$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: pNtfSdzPEkcpQOuTtQiJMm1S8BWta+RHwFMRoHoPoLM= Subject key identifier: 99:B6:F9:97:F9:2F:EC:4C:FA:14:DD:3A:B9:EE:8B:04:17:D9:FE:16 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0958 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0944 Signing time: Wed 22 Apr 2026 20:08:46 +0000 Manifest this update: Wed 22 Apr 2026 20:08:46 +0000 Manifest next update: Wed 29 Apr 2026 20:08:46 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: NavuKMoPw6pTL/StDRYU6AMnRIg/40E0epLl1N9xeMw=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 20:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Apr 22 20:08:46 2026 GMT Not After : Apr 29 20:08:46 2026 GMT Subject: CN=69e92ace-825f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:e8:f2:84:9a:35:e5:b1:1c:dc:4c:de:1a: d2:64:c8:fb:46:9a:2d:c0:f4:ce:30:87:fb:61:48: f5:d2:02:c8:7e:fe:b5:a9:4c:cc:b0:c0:9c:28:f8: 68:ac:61:e2:18:f9:aa:a9:ba:61:62:6e:0a:41:f9: 6a:ad:34:f0:f9:c4:75:ec:df:18:91:a0:3f:d4:3c: 54:cf:4b:97:e8:4e:3a:a4:74:76:23:70:c1:6d:7b: 16:d2:88:25:de:0d:99:f3:72:b7:f4:9d:79:a8:a0: 82:75:f1:a6:3a:b8:35:9f:96:7f:f4:74:14:42:05: e0:75:a7:ff:c1:34:d7:3e:03:4c:ed:bd:55:31:d4: 48:9f:39:de:88:34:53:45:4f:42:9d:a7:e5:d4:d8: 1c:58:52:a7:71:6d:ed:0b:94:f7:aa:62:3b:e2:70: 5f:1b:32:50:2d:d4:9d:9c:f1:0f:69:fa:7c:9a:44: 1b:4c:e7:1c:2c:b6:01:dc:05:22:e3:3c:2f:c1:b5: 94:b7:e6:a4:1f:da:44:33:21:69:04:60:18:ff:33: 31:ca:dd:63:aa:64:07:d5:8a:e3:0d:7f:3c:4c:b2: 32:78:f3:99:f5:8e:e2:02:8d:3b:26:08:52:65:44: fb:ee:fc:fd:25:13:4f:60:4c:1d:c0:79:d1:9b:31: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:F9:97:F9:2F:EC:4C:FA:14:DD:3A:B9:EE:8B:04:17:D9:FE:16 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:bb:02:0f:24:78:af:06:3c:d6:90:09:be:b3:dd:e2:c5:67: 02:fe:ec:1d:8f:72:ca:a5:85:de:ce:86:4f:ec:42:4e:d6:d0: 5d:32:15:18:99:8d:39:e0:ed:47:24:69:a2:5e:38:d3:82:ff: fe:c7:54:a8:40:2a:e5:c1:39:4a:b1:c6:c9:67:32:d3:05:9c: 79:19:f9:70:1e:d7:ee:34:34:16:ca:06:fe:af:4b:c2:6e:2f: b7:ff:19:c2:c6:2f:7c:55:d5:25:05:cc:8a:db:92:8f:7b:ee: a7:1f:1d:27:26:e5:45:ca:8b:18:59:d6:60:1a:29:e1:02:65: 3c:23:3b:2d:3a:48:e8:f0:ce:cf:58:94:6f:29:d0:3f:7a:42: 81:72:8c:02:ce:3c:e2:ca:5e:81:cd:34:18:b3:bb:a7:91:40: 17:0c:65:fc:00:eb:5c:f8:4d:0d:07:32:1d:96:38:23:5c:2a: 93:c3:2a:b3:7c:c8:c1:81:fc:91:70:3a:1b:47:76:82:eb:c9: 92:60:2c:4a:f5:20:c3:9a:af:07:1a:0f:0f:a9:a2:f7:9f:36: 67:c6:8c:72:f3:5a:11:b5:65:ca:78:c8:1a:3c:c4:10:9c:b8: 48:a8:28:d7:2f:ba:7b:ea:a4:39:86:ad:aa:18:13:00:6d:2f: 40:bd:50:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjYwNDIyMjAwODQ2WhcNMjYwNDI5MjAwODQ2WjAYMRYwFAYD VQQDEw02OWU5MmFjZS04MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCjo8oSaNeWxHNxM3hrSZMj7RpotwPTOMIf7YUj10gLIfv61qUzMsMCcKPho rGHiGPmqqbphYm4KQflqrTTw+cR17N8YkaA/1DxUz0uX6E46pHR2I3DBbXsW0ogl 3g2Z83K39J15qKCCdfGmOrg1n5Z/9HQUQgXgdaf/wTTXPgNM7b1VMdRInzneiDRT RU9Cnafl1NgcWFKncW3tC5T3qmI74nBfGzJQLdSdnPEPafp8mkQbTOccLLYB3AUi 4zwvwbWUt+akH9pEMyFpBGAY/zMxyt1jqmQH1YrjDX88TLIyePOZ9Y7iAo07JghS ZUT77vz9JRNPYEwdwHnRmzFxOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJm2+Zf5 L+xM+hTdOrnuiwQX2f4WMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaLsCDyR4rwY81pAJvrPd4sVnAv7sHY9yyqWF3s6GT+xCTtbQXTIVGJmNOeDt RyRpol4404L//sdUqEAq5cE5SrHGyWcy0wWceRn5cB7X7jQ0FsoG/q9Lwm4vt/8Z wsYvfFXVJQXMituSj3vupx8dJyblRcqLGFnWYBop4QJlPCM7LTpI6PDOz1iUbynQ P3pCgXKMAs484spegc00GLO7p5FAFwxl/ADrXPhNDQcyHZY4I1wqk8Mqs3zIwYH8 kXA6G0d2guvJkmAsSvUgw5qvBxoPD6mi9582Z8aMcvNaEbVlynjIGjzEEJy4SKgo 1y+6e+qkOYatqhgTAG0vQL1QXw== -----END CERTIFICATE-----Generated at Fri Apr 24 10:50:32 2026 by rpki-client