$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: K+NT2wgxgiDe8NeXKBdJBJaNJgZo+Dt5nthhnM++SQc= Subject key identifier: 51:B9:F0:2C:29:6E:26:03:6F:40:16:FB:B8:FA:3C:43:DB:2A:32:E0 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 0196 Signing time: Sun 05 Apr 2026 03:50:18 +0000 Manifest this update: Sun 05 Apr 2026 03:50:18 +0000 Manifest next update: Sun 12 Apr 2026 03:50:18 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: U8t/g42RES3cP6HSUJz5akXLY/usSB74QBZrWDxLxuU=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Apr 5 03:50:18 2026 GMT Not After : Apr 12 03:50:18 2026 GMT Subject: CN=69d1dbfa-2dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:67:e3:7d:e6:c1:3c:2a:1d:59:c1:72:c8: eb:32:11:0c:af:25:92:29:bf:1c:db:92:db:ef:4a: 51:53:d9:02:f8:2a:bd:6b:08:26:c3:95:32:e1:41: c8:f0:bb:d4:a3:8b:f4:08:98:6c:18:24:ba:21:0f: 2b:de:15:9f:0f:b7:82:aa:bb:a0:7c:98:9e:43:60: e1:2c:bb:f1:e6:93:63:77:65:5a:70:fc:94:61:c9: 61:ce:6d:7a:a3:a7:61:17:b8:b8:92:fe:1b:3c:d9: f6:fe:58:92:27:5d:4e:00:e4:2a:5a:2c:d3:f2:dd: b3:9e:e6:91:3d:8a:8f:4e:e9:38:c7:ee:b2:f3:7d: 0c:14:3e:82:8e:2b:0c:1c:8f:af:33:5c:fa:b2:96: 47:ee:9b:78:1a:1f:b0:2e:83:7f:0b:93:3d:9a:d3: 36:de:65:ce:bf:7b:fe:84:0b:6d:7b:6f:8d:4a:9a: af:14:ec:87:02:ab:55:b1:2e:97:14:25:2e:29:48: e4:ac:bc:c7:bd:43:d2:17:89:8f:10:d1:10:1d:3b: 08:20:cd:f5:83:d3:3f:1a:10:4e:1c:b0:5e:43:7b: 00:39:12:07:67:8a:01:c5:e8:a5:0c:d1:7e:d8:7b: cf:dd:6f:61:7d:65:98:13:d9:6a:00:57:9f:ff:8d: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B9:F0:2C:29:6E:26:03:6F:40:16:FB:B8:FA:3C:43:DB:2A:32:E0 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:ed:ea:a8:a4:c7:de:f6:ef:b0:6f:94:28:c5:0e:bb:bd: 91:0a:fd:99:e9:9a:d8:f9:af:88:7a:7e:7c:63:db:e2:49:95: db:d7:a7:e0:53:38:7c:13:fa:56:ad:3e:41:7e:69:35:5a:07: ff:2f:34:16:6e:8e:79:19:95:75:c9:4c:5b:37:5b:80:a7:0f: 88:3e:9f:5c:e7:e7:3d:ac:42:f0:89:1a:d5:b0:bb:9c:bb:30: 72:d9:40:9e:0e:fc:4b:2a:2a:41:35:3b:ad:76:0c:fc:56:13: 3e:d3:d4:25:d2:c2:ae:14:ed:bd:95:7c:ad:c0:9a:5f:d0:85: c4:a7:1b:01:a5:d1:ce:1e:02:38:65:de:1c:ab:b7:47:40:f2: af:ef:22:78:28:26:fc:07:3b:f8:30:0c:21:ec:33:ba:33:8b: 11:3d:ef:00:56:79:fd:ec:8d:7e:5c:08:5b:5e:32:14:02:03: 64:5b:b8:1d:0b:5a:ca:df:76:eb:9d:03:57:83:b7:a5:a7:52: c4:8a:98:cd:0a:c1:05:f8:1b:38:ed:76:57:9c:24:81:d2:2d: c0:f0:20:44:10:91:2f:f0:fb:6d:eb:0c:f5:d3:40:1b:09:66: 11:dc:b1:8e:0a:f9:dd:26:65:91:5a:3b:cb:8e:ab:30:0e:87: 2e:fe:ee:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjYwNDA1MDM1MDE4WhcNMjYwNDEyMDM1MDE4WjAYMRYwFAYD VQQDEw02OWQxZGJmYS0yZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+Jn433mwTwqHVnBcsjrMhEMryWSKb8c25Lb70pRU9kC+Cq9awgmw5Uy4UHI 8LvUo4v0CJhsGCS6IQ8r3hWfD7eCqrugfJieQ2DhLLvx5pNjd2VacPyUYclhzm16 o6dhF7i4kv4bPNn2/liSJ11OAOQqWizT8t2znuaRPYqPTuk4x+6y830MFD6CjisM HI+vM1z6spZH7pt4Gh+wLoN/C5M9mtM23mXOv3v+hAtte2+NSpqvFOyHAqtVsS6X FCUuKUjkrLzHvUPSF4mPENEQHTsIIM31g9M/GhBOHLBeQ3sAORIHZ4oBxeilDNF+ 2HvP3W9hfWWYE9lqAFef/43cRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFG58Cwp biYDb0AW+7j6PEPbKjLgMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn4/t6qikx97277BvlCjFDru9kQr9mema2PmviHp+fGPb4kmV29en4FM4fBP6 Vq0+QX5pNVoH/y80Fm6OeRmVdclMWzdbgKcPiD6fXOfnPaxC8Ika1bC7nLswctlA ng78SyoqQTU7rXYM/FYTPtPUJdLCrhTtvZV8rcCaX9CFxKcbAaXRzh4COGXeHKu3 R0Dyr+8ieCgm/Ac7+DAMIewzujOLET3vAFZ5/eyNflwIW14yFAIDZFu4HQtayt92 650DV4O3padSxIqYzQrBBfgbOO12V5wkgdItwPAgRBCRL/D7besM9dNAGwlmEdyx jgr53SZlkVo7y46rMA6HLv7u6w== -----END CERTIFICATE-----Generated at Mon Apr 6 13:55:23 2026 by rpki-client