$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json) Hash identifier: lDuy4z2J1CYy9gbrN4tCohNrutzNpE40hT1JJzXMGew= Subject key identifier: 7E:F5:62:6E:30:79:90:ED:22:19:A9:B1:0F:F8:33:37:91:1B:E8:1C Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft Manifest number: 01D1 Signing time: Sat 04 Apr 2026 15:27:05 +0000 Manifest this update: Sat 04 Apr 2026 15:27:04 +0000 Manifest next update: Sat 11 Apr 2026 15:27:04 +0000 Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: JAXpvA4MHJBFY6IpPmfMuI4i6Hd18B6VknP8Cc8sXdA=) 2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: Apr 4 15:27:04 2026 GMT Not After : Apr 11 15:27:04 2026 GMT Subject: CN=69d12dc8-5297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:3d:64:de:7c:9e:7d:a0:a8:9e:b9:2a:8d: a6:dc:4e:50:94:4a:e6:51:e6:6e:6b:da:d9:cc:dd: 73:5e:a7:86:43:ac:dd:8f:b2:c9:51:21:33:31:eb: fa:c8:9f:0b:3c:80:53:76:e5:de:3a:61:54:36:ca: 7b:9c:af:0d:66:e4:66:44:77:8e:13:ee:47:96:e7: 2b:bd:44:a6:ad:1e:3f:12:d4:28:be:75:e3:11:28: 80:15:bf:4a:ca:bd:50:76:65:1f:2f:a8:0a:16:8d: 8a:be:ea:a8:03:8d:cd:77:27:3c:c0:5e:2f:4b:04: c9:5e:4a:93:53:83:dd:8a:70:0a:37:a8:f5:c0:ed: a2:f8:80:99:0b:2d:86:bd:9c:6b:82:f8:5f:0e:61: 90:03:b1:4c:db:bb:a1:ce:9d:34:36:ce:ae:d0:47: 67:86:fc:0e:27:f4:40:95:b6:9e:18:be:45:72:64: ea:db:f2:a9:b9:45:39:5d:6b:22:b6:d5:94:d3:70: ba:b4:bb:e6:80:96:5e:29:3d:bb:e4:67:3f:fc:d5: b7:44:c6:7f:05:ff:8e:e4:5a:d5:9e:08:2c:e9:91: 94:09:f5:d1:03:bb:19:04:37:50:28:df:94:3d:7c: 32:c8:34:75:ba:a0:14:bb:1f:d1:6e:04:31:97:26: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F5:62:6E:30:79:90:ED:22:19:A9:B1:0F:F8:33:37:91:1B:E8:1C X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:71:df:d4:8e:96:d2:21:b9:9d:cc:45:f1:96:be:21:dd:02: 41:97:a2:51:d8:30:fb:89:72:79:eb:f7:fa:59:ab:12:58:93: 89:a7:e1:7f:15:79:98:bd:cb:01:36:6d:55:e9:c9:bc:56:22: b8:b0:a2:48:f8:56:6e:9d:47:85:f0:31:ac:19:ea:b6:ce:8f: 45:2c:21:70:17:1d:df:74:4a:df:84:c5:47:ba:36:3b:f7:12: 92:94:3a:c4:4a:3b:e4:51:23:23:44:c5:74:ca:3e:ad:15:66: dd:14:4c:2f:11:4b:14:dd:5b:eb:33:6d:3f:03:7f:eb:ee:41: 50:91:24:66:f4:80:bb:a7:e9:f1:79:82:a5:58:51:7d:ae:46: 22:2e:ac:78:cd:c9:98:10:c6:06:9f:e1:4d:74:56:db:48:75: 06:8a:47:11:f6:dd:7d:63:1e:7d:ce:aa:7a:4a:f0:e0:17:5c: 09:cf:5f:e6:67:33:dd:68:f9:14:68:44:c0:84:f9:b8:54:6b: 62:89:f6:1a:6d:8c:22:f4:79:21:2a:77:1b:58:07:bc:ce:df: 86:02:16:dc:be:98:00:c3:2d:a9:05:e5:8c:88:ca:e6:d7:bd: 4c:73:d2:c9:d6:b0:cc:8a:dc:18:33:b2:6a:98:97:9f:51:8d: c3:28:c9:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjYwNDA0MTUyNzA0WhcNMjYwNDExMTUyNzA0WjAYMRYwFAYD VQQDEw02OWQxMmRjOC01Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKc9ZN58nn2gqJ65Ko2m3E5QlErmUeZua9rZzN1zXqeGQ6zdj7LJUSEzMev6 yJ8LPIBTduXeOmFUNsp7nK8NZuRmRHeOE+5HlucrvUSmrR4/EtQovnXjESiAFb9K yr1QdmUfL6gKFo2KvuqoA43Ndyc8wF4vSwTJXkqTU4PdinAKN6j1wO2i+ICZCy2G vZxrgvhfDmGQA7FM27uhzp00Ns6u0EdnhvwOJ/RAlbaeGL5FcmTq2/KpuUU5XWsi ttWU03C6tLvmgJZeKT275Gc//NW3RMZ/Bf+O5FrVnggs6ZGUCfXRA7sZBDdQKN+U PXwyyDR1uqAUux/RbgQxlyZAUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH71Ym4w eZDtIhmpsQ/4MzeRG+gcMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS NlNhRHMtdGJla1YwbExKZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAonHf1I6W0iG5ncxF8Za+Id0CQZeiUdgw+4lyeev3+lmrEliTiafhfxV5mL3L ATZtVenJvFYiuLCiSPhWbp1HhfAxrBnqts6PRSwhcBcd33RK34TFR7o2O/cSkpQ6 xEo75FEjI0TFdMo+rRVm3RRMLxFLFN1b6zNtPwN/6+5BUJEkZvSAu6fp8XmCpVhR fa5GIi6seM3JmBDGBp/hTXRW20h1BopHEfbdfWMefc6qekrw4BdcCc9f5mcz3Wj5 FGhEwIT5uFRrYon2Gm2MIvR5ISp3G1gHvM7fhgIW3L6YAMMtqQXljIjK5te9THPS ydawzIrcGDOyapiXn1GNwyjJgA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:49:08 2026 by rpki-client