsnjGO35oHIcnhk35Whec7i 5ig8lanHqU15otYqdCWj6LWy4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+J97he LOKehD//1boJOCJdzYgBMB8GA1UdIwQYMBaAFDIdCreKGr41Gn23kyDZ/9NyoIxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEZFRi9CMDM2M0Q2MDY0 RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZqVWFmYmVUSU5uXzAzS2dq RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oMEt0NG9hdmpVYWZiZVRJTm5fMDNLZ2pFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEZFRi9CMDM2M0Q2MDY0RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZq VWFmYmVUSU5uXzAzS2dqRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANg8+C3/fc++dvm4nfCUVm1bO/wELjCTOjxhqn+T6BJa4dPQ8sRD4VBJXnXto ncKoSuXQl9z4d8rfHj7J52kPlUojTQ1m3zfeSoDTwysgVtj7fO4AcaJEPK4H6Jng ElVWKvEA3f9NqAeFBonTAzcP0eldl2mRN8Z5lDNhiDP3c/AyoGOqLWNy3MELSSlA 7gJM9TUZdnIj7cXFV3+T+tfdv5difIEmaRHCn/LX2o4OxuwjLbHcdFi6aXrw1plO ZfUuKEv2SrQNY+sE+2TbN5kJ/KHgJsX0IVETIbDN52zR6pqoO42BxGP+xxp38EgQ 87bWUBzM5EcZTkNurkPLZ+dYxQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:22 2026 by rpki-client