$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: 8hkP8o0GmmtbP0L2gCcdSKYyakaXIaBlWpOkxkugtpY= Subject key identifier: 2C:2B:94:A3:DD:A0:19:D8:A7:88:F3:89:5A:23:AE:04:A9:EF:A1:BE Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: C7 Signing time: Wed 29 Apr 2026 07:33:26 +0000 Manifest this update: Wed 29 Apr 2026 07:33:25 +0000 Manifest next update: Wed 06 May 2026 07:33:25 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: wKE7K1jFus8mPJIiratg5PHF4v97rvORRIe67cVOhmQ=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: VS76jVfnUICZ9bJBzzkEK0ZrDmbbMRlLDj2ohqAMUKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Apr 29 07:33:25 2026 GMT Not After : May 6 07:33:25 2026 GMT Subject: CN=69f1b446-a595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c5:a2:da:8c:b0:75:c6:b8:43:90:38:f0:bc: 7d:17:17:ae:e0:c6:cb:52:4d:f0:c1:5d:64:97:33: 79:2d:cb:76:da:ad:e1:b1:a3:a1:86:8f:63:39:a2: 7e:41:ef:b0:64:45:fc:c5:42:be:61:f6:1c:a5:a4: c4:36:70:28:33:fb:ad:56:15:c4:db:4d:1c:35:f5: fd:ee:c9:dc:86:8b:1c:80:f3:14:bf:a9:fa:a3:35: b8:05:b5:c8:ea:56:23:c7:68:25:fc:53:cd:2f:c2: c6:2b:cc:d6:5f:d2:5e:7f:b7:ed:de:b1:c1:3c:ff: 28:32:31:d8:12:0c:14:8a:b4:cf:4a:c4:84:ca:34: f3:d3:c1:ad:72:0e:55:40:88:93:ce:83:15:fe:0b: a0:d8:f3:48:38:5e:d2:b8:a9:2c:6e:cd:e5:5c:8b: df:64:c0:2c:6f:a9:30:38:61:e5:32:3f:c6:f8:67: 6e:b1:bf:8e:e3:f1:48:4e:40:ae:4f:3f:0a:b8:93: 9e:d4:66:27:3b:6a:e1:05:39:36:56:a4:3b:dd:0e: 38:dc:ce:85:6f:d5:84:d2:fa:13:d7:e2:cf:b7:a3: db:27:6f:d0:b6:67:cf:48:35:d5:cc:be:29:78:fa: 83:73:bc:f1:4e:97:40:7a:36:80:fb:96:8a:93:e2: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2B:94:A3:DD:A0:19:D8:A7:88:F3:89:5A:23:AE:04:A9:EF:A1:BE X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:2f:12:dd:8f:ae:7f:c4:69:57:81:1c:ee:e2:ee:1e:7c:24: b6:cc:a8:7f:12:2c:c3:86:6c:97:4a:42:91:f6:10:60:f2:52: 5b:b4:4c:4f:b7:3a:5a:e4:9a:0e:ec:1c:8f:2f:88:eb:65:c0: c5:0f:55:f1:6c:a3:a1:b1:c1:3e:10:dd:dd:a7:f5:c5:31:26: ff:94:15:3c:64:d8:00:06:47:47:1f:88:94:b1:1a:e8:66:60: e4:10:e0:f4:02:9e:54:18:38:0c:6c:ae:4e:ce:b4:4e:f0:a4: a6:41:f6:43:bd:18:21:13:27:ad:71:2b:13:e5:af:b3:92:80: d8:d7:80:c6:74:e4:d8:9e:4b:17:76:4c:14:5f:fb:2c:b7:06: bb:51:ca:4d:04:92:86:0e:8e:9f:be:95:09:eb:aa:75:57:f9: 49:c3:e9:ee:96:ea:85:2b:1f:89:58:04:13:75:cd:60:40:c1: 0a:89:b9:7c:53:43:d3:3c:5e:97:c0:46:9d:1e:f0:ba:61:68: d0:b3:81:2b:1b:e6:dc:38:59:ea:0d:a4:df:c5:39:a8:cf:ad: e7:a6:72:ce:b0:6c:e0:2e:69:cf:d2:3c:e8:4d:0b:39:7f:10: a6:bd:f0:a0:27:d3:e4:a4:19:65:63:cc:ae:a7:38:9b:d9:d5: 3c:2d:7a:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGMjExMTAvBgNVBAUTKDcwRDI2MDFDQjBEMEZBNEY5QzVGMEUwMjg2RDhCNkFG RDkyMzVBMDYwHhcNMjYwNDI5MDczMzI1WhcNMjYwNTA2MDczMzI1WjAYMRYwFAYD VQQDEw02OWYxYjQ0Ni1hNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MWi2oywdca4Q5A48Lx9Fxeu4MbLUk3wwV1klzN5Lct22q3hsaOhho9jOaJ+ Qe+wZEX8xUK+YfYcpaTENnAoM/utVhXE200cNfX97snchoscgPMUv6n6ozW4BbXI 6lYjx2gl/FPNL8LGK8zWX9Jef7ft3rHBPP8oMjHYEgwUirTPSsSEyjTz08Gtcg5V QIiTzoMV/gug2PNIOF7SuKksbs3lXIvfZMAsb6kwOGHlMj/G+Gdusb+O4/FITkCu Tz8KuJOe1GYnO2rhBTk2VqQ73Q443M6Fb9WE0voT1+LPt6PbJ2/QtmfPSDXVzL4p ePqDc7zxTpdAejaA+5aKk+Kh4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwrlKPd oBnYp4jziVojrgSp76G+MB8GA1UdIwQYMBaAFHDSYByw0PpPnF8OAobYtq/ZI1oG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEYyMS84NTE3RkIwODE0 MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1rLWNYdzRDaHRpMnI5a2pX Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOSmdITERRLWstY1h3NENodGkycjlraldnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEYyMS84NTE3RkIwODE0MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1r LWNYdzRDaHRpMnI5a2pXZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApC8S3Y+uf8RpV4Ec7uLuHnwktsyofxIsw4Zsl0pCkfYQYPJSW7RMT7c6WuSa Duwcjy+I62XAxQ9V8WyjobHBPhDd3af1xTEm/5QVPGTYAAZHRx+IlLEa6GZg5BDg 9AKeVBg4DGyuTs60TvCkpkH2Q70YIRMnrXErE+Wvs5KA2NeAxnTk2J5LF3ZMFF/7 LLcGu1HKTQSShg6On76VCeuqdVf5ScPp7pbqhSsfiVgEE3XNYEDBCom5fFND0zxe l8BGnR7wumFo0LOBKxvm3DhZ6g2k38U5qM+t56ZyzrBs4C5pz9I86E0LOX8Qpr3w oCfT5KQZZWPMrqc4m9nVPC16cg== -----END CERTIFICATE-----Generated at Wed Apr 29 10:23:04 2026 by rpki-client