$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: KGABlKKxDB5yU2qPseN8ZFTA1j1U73dfZzJM7anu+eI= Subject key identifier: 28:36:C7:EA:D0:4D:08:C0:D9:2F:47:35:27:83:A1:A1:89:65:6E:CD Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 08D9 Signing time: Sun 26 Apr 2026 20:17:31 +0000 Manifest this update: Sun 26 Apr 2026 20:17:31 +0000 Manifest next update: Sun 03 May 2026 20:17:31 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: 4K78N2CgBknZ146UTgwes6OisEg78+JGi+jOhXgHEB0=) 2: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=) 3: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=) 4: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Apr 26 20:17:31 2026 GMT Not After : May 3 20:17:31 2026 GMT Subject: CN=69ee72db-94a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:a3:fa:f3:29:3a:a3:07:e4:ab:29:6d:70: 7a:7c:96:4a:47:50:4d:cb:68:b5:5b:79:cc:0e:03: 22:e7:7c:1c:2e:bd:68:d4:c3:a1:a7:b1:be:5e:03: a0:f5:ad:1b:f6:3f:82:a0:28:9a:2a:2e:3a:ef:a5: fe:74:9b:40:47:69:0a:87:d7:5b:7c:e7:6d:ca:07: 7a:72:1d:55:85:5f:80:e6:c4:2d:36:bb:ae:5b:ac: 5c:8b:53:08:a6:34:99:ab:07:fe:61:e1:0e:0c:57: c8:46:8f:0f:d4:58:9b:3c:2e:9b:ca:88:24:81:f2: bc:60:1b:7f:66:88:c6:d5:69:56:71:87:29:d2:96: 4b:03:9f:b4:d3:b7:72:7c:6b:98:19:a7:26:32:d5: 27:62:1a:a1:e3:0d:8a:f6:1d:f5:ed:98:fa:7d:24: fa:29:84:be:c5:77:95:97:55:75:f4:a0:a3:c2:a6: 11:a9:11:09:80:43:68:81:2f:63:82:04:d0:4e:2d: ac:16:c9:fc:d2:3e:01:d0:d3:98:de:76:91:eb:68: 76:af:2a:87:7a:23:52:0d:5b:75:8c:8d:a3:3d:4c: 1c:a4:8c:f7:42:14:c0:40:80:ce:45:6e:db:8c:f8: f4:93:c9:37:90:4a:bb:96:9a:01:1d:af:be:53:b5: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:C7:EA:D0:4D:08:C0:D9:2F:47:35:27:83:A1:A1:89:65:6E:CD X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:12:dd:6c:5b:3b:5a:07:56:e2:d5:16:9a:07:0c:28:dd:0d: ee:de:cc:c2:14:2c:da:ea:9b:90:bf:3f:49:b7:78:03:9b:c8: 19:4b:cc:8e:2e:45:2a:90:46:11:57:c7:8c:b6:ae:20:5b:c6: 71:d6:f1:40:2c:07:a3:18:a3:20:35:4e:a3:3f:34:bf:66:fe: 0f:44:80:fa:57:57:9b:27:ab:dc:bf:94:ad:51:0e:71:82:c0: 8d:9c:d2:64:35:8e:f8:73:2a:45:c0:7a:4c:30:c4:b8:4d:3c: 9b:9f:d9:cc:08:bd:01:c5:69:69:00:63:06:d4:24:43:90:09: 56:4c:6b:39:f7:e6:1a:cc:8e:5f:63:51:7c:57:a7:bf:5e:81: c5:85:ca:21:81:37:73:e5:d7:4c:20:c7:ef:e9:65:7b:2b:9f: 7d:e5:b8:a3:f4:22:67:19:93:d3:6c:2a:78:a7:e2:9e:e7:e9: 05:5a:b2:e9:5b:98:4a:b0:1d:2a:75:3c:a5:d4:9d:c4:20:60: b8:2a:a2:ab:f2:e2:f2:de:55:a4:15:77:95:6e:ae:d9:26:3f: 1e:21:98:b9:53:b6:6b:71:04:c0:ff:6a:d4:17:82:3e:ba:3b: 8f:d6:2a:d8:2e:62:ed:8e:09:90:02:b3:db:72:eb:60:3e:b2: c5:e8:e9:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjYwNDI2MjAxNzMxWhcNMjYwNTAzMjAxNzMxWjAYMRYwFAYD VQQDEw02OWVlNzJkYi05NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCGj+vMpOqMH5KspbXB6fJZKR1BNy2i1W3nMDgMi53wcLr1o1MOhp7G+XgOg 9a0b9j+CoCiaKi4676X+dJtAR2kKh9dbfOdtygd6ch1VhV+A5sQtNruuW6xci1MI pjSZqwf+YeEODFfIRo8P1FibPC6byogkgfK8YBt/ZojG1WlWcYcp0pZLA5+007dy fGuYGacmMtUnYhqh4w2K9h317Zj6fST6KYS+xXeVl1V19KCjwqYRqREJgENogS9j ggTQTi2sFsn80j4B0NOY3naR62h2ryqHeiNSDVt1jI2jPUwcpIz3QhTAQIDORW7b jPj0k8k3kEq7lpoBHa++U7W4eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCg2x+rQ TQjA2S9HNSeDoaGJZW7NMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwRLdbFs7WgdW4tUWmgcMKN0N7t7MwhQs2uqbkL8/Sbd4A5vIGUvMji5FKpBG EVfHjLauIFvGcdbxQCwHoxijIDVOoz80v2b+D0SA+ldXmyer3L+UrVEOcYLAjZzS ZDWO+HMqRcB6TDDEuE08m5/ZzAi9AcVpaQBjBtQkQ5AJVkxrOffmGsyOX2NRfFen v16BxYXKIYE3c+XXTCDH7+lleyuffeW4o/QiZxmT02wqeKfinufpBVqy6VuYSrAd KnU8pdSdxCBguCqiq/Li8t5VpBV3lW6u2SY/HiGYuVO2a3EEwP9q1BeCPro7j9Yq 2C5i7Y4JkAKz23LrYD6yxejpLQ== -----END CERTIFICATE-----Generated at Mon Apr 27 14:54:25 2026 by rpki-client