$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: v85iiO7EepvbrEOjNNqwWi5UbqBpvWz5g9waePYOwzI= Subject key identifier: 24:8E:1C:04:4A:9B:01:7C:6A:92:AE:2C:C5:46:EC:A8:53:FC:F4:58 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0427 Signing time: Mon 27 Apr 2026 00:25:30 +0000 Manifest this update: Mon 27 Apr 2026 00:25:29 +0000 Manifest next update: Mon 04 May 2026 00:25:29 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: oatTIZkyGx08X5Ch/m1y/PxMr94fmuzrSTCuQHF3cu0=) 2: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: XKoeDmYjE0yysdP5l673w8or1oKAp76jZNEv1XZ67fc=) 3: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: UcvM8IWUVo62fNbVlItsUgMGb0u4yppk8S9qIfLe7pI=) 4: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: kHDQejmqjPobOzP4RpQqwvEFOqclUXhG9PAka+bN9iQ=) 5: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: wHIEc0JT3olfj86i79xTv/WCaO/VfEKTQ7Om7UWFzE4=) 6: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: c8UFaho10sHWq4V66Fx+BVNv/vFU1ajRLCGfXC+In2c=) 7: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: bujDqUQBYDEOHRylquQ9lrhwkzTG5J4D6+3AWwTVyYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 00:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Apr 27 00:25:29 2026 GMT Not After : May 4 00:25:29 2026 GMT Subject: CN=69eeacfa-ac07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:28:c9:8c:ac:4c:82:32:6e:93:a5:1b:96: 9d:18:b3:b3:b2:e5:af:7b:9a:1b:0e:17:f1:db:1c: 13:ef:9d:c7:1d:eb:14:9c:b1:34:82:2b:5a:60:8e: de:4a:8f:53:fa:a1:8d:ef:54:26:23:a2:50:0e:56: 02:de:be:ce:4a:df:0a:c5:61:da:9c:40:1d:af:f4: 8e:e5:ec:28:8a:e0:0f:3b:d8:e9:8b:2e:f0:b2:c7: 8e:da:fc:ee:11:3f:9b:56:0f:9f:27:7d:47:bd:02: 57:ca:9f:8c:81:4c:2a:20:08:06:60:eb:7b:67:9e: 76:f3:12:4d:10:01:62:cf:70:f4:fb:c9:d5:2a:60: 2e:ca:45:d2:38:34:37:d9:c6:2c:85:19:a8:23:b9: fb:e4:94:42:3f:2f:d6:e2:e0:36:5e:8b:98:d0:73: 15:c2:5b:68:b7:98:7c:bb:eb:fc:b8:da:39:17:a0: 4d:e0:d5:fd:0e:54:56:c6:21:b8:1f:4f:a5:c6:01: 7d:1c:27:fe:81:82:ea:47:19:e8:23:6b:45:9a:57: 06:57:40:28:0e:e5:85:c2:9e:2a:50:1c:e4:90:bd: 64:22:91:4f:26:31:9e:cd:e7:0c:ad:7e:74:e8:5a: f0:67:27:da:7e:6d:6b:fe:65:3c:00:3f:52:39:6f: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:1C:04:4A:9B:01:7C:6A:92:AE:2C:C5:46:EC:A8:53:FC:F4:58 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:60:68:eb:af:3c:cb:ab:40:a7:ad:4f:c4:30:47:d8:3d:e7: 28:f9:82:40:39:ab:61:18:3b:e0:5d:43:f2:45:b8:b3:50:86: 2f:3b:3c:01:a7:81:7a:19:0e:24:9d:ad:26:8d:46:16:91:ad: e0:cf:9a:73:25:c8:57:86:7b:4a:fb:ff:00:93:2f:56:32:76: 7b:92:1c:54:e6:b1:bc:9e:a7:7a:fa:9d:c3:4d:3e:ac:d8:80: 1c:d5:47:ab:d0:65:0d:f9:de:4c:9e:01:cd:3b:a0:78:c3:98: a3:96:b9:4a:2c:78:9e:ff:e5:d8:9d:f3:80:5e:c4:e2:91:a4: 21:3e:de:16:a2:7d:d4:6d:a2:42:7c:d1:c5:34:2a:ea:09:db: 24:4d:9c:ce:d4:47:19:99:04:8e:dd:9d:d6:61:ab:aa:c5:e2: e6:8d:d3:84:5d:80:71:15:8f:a7:88:ea:d3:50:13:92:20:3f: 27:1d:36:ea:d7:7b:ca:a4:6e:e9:be:07:2e:9a:98:11:25:19: 4c:a7:8c:4e:d7:e1:25:d3:82:2e:ec:1b:26:9a:1c:ef:88:80: b2:18:a9:99:1f:4c:ef:47:23:34:7e:49:76:0d:66:54:34:05: e1:81:cf:b6:c6:d8:7d:89:f7:59:8d:8f:44:c3:f6:d8:9b:bd: 70:80:97:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwNDI3MDAyNTI5WhcNMjYwNTA0MDAyNTI5WjAYMRYwFAYD VQQDEw02OWVlYWNmYS1hYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlT8oyYysTIIybpOlG5adGLOzsuWve5obDhfx2xwT753HHesUnLE0gitaYI7e So9T+qGN71QmI6JQDlYC3r7OSt8KxWHanEAdr/SO5ewoiuAPO9jpiy7wsseO2vzu ET+bVg+fJ31HvQJXyp+MgUwqIAgGYOt7Z5528xJNEAFiz3D0+8nVKmAuykXSODQ3 2cYshRmoI7n75JRCPy/W4uA2XouY0HMVwltot5h8u+v8uNo5F6BN4NX9DlRWxiG4 H0+lxgF9HCf+gYLqRxnoI2tFmlcGV0AoDuWFwp4qUBzkkL1kIpFPJjGezecMrX50 6FrwZyfafm1r/mU8AD9SOW9ngwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSOHARK mwF8apKuLMVG7KhT/PRYMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaGBo6688y6tAp61PxDBH2D3nKPmCQDmrYRg74F1D8kW4s1CGLzs8AaeBehkO JJ2tJo1GFpGt4M+acyXIV4Z7Svv/AJMvVjJ2e5IcVOaxvJ6nevqdw00+rNiAHNVH q9BlDfneTJ4BzTugeMOYo5a5Six4nv/l2J3zgF7E4pGkIT7eFqJ91G2iQnzRxTQq 6gnbJE2cztRHGZkEjt2d1mGrqsXi5o3ThF2AcRWPp4jq01ATkiA/Jx026td7yqRu 6b4HLpqYESUZTKeMTtfhJdOCLuwbJpoc74iAshipmR9M70cjNH5Jdg1mVDQF4YHP tsbYfYn3WY2PRMP22Ju9cICX7w== -----END CERTIFICATE-----Generated at Mon Apr 27 21:05:41 2026 by rpki-client