$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: YP8lglWOuUa/ktLcQJNz/5tDkDKfMdhQ+a/uG7f0z60= Subject key identifier: 8C:06:34:43:32:17:A7:1D:63:92:36:9A:74:BB:36:88:48:81:09:71 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 01BA Signing time: Sun 05 Apr 2026 03:26:29 +0000 Manifest this update: Sun 05 Apr 2026 03:26:28 +0000 Manifest next update: Sun 12 Apr 2026 03:26:28 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: vGS6RuMLMEq3EBeA7g9OAAhRw9OOpG8TB8mgEvWfAdg=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Apr 5 03:26:28 2026 GMT Not After : Apr 12 03:26:28 2026 GMT Subject: CN=69d1d665-7ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:4f:1a:ab:4b:cd:80:b7:11:8b:9e:8e:b4: c5:2f:46:3f:b6:40:6c:5e:fe:8d:82:1d:a1:09:aa: 3a:93:af:be:cd:35:16:77:6c:0d:bc:55:a5:a5:00: 00:cd:af:06:64:ff:da:3c:2d:3b:4c:a8:ee:d2:84: 9a:0b:61:0d:8a:fd:db:5e:2a:d1:e2:b1:41:d3:15: 64:70:5a:80:73:05:0e:e6:a6:0a:54:f3:27:0f:c1: ac:25:e0:08:d4:ac:37:4a:80:b8:8d:6c:87:13:ca: 12:b9:53:f0:a8:e5:92:b1:5b:64:15:c8:6d:b3:8a: 12:89:74:4f:63:cf:08:f3:bf:bf:66:3b:e7:78:47: 0f:86:5f:67:dc:38:91:03:0f:46:34:8c:bb:ac:d6: ed:f9:9f:29:2e:cb:86:4d:e1:75:1a:0f:90:2d:e6: f6:ea:fe:5b:41:fc:20:9d:e2:d0:fc:d2:13:04:a6: 95:64:70:79:86:56:fe:82:da:2b:a6:04:a1:13:93: 0d:26:16:35:d3:9f:47:9c:4d:7f:7d:5e:85:eb:84: d9:52:70:f3:c9:b8:10:bf:15:e8:88:3d:39:b5:19: 24:63:66:fb:fe:b0:53:0b:6c:c9:95:29:c3:ce:17: 17:03:82:56:cf:39:f3:b0:d9:65:8f:1a:35:d8:8d: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:34:43:32:17:A7:1D:63:92:36:9A:74:BB:36:88:48:81:09:71 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ce:c4:02:db:a6:c8:36:0c:ed:81:6a:8f:7d:61:14:4c:d8: 49:c5:d0:12:20:fb:06:f2:be:19:53:41:ef:18:32:e0:bb:de: da:e0:9b:aa:ab:56:8b:cc:59:54:f3:93:18:d7:b5:7f:70:0c: e8:63:86:10:9a:4e:8c:c5:cb:f8:ed:e7:32:0a:04:84:e1:7b: 69:12:71:d3:7a:af:8a:38:51:5b:e9:48:d8:d1:a7:d6:ec:3d: 89:79:b2:12:fb:3e:f6:db:fc:74:b7:82:41:58:87:2e:6f:9c: f1:44:d5:4e:36:a2:9e:6c:82:c1:66:ea:7b:12:22:8f:9e:14: 76:b2:46:f3:b3:96:9f:97:2f:fa:95:06:9c:28:a8:e2:98:2f: 14:c3:39:9a:34:0d:64:2d:fe:15:13:2f:9d:89:a8:2e:a2:dd: e9:54:c8:26:44:a7:91:cf:60:00:11:48:b1:c8:99:ac:cc:b3: 61:af:64:26:8b:58:f5:c6:a1:ed:59:41:52:cb:66:e0:a9:36: 94:73:f2:e7:bd:88:0c:5b:c5:8b:76:06:78:c1:db:ca:fd:9e: ac:01:99:1b:3d:a0:71:9f:58:bc:fa:21:22:a0:d3:90:28:87: 15:43:6a:d3:fa:49:83:06:e4:10:20:40:71:28:7d:ef:37:b8: 31:ed:b9:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjYwNDA1MDMyNjI4WhcNMjYwNDEyMDMyNjI4WjAYMRYwFAYD VQQDEw02OWQxZDY2NS03YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4dPGqtLzYC3EYuejrTFL0Y/tkBsXv6Ngh2hCao6k6++zTUWd2wNvFWlpQAA za8GZP/aPC07TKju0oSaC2ENiv3bXirR4rFB0xVkcFqAcwUO5qYKVPMnD8GsJeAI 1Kw3SoC4jWyHE8oSuVPwqOWSsVtkFchts4oSiXRPY88I87+/ZjvneEcPhl9n3DiR Aw9GNIy7rNbt+Z8pLsuGTeF1Gg+QLeb26v5bQfwgneLQ/NITBKaVZHB5hlb+gtor pgShE5MNJhY1059HnE1/fV6F64TZUnDzybgQvxXoiD05tRkkY2b7/rBTC2zJlSnD zhcXA4JWzznzsNlljxo12I0HUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwGNEMy F6cdY5I2mnS7NohIgQlxMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJM7EAtumyDYM7YFqj31hFEzYScXQEiD7BvK+GVNB7xgy4Lve2uCbqqtWi8xZ VPOTGNe1f3AM6GOGEJpOjMXL+O3nMgoEhOF7aRJx03qvijhRW+lI2NGn1uw9iXmy Evs+9tv8dLeCQViHLm+c8UTVTjainmyCwWbqexIij54UdrJG87OWn5cv+pUGnCio 4pgvFMM5mjQNZC3+FRMvnYmoLqLd6VTIJkSnkc9gABFIsciZrMyzYa9kJotY9cah 7VlBUstm4Kk2lHPy572IDFvFi3YGeMHbyv2erAGZGz2gcZ9YvPohIqDTkCiHFUNq 0/pJgwbkECBAcSh97ze4Me25QQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:12 2026 by rpki-client