$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: nWUEt4pPrgRbYmnXiuIPC2TBDYmMRDP5scDFk2KvHFo= Subject key identifier: 9E:18:EE:55:31:6E:AD:47:D7:6B:B4:02:A7:77:90:22:2D:42:9A:88 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 0820 Signing time: Mon 20 Apr 2026 15:53:35 +0000 Manifest this update: Mon 20 Apr 2026 15:53:35 +0000 Manifest next update: Mon 27 Apr 2026 15:53:35 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: WzBmsUmPhpQZDF9RcBlL0J2GQLtsEO6Kkxuih3pPoos=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: MdKj745wIJAm1a/+fD8XVUD4Xm85NkWf5HLxKsTPL9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 15:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Apr 20 15:53:35 2026 GMT Not After : Apr 27 15:53:35 2026 GMT Subject: CN=69e64bff-3ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:29:ab:d7:35:80:55:5a:7a:46:fe:1d:d7: e2:45:b5:3f:09:02:24:52:e5:b0:43:f9:fb:dc:68: 99:cc:34:80:9e:26:d1:32:84:79:5b:ad:28:b9:22: 9a:e3:84:38:bc:e4:94:87:10:48:74:0a:b4:9f:a3: 57:25:55:e6:7b:54:7b:c1:82:54:ed:ad:d0:8d:f0: 4d:bb:17:05:05:67:18:18:a7:85:62:92:0a:88:23: b5:4e:ff:1c:bd:3a:63:22:94:1d:25:e8:29:7c:09: fa:22:10:ba:ca:21:a7:dd:b9:32:58:96:16:f7:f6: 9b:a4:45:24:bf:a1:c0:08:0f:4c:0b:6b:52:e9:86: 48:89:b8:88:55:ac:c4:39:c8:61:b5:2b:31:20:15: b4:e8:23:3f:ad:41:17:d2:2f:b9:5e:41:27:12:89: fb:de:f5:0d:fc:9f:e6:b0:14:5e:a6:d3:2b:7a:eb: cb:b9:d8:00:01:cc:84:b2:69:9b:0d:f2:fe:e5:60: f8:f6:04:63:76:28:dc:25:c4:19:1d:94:64:7c:e6: 15:76:02:8f:b1:28:d3:bc:62:ef:56:6a:fb:ee:d2: 66:4f:e8:de:bb:71:4d:be:7c:4f:ab:59:68:77:eb: d4:b9:5b:23:7c:49:cf:c0:00:44:0b:ed:01:5b:31: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:EE:55:31:6E:AD:47:D7:6B:B4:02:A7:77:90:22:2D:42:9A:88 X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dd:4e:5b:e6:5b:21:3e:fb:84:20:9a:ee:20:cb:43:bc:40: 63:eb:9e:2d:ff:55:08:37:b1:43:00:fa:b4:bb:74:f1:5d:48: 6e:96:f1:21:56:c0:40:75:2d:7a:6d:df:05:2f:75:64:65:08: 7c:4f:2c:61:bf:a5:e7:34:7a:57:67:5f:06:01:42:71:25:e6: f8:a4:be:5e:8e:70:50:49:45:c6:aa:12:f1:03:96:a6:36:76: 10:da:a0:ce:bd:c9:cb:e8:e9:2a:30:d3:da:54:83:c6:f3:36: 36:ed:ec:46:ba:c2:f7:5d:34:db:34:26:d6:4c:b3:7d:08:b8: 72:bd:32:9b:27:2d:93:d6:d1:ee:f0:0a:5f:54:ce:8c:73:aa: d1:81:15:2a:6c:ff:40:bf:4e:f2:25:60:87:d7:a0:fc:07:c8: c4:c5:93:46:f8:f2:62:04:47:0b:74:13:52:91:a9:b6:02:8e: ac:cc:8f:3b:69:c3:22:a6:0e:e0:a2:e2:32:a7:3e:46:b5:2d: 48:11:e0:10:8e:42:24:54:22:79:57:17:74:6d:42:12:db:5e: 59:84:f8:5d:b1:ad:b0:dd:85:58:60:bf:f3:31:0e:79:45:54: 00:c3:a4:62:66:d9:1b:ba:a9:fe:95:ef:89:55:98:f3:f5:41: 57:bd:33:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjYwNDIwMTU1MzM1WhcNMjYwNDI3MTU1MzM1WjAYMRYwFAYD VQQDEw02OWU2NGJmZi0zZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR4pq9c1gFVaekb+HdfiRbU/CQIkUuWwQ/n73GiZzDSAnibRMoR5W60ouSKa 44Q4vOSUhxBIdAq0n6NXJVXme1R7wYJU7a3QjfBNuxcFBWcYGKeFYpIKiCO1Tv8c vTpjIpQdJegpfAn6IhC6yiGn3bkyWJYW9/abpEUkv6HACA9MC2tS6YZIibiIVazE OchhtSsxIBW06CM/rUEX0i+5XkEnEon73vUN/J/msBReptMreuvLudgAAcyEsmmb DfL+5WD49gRjdijcJcQZHZRkfOYVdgKPsSjTvGLvVmr77tJmT+jeu3FNvnxPq1lo d+vUuVsjfEnPwABEC+0BWzFSnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4Y7lUx bq1H12u0Aqd3kCItQpqIMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACt1OW+ZbIT77hCCa7iDLQ7xAY+ueLf9VCDexQwD6tLt08V1IbpbxIVbAQHUt em3fBS91ZGUIfE8sYb+l5zR6V2dfBgFCcSXm+KS+Xo5wUElFxqoS8QOWpjZ2ENqg zr3Jy+jpKjDT2lSDxvM2Nu3sRrrC91002zQm1kyzfQi4cr0ymyctk9bR7vAKX1TO jHOq0YEVKmz/QL9O8iVgh9eg/AfIxMWTRvjyYgRHC3QTUpGptgKOrMyPO2nDIqYO 4KLiMqc+RrUtSBHgEI5CJFQieVcXdG1CEtteWYT4XbGtsN2FWGC/8zEOeUVUAMOk YmbZG7qp/pXviVWY8/VBV70zHw== -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:06 2026 by rpki-client