$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: BZxhnXireRRFZzpMGqenXQ8Nlxu3XoYiRvn6/rtnzD0= Subject key identifier: CA:29:DA:97:C9:FE:BE:A9:B9:42:0C:D7:F5:DD:BA:B2:67:57:44:D9 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 0591 Signing time: Sat 04 Apr 2026 23:00:28 +0000 Manifest this update: Sat 04 Apr 2026 23:00:28 +0000 Manifest next update: Sat 11 Apr 2026 23:00:28 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: ZqZViq+DEn7awZhPvelF6op6uurJFdZpAjY1UmiyMy8=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Apr 4 23:00:28 2026 GMT Not After : Apr 11 23:00:28 2026 GMT Subject: CN=69d1980c-712f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:c8:56:bb:ab:5b:b0:95:da:55:a4:a6:74: 4f:9c:31:f9:3f:3f:48:1b:e8:6f:95:ae:86:da:fc: c3:f6:d9:1d:3a:3a:17:9b:fe:e7:50:0d:9e:cf:58: 3d:f6:ff:7e:d6:1f:85:ad:ef:3e:b8:d5:aa:44:b2: 4d:56:97:f4:22:51:e6:ae:8f:fd:2a:c7:9b:13:7e: 75:19:4e:b5:ef:bf:96:e0:94:50:0e:f0:34:53:a3: 26:a9:26:7b:22:d6:8d:46:24:cf:d8:f5:b0:a3:fb: 2d:9a:42:82:21:40:a2:de:f0:43:2c:d2:8d:ba:a6: b8:2f:d9:15:cb:4b:03:84:a3:e0:a6:ff:7e:d7:2e: a1:48:e4:5b:1b:4c:77:e0:24:69:88:00:19:02:68: e7:6b:ef:63:e2:7b:2a:a6:7a:9f:25:25:a8:00:36: 7a:08:a1:42:9f:43:8a:04:04:2a:a5:5c:ae:b7:53: 23:27:8c:11:b5:da:c9:41:56:2a:4a:be:50:20:df: d3:9c:25:b6:68:a7:a6:b8:77:0a:16:c2:63:d2:fb: 9e:1a:28:f8:4d:ac:f7:4a:7c:3a:07:4b:bf:06:dd: 46:b2:7b:c8:61:ef:12:7b:ea:98:25:a6:b1:29:27: 1f:ad:cc:8d:3f:f4:29:00:0f:8b:bf:9e:dc:ef:5c: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:DA:97:C9:FE:BE:A9:B9:42:0C:D7:F5:DD:BA:B2:67:57:44:D9 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:73:a8:e0:22:b3:54:38:a7:fa:ea:9c:c5:ac:9f:02:fc:85: b7:88:71:94:32:1e:fd:ca:f7:8f:db:7f:5f:ca:a9:49:bb:bd: 3f:e8:ce:ba:75:bf:e1:96:eb:25:65:8a:53:43:3d:8e:04:ec: a1:49:48:c8:e1:34:9e:c6:c7:59:a6:10:0a:0d:d3:78:55:e8: e0:45:c9:24:e7:e8:fa:14:c8:da:d3:18:d0:00:73:70:9a:79: 4c:5f:de:f3:76:dc:1e:ef:6b:a9:17:14:55:94:ed:e5:c1:e2: af:0d:0d:75:16:47:f7:42:d2:9d:ee:80:9c:55:31:c6:58:90: c4:b8:e0:6b:32:7c:8c:e2:e7:0d:9f:29:8c:f2:ff:ae:96:4d: 7f:51:04:71:9b:53:56:8f:b9:59:fc:f0:49:da:bf:2d:ad:37: 6c:78:f8:1c:c2:99:a9:37:a3:0c:1c:f4:bc:7c:ca:32:d5:95: 0f:1e:e4:b0:6d:a2:a9:1c:af:2d:a9:d9:1f:6e:94:0a:8a:1b: 8d:9c:35:bf:16:fd:f9:1e:38:92:ce:ab:e4:5f:51:34:61:cd: 5c:6b:89:d4:3f:32:5c:a3:c7:59:0d:6e:b6:1e:d1:89:55:a2: a4:ce:db:6e:99:f5:21:25:55:96:95:08:9b:62:40:58:50:a0: bf:6e:5a:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjYwNDA0MjMwMDI4WhcNMjYwNDExMjMwMDI4WjAYMRYwFAYD VQQDEw02OWQxOTgwYy03MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CnIVrurW7CV2lWkpnRPnDH5Pz9IG+hvla6G2vzD9tkdOjoXm/7nUA2ez1g9 9v9+1h+Fre8+uNWqRLJNVpf0IlHmro/9KsebE351GU6177+W4JRQDvA0U6MmqSZ7 ItaNRiTP2PWwo/stmkKCIUCi3vBDLNKNuqa4L9kVy0sDhKPgpv9+1y6hSORbG0x3 4CRpiAAZAmjna+9j4nsqpnqfJSWoADZ6CKFCn0OKBAQqpVyut1MjJ4wRtdrJQVYq Sr5QIN/TnCW2aKemuHcKFsJj0vueGij4Taz3Snw6B0u/Bt1GsnvIYe8Se+qYJaax KScfrcyNP/QpAA+Lv57c71wA0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMop2pfJ /r6puUIM1/XdurJnV0TZMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn3Oo4CKzVDin+uqcxayfAvyFt4hxlDIe/cr3j9t/X8qpSbu9P+jOunW/4Zbr JWWKU0M9jgTsoUlIyOE0nsbHWaYQCg3TeFXo4EXJJOfo+hTI2tMY0ABzcJp5TF/e 83bcHu9rqRcUVZTt5cHirw0NdRZH90LSne6AnFUxxliQxLjgazJ8jOLnDZ8pjPL/ rpZNf1EEcZtTVo+5WfzwSdq/La03bHj4HMKZqTejDBz0vHzKMtWVDx7ksG2iqRyv LanZH26UCoobjZw1vxb9+R44ks6r5F9RNGHNXGuJ1D8yXKPHWQ1uth7RiVWipM7b bpn1ISVVlpUIm2JAWFCgv25agg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:14 2026 by rpki-client