$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: X1+GJistk4Ol7zHFEr52zuSIkd4ejBkhqCbM/eMiMmU= Subject key identifier: C5:84:DE:DE:C4:AD:97:5E:A1:5E:77:25:1B:C6:81:51:F3:9F:09:44 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 0888 Signing time: Mon 20 Apr 2026 20:39:22 +0000 Manifest this update: Mon 20 Apr 2026 20:39:21 +0000 Manifest next update: Mon 27 Apr 2026 20:39:21 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: XP7V2MEvWjVOJ6eaVOae4aUnmNzoSvGlIkR96Z3COqQ=) 2: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 3: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 4: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 6: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 7: E4FA38362D2311F1A198B1F8B7833773.roa (hash: XioPrFVJE9iRgMu/wpEb87MQIymypqkVs8XZL4sAu4o=) 8: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 9: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 10: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Apr 20 20:39:21 2026 GMT Not After : Apr 27 20:39:21 2026 GMT Subject: CN=69e68efa-a881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:5a:a9:b3:45:a0:87:1e:28:ff:3b:ba:ef: ff:cf:33:72:39:7f:85:62:20:32:45:b2:18:02:7e: 6b:63:86:b9:de:18:61:68:4f:2e:a4:ec:a2:a9:5c: 9e:45:5b:76:a8:6a:28:aa:10:fb:13:af:93:26:4d: cc:61:92:a2:13:79:f7:c0:7c:44:82:6b:a0:e2:18: db:9c:1f:80:09:d9:74:29:3d:f2:cb:9a:ed:ff:67: a7:b2:68:a6:45:94:c0:3f:00:b7:f0:42:20:08:a7: 1d:50:14:a9:df:22:b2:03:b9:e3:15:6a:d1:70:5d: 30:15:65:21:eb:93:10:af:ac:b1:21:82:4a:15:fe: 0f:4d:41:ef:e6:d6:ca:e0:ad:c3:41:1a:91:dc:43: 71:b0:15:4e:bb:5d:9e:98:0d:f3:45:c1:ea:36:2b: 85:f7:75:40:37:cf:be:4d:3e:9a:d7:f3:11:5c:a7: 88:cc:cc:d6:50:6e:df:96:98:53:30:76:b0:5d:9b: 7c:92:ae:c3:89:e0:14:98:96:ce:a1:83:fe:fa:31: 27:2f:25:18:a6:7c:d3:5c:90:89:31:0d:90:a1:a0: df:14:8e:7c:04:6b:14:8d:7b:5c:7f:5f:3d:47:73: 90:e1:69:93:91:44:3a:eb:bf:a6:55:44:f0:d6:6f: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:DE:DE:C4:AD:97:5E:A1:5E:77:25:1B:C6:81:51:F3:9F:09:44 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:99:7b:74:05:45:85:cb:09:c4:42:80:3d:be:6e:67:06:d7: fc:4f:35:d0:57:00:15:60:40:6a:64:d1:da:75:e1:76:28:5a: 81:c6:38:39:6d:17:06:8d:ab:7c:e5:ed:10:9b:60:18:21:6b: c4:a6:0a:a2:03:29:b5:36:d1:fb:5d:0d:98:15:ad:05:a9:cb: 99:d7:9a:22:1d:72:9d:e1:bd:87:81:05:e3:5c:f6:a2:5a:76: 06:a4:87:a8:68:34:1c:31:ad:d7:4e:ba:ed:2e:b1:ec:6c:5a: 59:26:75:c8:42:65:25:95:1d:10:d8:4b:d6:20:87:2d:df:ec: d1:f0:a9:6d:0d:b1:e7:ec:70:d2:c0:b5:71:08:62:b1:df:31: a2:f9:d2:ae:8a:69:78:ca:08:44:7c:57:32:0a:6d:f0:89:73: 90:bd:f1:08:c8:a0:24:60:41:f1:a6:e4:d5:c0:a8:85:92:7b: c7:c3:df:da:25:79:5d:12:d7:cf:ae:c3:82:47:52:36:67:77: 6b:39:64:d8:79:4a:d7:22:66:0e:bb:ec:2f:06:df:c9:9f:c2: f6:05:72:8d:8a:60:5c:b0:ec:e0:2b:6b:ed:0e:11:43:f9:05: 37:06:aa:21:82:b6:29:c2:e2:2d:73:4c:e9:9c:ff:5b:7f:25: 99:bd:7b:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwNDIwMjAzOTIxWhcNMjYwNDI3MjAzOTIxWjAYMRYwFAYD VQQDEw02OWU2OGVmYS1hODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxhaqbNFoIceKP87uu//zzNyOX+FYiAyRbIYAn5rY4a53hhhaE8upOyiqVye RVt2qGooqhD7E6+TJk3MYZKiE3n3wHxEgmug4hjbnB+ACdl0KT3yy5rt/2ensmim RZTAPwC38EIgCKcdUBSp3yKyA7njFWrRcF0wFWUh65MQr6yxIYJKFf4PTUHv5tbK 4K3DQRqR3ENxsBVOu12emA3zRcHqNiuF93VAN8++TT6a1/MRXKeIzMzWUG7flphT MHawXZt8kq7DieAUmJbOoYP++jEnLyUYpnzTXJCJMQ2QoaDfFI58BGsUjXtcf189 R3OQ4WmTkUQ667+mVUTw1m8Z6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWE3t7E rZdeoV53JRvGgVHznwlEMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHpl7dAVFhcsJxEKAPb5uZwbX/E810FcAFWBAamTR2nXhdihagcY4OW0XBo2r fOXtEJtgGCFrxKYKogMptTbR+10NmBWtBanLmdeaIh1yneG9h4EF41z2olp2BqSH qGg0HDGt10667S6x7GxaWSZ1yEJlJZUdENhL1iCHLd/s0fCpbQ2x5+xw0sC1cQhi sd8xovnSroppeMoIRHxXMgpt8IlzkL3xCMigJGBB8abk1cCohZJ7x8Pf2iV5XRLX z67DgkdSNmd3azlk2HlK1yJmDrvsLwbfyZ/C9gVyjYpgXLDs4Ctr7Q4RQ/kFNwaq IYK2KcLiLXNM6Zz/W38lmb17Yw== -----END CERTIFICATE-----Generated at Tue Apr 21 18:08:47 2026 by rpki-client