$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: doK7dg+3Ogcds20zdsSTXXQ5cSMpoQTRy6MUqpBGs7Y= Subject key identifier: 4D:F6:FB:78:68:B2:ED:92:CD:38:4A:5A:D9:BF:E7:20:E4:ED:34:97 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 066C Signing time: Mon 20 Apr 2026 22:31:05 +0000 Manifest this update: Mon 20 Apr 2026 22:31:05 +0000 Manifest next update: Mon 27 Apr 2026 22:31:05 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: ONgbcNMf50le2t+6AsHKZoI1pfc/yQxzfdIuSW6n3H8=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: TOu4rTok/YTcP4XYz+qFAKVXMljHMOdt2vuAWSKuetQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Apr 20 22:31:05 2026 GMT Not After : Apr 27 22:31:05 2026 GMT Subject: CN=69e6a929-3550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:68:b5:6d:62:0a:bf:37:2d:33:e2:cf:8b:b5: 9f:ae:b2:39:c1:89:43:e3:b7:a8:4a:cb:17:6e:7a: 33:40:1f:9b:75:b7:aa:e7:45:b3:e2:8e:6b:ef:4e: 37:68:31:7d:bf:af:2d:f5:4b:0b:97:33:96:e0:b0: 12:86:dd:ac:a3:f1:d4:75:2e:bf:71:ff:b8:7d:18: ca:b5:21:50:7a:7c:6a:36:4b:29:61:d2:38:b3:38: 1f:73:da:56:af:0b:38:88:56:c3:be:b2:a7:b9:af: 08:89:44:85:1f:fc:c5:b3:05:59:17:8a:33:cc:95: 62:2c:f9:3c:65:8a:d0:0b:34:fd:4c:62:cc:32:d2: 88:73:8d:e1:4a:2f:23:d0:94:f1:2a:bc:45:17:12: 83:46:5d:d1:c6:64:0c:9a:0b:28:d4:c9:0c:77:ac: 11:8c:84:da:1a:ef:88:0b:b8:e5:e7:c0:fb:70:0f: 9b:81:51:e8:32:c9:74:16:a1:3e:60:17:a6:c8:16: 7f:66:b0:e0:3f:ac:18:c6:3a:43:89:a8:70:68:a1: 4d:5a:eb:bf:e4:07:2c:09:62:5e:5f:09:c7:49:de: 3f:4a:09:76:16:7a:b7:6d:dd:39:a5:51:08:5a:1e: 8e:2f:bc:21:a2:8b:66:54:ac:0f:fd:94:b2:bf:39: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:FB:78:68:B2:ED:92:CD:38:4A:5A:D9:BF:E7:20:E4:ED:34:97 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:31:57:c1:fb:26:e2:72:c0:2a:ac:70:12:b6:59:9a:74:4c: 3f:ec:31:d4:c2:57:77:99:25:70:6d:62:6c:ae:bd:e1:11:73: 4c:e6:3f:d4:80:0d:ed:55:38:59:e8:84:ea:48:0e:d5:ec:ab: 4b:21:39:80:d0:db:0f:0f:f3:24:d4:69:0a:4c:8c:f6:92:6b: c6:79:11:59:8c:82:6f:90:96:24:df:66:39:81:f7:5d:b3:f2: d0:a9:ef:81:66:35:d7:2e:09:ca:4c:84:38:00:18:8d:d6:83: 7b:3f:f3:14:a4:c4:7b:5c:0b:71:e3:e4:dd:3e:22:9a:bd:19: f5:8c:34:9d:16:60:a3:47:c4:4b:c2:98:09:42:36:d1:2e:a4: b5:2e:45:47:ce:64:65:25:68:31:f4:38:f1:51:09:a5:00:54: 96:af:44:31:5f:2f:20:aa:26:3e:5a:89:e7:a1:e4:b9:85:f3: e8:a9:5e:79:06:4b:07:e5:f6:54:f8:6d:1b:28:0c:07:62:80: 43:e7:6d:e9:d8:4d:77:33:b1:b9:0f:f5:04:68:66:db:5b:6c: bc:61:82:85:a4:14:3b:ec:cc:41:f7:e9:eb:5d:22:d8:ab:44: 86:54:b9:a3:63:f0:86:70:46:71:24:df:8b:2a:10:6e:6a:67: 54:e7:c1:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjYwNDIwMjIzMTA1WhcNMjYwNDI3MjIzMTA1WjAYMRYwFAYD VQQDEw02OWU2YTkyOS0zNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92i1bWIKvzctM+LPi7WfrrI5wYlD47eoSssXbnozQB+bdbeq50Wz4o5r7043 aDF9v68t9UsLlzOW4LASht2so/HUdS6/cf+4fRjKtSFQenxqNkspYdI4szgfc9pW rws4iFbDvrKnua8IiUSFH/zFswVZF4ozzJViLPk8ZYrQCzT9TGLMMtKIc43hSi8j 0JTxKrxFFxKDRl3RxmQMmgso1MkMd6wRjITaGu+IC7jl58D7cA+bgVHoMsl0FqE+ YBemyBZ/ZrDgP6wYxjpDiahwaKFNWuu/5AcsCWJeXwnHSd4/Sgl2Fnq3bd05pVEI Wh6OL7whootmVKwP/ZSyvzmvTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE32+3ho su2SzThKWtm/5yDk7TSXMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzFXwfsm4nLAKqxwErZZmnRMP+wx1MJXd5klcG1ibK694RFzTOY/1IAN7VU4 WeiE6kgO1eyrSyE5gNDbDw/zJNRpCkyM9pJrxnkRWYyCb5CWJN9mOYH3XbPy0Knv gWY11y4JykyEOAAYjdaDez/zFKTEe1wLcePk3T4imr0Z9Yw0nRZgo0fES8KYCUI2 0S6ktS5FR85kZSVoMfQ48VEJpQBUlq9EMV8vIKomPlqJ56HkuYXz6KleeQZLB+X2 VPhtGygMB2KAQ+dt6dhNdzOxuQ/1BGhm21tsvGGChaQUO+zMQffp610i2KtEhlS5 o2PwhnBGcSTfiyoQbmpnVOfBzA== -----END CERTIFICATE-----Generated at Wed Apr 22 07:06:46 2026 by rpki-client