$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: pKFAId/W8cguhv+7ELfviHHYG8R4heiO7m2Vt0dhATA= Subject key identifier: 4A:11:96:9B:0D:74:44:1A:10:95:22:74:AC:31:B8:88:B5:DE:BC:0F Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 09DB Signing time: Sat 04 Apr 2026 19:43:26 +0000 Manifest this update: Sat 04 Apr 2026 19:43:25 +0000 Manifest next update: Sat 11 Apr 2026 19:43:25 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: WIyV/LFSxuo2LWH2yQD7tOdb7w9dtXaZ/IG7R/1JCe8=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: 0FWKl6V2UsAeRLSYgRMr9fF+nuXljQkdSIOnzl7uC2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Apr 4 19:43:25 2026 GMT Not After : Apr 11 19:43:25 2026 GMT Subject: CN=69d169de-819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:67:15:b5:98:3b:c1:5c:db:40:bf:f3:a6: 12:1e:39:b2:54:48:0c:48:b0:a9:d0:0e:50:ac:56: 1e:64:b4:04:4a:11:5c:52:77:25:3c:29:79:d4:8b: d0:3e:0a:7a:df:18:ec:4e:9b:ff:b6:1e:20:dd:e4: 62:61:2e:ea:b3:d1:ff:e7:10:b2:3c:54:0a:11:e6: 00:23:8a:2f:78:2c:ae:d4:83:3b:d7:00:c9:6a:59: 4d:99:08:1c:2b:3a:30:2d:91:83:f0:24:66:05:50: df:25:8a:14:03:a3:f4:11:d1:2b:05:47:91:86:9b: 35:9b:33:7f:02:3e:6b:c5:2f:5b:de:df:6c:39:0c: 81:ba:18:70:0f:30:ac:0d:c4:62:9a:d9:92:a2:11: 61:c3:b9:04:df:b4:e8:9f:ff:7f:2c:74:08:43:3e: 4d:40:0d:2e:30:35:b9:c0:38:84:4f:ec:c2:48:ba: 97:51:80:aa:6c:f3:06:c7:41:7a:09:5e:1d:4c:65: c5:94:f4:b7:27:4f:f5:58:15:36:75:02:60:1f:b4: 9a:85:31:3a:24:7f:5e:76:b3:ba:c4:10:a0:f6:da: f7:3b:d7:58:50:ff:5a:a9:39:4a:1c:96:42:3c:39: 59:f6:03:3b:e9:aa:c8:f3:1b:6b:29:73:c2:0e:91: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:11:96:9B:0D:74:44:1A:10:95:22:74:AC:31:B8:88:B5:DE:BC:0F X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:92:21:d4:68:ea:fd:c7:c2:95:da:10:c4:fc:f3:1f:13:1c: f3:12:6f:43:55:e1:e3:cb:51:43:c0:ed:dd:c9:be:c4:cc:86: da:a0:72:87:5e:0d:a9:01:b2:64:26:ed:48:66:02:69:60:8e: 9d:6c:9f:3a:ad:b0:35:de:69:1f:a0:cf:77:1f:d6:74:c6:76: 0f:9c:3b:bc:04:ca:46:35:6e:b1:22:f9:6a:83:11:a2:5c:ca: 81:28:ff:e9:16:da:fe:28:6e:0a:8d:2b:1d:8a:56:c9:9e:9c: c4:77:f4:98:c3:13:68:dd:c3:87:31:77:33:3d:c1:e9:e6:9a: dc:19:7b:7c:19:aa:a3:ef:57:a9:2e:6c:74:82:35:2d:71:73: ea:7a:35:cb:a6:5c:4f:d1:ed:c6:2b:d9:c4:f1:37:73:3e:29: 5d:03:0e:08:8c:fb:9f:84:45:b9:7b:95:3d:af:a2:9e:60:22: d4:8a:93:cd:4b:71:ba:4d:06:45:46:46:73:f0:c7:1c:d5:0a: 27:df:8d:b4:77:c5:ed:43:21:0f:1e:f3:0c:2f:34:52:98:6e: 3b:1c:c2:09:dd:21:29:c7:a4:a6:9f:f0:6e:fa:70:60:7a:86: e8:ba:74:81:27:c3:0c:a6:6e:cf:67:e4:86:ba:cf:18:33:20: a6:45:90:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjYwNDA0MTk0MzI1WhcNMjYwNDExMTk0MzI1WjAYMRYwFAYD VQQDEw02OWQxNjlkZS04MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyFnFbWYO8Fc20C/86YSHjmyVEgMSLCp0A5QrFYeZLQEShFcUnclPCl51IvQ Pgp63xjsTpv/th4g3eRiYS7qs9H/5xCyPFQKEeYAI4oveCyu1IM71wDJallNmQgc KzowLZGD8CRmBVDfJYoUA6P0EdErBUeRhps1mzN/Aj5rxS9b3t9sOQyBuhhwDzCs DcRimtmSohFhw7kE37Ton/9/LHQIQz5NQA0uMDW5wDiET+zCSLqXUYCqbPMGx0F6 CV4dTGXFlPS3J0/1WBU2dQJgH7SahTE6JH9edrO6xBCg9tr3O9dYUP9aqTlKHJZC PDlZ9gM76arI8xtrKXPCDpEaXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoRlpsN dEQaEJUidKwxuIi13rwPMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZIh1Gjq/cfCldoQxPzzHxMc8xJvQ1Xh48tRQ8Dt3cm+xMyG2qByh14NqQGy ZCbtSGYCaWCOnWyfOq2wNd5pH6DPdx/WdMZ2D5w7vATKRjVusSL5aoMRolzKgSj/ 6Rba/ihuCo0rHYpWyZ6cxHf0mMMTaN3DhzF3Mz3B6eaa3Bl7fBmqo+9XqS5sdII1 LXFz6no1y6ZcT9HtxivZxPE3cz4pXQMOCIz7n4RFuXuVPa+inmAi1IqTzUtxuk0G RUZGc/DHHNUKJ9+NtHfF7UMhDx7zDC80UphuOxzCCd0hKcekpp/wbvpwYHqG6Lp0 gSfDDKZuz2fkhrrPGDMgpkWQBA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:27:07 2026 by rpki-client