$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: 16oxFwyIRxxi4Bvv7tQXoyqirt+f3vhkt8nQL0/bElU= Subject key identifier: 4F:4D:10:A5:08:2E:15:07:C4:8E:DA:6D:9F:2C:3B:3D:0E:2E:1E:52 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 017C Signing time: Tue 21 Apr 2026 04:28:12 +0000 Manifest this update: Tue 21 Apr 2026 04:28:12 +0000 Manifest next update: Tue 28 Apr 2026 04:28:12 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: yzzevcxrosgLs7gwfhesuyFJCPC61yLS7e/P7lkFjDQ=) 2: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=) 3: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Apr 21 04:28:12 2026 GMT Not After : Apr 28 04:28:12 2026 GMT Subject: CN=69e6fcdc-8a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8a:e2:68:d6:05:8c:3e:a2:75:fb:83:a1:75: 3e:7f:fb:82:70:6f:c3:f1:9f:13:d1:c0:33:95:06: 61:a1:5e:b4:d7:72:88:2b:d4:b0:25:02:0a:da:fd: 32:f2:08:8a:eb:12:ff:0c:a9:f4:68:96:1f:b5:d6: d3:5c:3f:91:fe:dc:69:ad:f3:77:ce:64:25:35:51: b4:42:8a:b0:c8:03:81:c4:7a:c6:58:f5:97:d2:dc: 31:4f:6e:e3:bc:3a:91:b3:3c:b6:a1:27:f4:02:42: 48:ef:ac:1c:0b:48:b2:39:5e:ab:64:3b:60:1a:47: ca:bf:b0:b4:0d:38:a5:2c:56:99:e1:f8:f5:69:a5: 86:98:e8:e6:c8:91:88:ca:ad:13:68:c1:69:a2:15: 84:52:d5:33:c7:83:f4:cc:8b:c6:92:f0:6e:80:6e: c9:c6:68:00:9b:44:98:d5:59:49:ce:72:78:5c:9f: 85:d5:50:76:1e:08:f3:af:69:73:86:bd:a9:11:e7: 79:31:d4:d9:f7:84:fc:28:28:1a:67:df:fd:26:c9: 7a:48:2a:b6:0e:20:89:0c:c4:a6:c7:70:06:9f:40: ca:bd:f1:e5:d9:52:b0:4e:37:5c:e5:2b:44:5a:94: 69:48:bc:7f:56:21:8a:a6:91:5b:89:b1:12:79:1c: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:10:A5:08:2E:15:07:C4:8E:DA:6D:9F:2C:3B:3D:0E:2E:1E:52 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6b:8e:b8:32:e7:fb:3a:a6:15:56:8a:a3:f6:a8:c9:80:8e: 4d:2d:07:a8:bb:5a:28:83:82:e9:b6:f0:5e:68:64:f8:c2:48: ef:20:36:85:bf:ac:95:64:1c:a8:32:5c:2b:12:59:69:8b:fd: 2d:73:62:da:58:d0:14:2f:4d:bf:bb:4b:94:72:8e:e4:a4:b0: 64:6f:6d:a4:d4:ff:cc:64:67:d9:f8:c6:a9:22:3f:b0:71:91: c3:7e:42:2b:5b:93:83:df:06:90:2c:e7:24:43:91:c6:69:8d: 49:b8:7c:de:6e:34:81:bf:72:87:8c:99:47:9f:6c:80:1f:f0: 26:29:12:26:14:42:4f:36:86:c0:12:e4:53:97:75:f9:b9:34: 92:ec:82:ac:35:b1:e4:b4:e7:58:d9:65:89:0d:60:1a:55:47: fc:e2:79:88:ce:e5:45:da:4e:2f:74:3a:06:eb:28:85:89:b4: 48:f8:35:f5:e8:7c:6b:01:42:ab:6e:23:4f:9b:59:81:70:2a: e8:f1:f2:d3:80:27:d7:8b:22:62:42:c3:a9:5a:5f:52:c0:47: 48:15:5b:38:eb:e1:67:ba:06:d2:70:7f:d1:7e:78:f4:51:f2: 3c:e0:66:07:f4:b8:54:99:ec:94:5e:0c:85:a3:7f:7f:10:dc: e4:97:40:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjYwNDIxMDQyODEyWhcNMjYwNDI4MDQyODEyWjAYMRYwFAYD VQQDEw02OWU2ZmNkYy04YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34riaNYFjD6idfuDoXU+f/uCcG/D8Z8T0cAzlQZhoV6013KIK9SwJQIK2v0y 8giK6xL/DKn0aJYftdbTXD+R/txprfN3zmQlNVG0QoqwyAOBxHrGWPWX0twxT27j vDqRszy2oSf0AkJI76wcC0iyOV6rZDtgGkfKv7C0DTilLFaZ4fj1aaWGmOjmyJGI yq0TaMFpohWEUtUzx4P0zIvGkvBugG7JxmgAm0SY1VlJznJ4XJ+F1VB2Hgjzr2lz hr2pEed5MdTZ94T8KCgaZ9/9Jsl6SCq2DiCJDMSmx3AGn0DKvfHl2VKwTjdc5StE WpRpSLx/ViGKppFbibESeRxcWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9NEKUI LhUHxI7abZ8sOz0OLh5SMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm2uOuDLn+zqmFVaKo/aoyYCOTS0HqLtaKIOC6bbwXmhk+MJI7yA2hb+slWQc qDJcKxJZaYv9LXNi2ljQFC9Nv7tLlHKO5KSwZG9tpNT/zGRn2fjGqSI/sHGRw35C K1uTg98GkCznJEORxmmNSbh83m40gb9yh4yZR59sgB/wJikSJhRCTzaGwBLkU5d1 +bk0kuyCrDWx5LTnWNlliQ1gGlVH/OJ5iM7lRdpOL3Q6BusohYm0SPg19eh8awFC q24jT5tZgXAq6PHy04An14siYkLDqVpfUsBHSBVbOOvhZ7oG0nB/0X549FHyPOBm B/S4VJnslF4MhaN/fxDc5JdAzw== -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:36 2026 by rpki-client