$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: a367XEw5wbk51B0tgvI0xPvOecb8Wkpo3mt9ed1o444= Subject key identifier: 06:10:18:72:18:70:2E:5B:25:C3:6B:2C:83:B5:9C:F5:3A:19:C4:AB Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 01D8 Signing time: Wed 15 Apr 2026 03:12:21 +0000 Manifest this update: Wed 15 Apr 2026 03:12:20 +0000 Manifest next update: Wed 22 Apr 2026 03:12:20 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: lo3lsGHjJhih+1pQ7n4CqPUsgicj+VI+jGilCj3+Njc=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Apr 15 03:12:20 2026 GMT Not After : Apr 22 03:12:20 2026 GMT Subject: CN=69df0215-386d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:44:de:80:bb:0e:43:e5:0b:d5:0c:9d:ca: 1c:7f:a6:91:46:e7:5c:50:1f:de:9c:9a:27:83:08: 6e:13:c6:e3:f1:7d:02:73:0d:63:2c:73:15:9e:6d: 26:3e:94:5a:2d:80:48:53:9c:97:ef:a4:3f:7f:6d: bf:d2:13:a3:5e:98:49:3b:fb:a9:00:9f:25:8e:89: a9:3d:38:ac:ae:90:2b:87:cc:b3:58:75:bc:92:9b: 52:da:14:a6:bf:36:bb:10:cb:93:62:87:a1:c0:f6: f6:49:e1:55:e7:49:75:13:e5:0f:00:60:9e:ad:64: ca:e1:1f:67:ab:ad:22:96:d4:5d:f7:90:59:e9:05: 38:e8:5c:75:42:bf:2c:4f:06:08:ad:2b:ba:a2:43: 76:e4:de:94:48:26:4e:f6:ae:59:05:c1:a1:25:bf: 95:4b:0e:49:f0:7d:aa:d4:e8:57:c2:9d:63:8b:5b: 28:4a:34:b7:9a:c7:99:ee:52:f4:f5:69:b9:f2:19: bc:a3:15:a7:fe:d3:a3:8d:c2:db:22:d3:32:b6:5f: 55:97:0e:8d:02:fc:5f:7b:33:cc:99:34:16:24:a9: 77:36:10:fc:c8:b7:dd:7b:cd:89:31:9b:50:1b:36: f1:db:89:83:96:bd:71:35:73:b1:8d:f3:c0:df:04: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:10:18:72:18:70:2E:5B:25:C3:6B:2C:83:B5:9C:F5:3A:19:C4:AB X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:58:8a:33:2d:bf:f8:a7:82:9c:a8:b3:72:ad:5b:77:f2:ae: 27:09:c3:7c:b5:a2:f3:f5:73:0f:50:f8:da:db:b8:2f:8f:b3: de:6d:ff:9c:71:57:97:c3:db:bb:8b:00:e5:d7:9c:8b:e0:a3: 04:90:13:62:e7:7b:81:5d:e6:25:29:7b:e2:a5:31:11:d4:1f: 22:a1:f0:6c:21:90:39:83:20:c0:18:a6:bf:c3:87:87:20:57: b8:99:46:71:cb:a4:e5:c6:df:db:47:43:f5:db:f5:26:2b:9f: f8:5e:56:c5:89:ff:89:5a:50:33:bb:c2:cf:76:a6:f3:e5:71: e9:b1:16:e5:f9:21:fa:9c:ed:ad:b0:56:9d:f8:00:63:7a:c6: 59:8c:eb:5d:7e:83:12:40:65:61:c9:37:3f:37:8d:51:87:4b: 54:47:4c:7e:01:d0:c5:92:49:fb:80:d2:c4:cc:f3:d7:e7:18: 29:02:e9:a2:dc:f8:1c:02:d4:39:5d:84:94:d5:db:b7:11:3f: c9:a3:ee:d8:bc:ac:ab:f8:29:b6:0e:fc:73:c6:44:17:6c:28: 84:05:78:8e:67:14:92:5a:91:d7:78:4d:61:63:2c:9a:57:6e: 84:64:62:b9:89:db:5c:e5:56:45:0b:4d:42:8e:d5:14:1c:ac: 38:6a:70:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwNDE1MDMxMjIwWhcNMjYwNDIyMDMxMjIwWjAYMRYwFAYD VQQDEw02OWRmMDIxNS0zODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgdE3oC7DkPlC9UMncocf6aRRudcUB/enJongwhuE8bj8X0Ccw1jLHMVnm0m PpRaLYBIU5yX76Q/f22/0hOjXphJO/upAJ8ljompPTisrpArh8yzWHW8kptS2hSm vza7EMuTYoehwPb2SeFV50l1E+UPAGCerWTK4R9nq60iltRd95BZ6QU46Fx1Qr8s TwYIrSu6okN25N6USCZO9q5ZBcGhJb+VSw5J8H2q1OhXwp1ji1soSjS3mseZ7lL0 9Wm58hm8oxWn/tOjjcLbItMytl9Vlw6NAvxfezPMmTQWJKl3NhD8yLfde82JMZtQ Gzbx24mDlr1xNXOxjfPA3wQOyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYQGHIY cC5bJcNrLIO1nPU6GcSrMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfliKMy2/+KeCnKizcq1bd/KuJwnDfLWi8/VzD1D42tu4L4+z3m3/nHFXl8Pb u4sA5deci+CjBJATYud7gV3mJSl74qUxEdQfIqHwbCGQOYMgwBimv8OHhyBXuJlG ccuk5cbf20dD9dv1Jiuf+F5WxYn/iVpQM7vCz3am8+Vx6bEW5fkh+pztrbBWnfgA Y3rGWYzrXX6DEkBlYck3PzeNUYdLVEdMfgHQxZJJ+4DSxMzz1+cYKQLpotz4HALU OV2ElNXbtxE/yaPu2Lysq/gptg78c8ZEF2wohAV4jmcUklqR13hNYWMsmlduhGRi uYnbXOVWRQtNQo7VFBysOGpwkQ== -----END CERTIFICATE-----Generated at Thu Apr 16 06:52:26 2026 by rpki-client