$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: 34qIzS20xCiWDq++GreBddamCwK0AscieJnFbnYSTro= Subject key identifier: 1C:42:63:95:A4:4D:BF:60:3A:C9:42:71:4E:A2:3E:C4:90:E8:FF:09 Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 03A0 Signing time: Tue 21 Apr 2026 00:19:09 +0000 Manifest this update: Tue 21 Apr 2026 00:19:08 +0000 Manifest next update: Tue 28 Apr 2026 00:19:08 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: 1ZA3CkLlf9I8A0oDsTPQNlifXcfFhZm5zD5NuqXQmqE=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: BIuosdWuF+4ep+QMwFKZ6npqwjzH0+zcNnprYLZ5I98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Apr 21 00:19:08 2026 GMT Not After : Apr 28 00:19:08 2026 GMT Subject: CN=69e6c27d-11b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:f5:04:70:c1:11:48:e9:3e:67:36:4a:be: b4:2f:dc:5e:02:36:35:f8:5e:26:aa:aa:e0:a4:ac: 9b:d3:2e:ed:2a:d2:50:6e:04:49:0b:c6:22:65:00: bb:a1:5f:94:95:36:e9:83:1f:86:5b:a4:e2:91:c1: fa:ff:e3:72:0a:39:de:b3:45:05:c7:90:6d:73:29: 93:55:aa:d1:6a:d9:6e:6c:4a:78:3a:97:30:b7:39: 81:e1:6d:77:4a:80:42:97:76:96:7b:f0:cf:2e:94: 84:9b:09:33:df:07:f5:78:96:f9:e0:6c:57:74:d2: 3e:92:77:4e:1f:2e:52:e9:1b:27:40:98:82:55:00: 87:ac:39:a5:45:18:8c:57:e1:42:e6:96:5f:3b:4c: 10:b0:40:47:72:40:28:d5:10:3f:36:e9:dd:55:92: 86:b4:b5:a8:07:d6:ac:b5:ed:d7:52:ef:e3:e4:c2: d9:51:2c:fe:2b:50:30:67:05:89:15:f3:d8:d4:41: 5b:cf:c7:1b:55:be:10:b1:2e:31:9c:ea:f3:4c:9b: 15:40:1c:74:07:8a:2d:ff:64:5c:5b:c7:01:fe:b3: 78:d1:ce:04:f2:21:35:9d:c7:fb:55:30:f5:2b:28: b6:61:3d:e9:0e:b4:02:f1:a8:c4:da:14:41:e3:b5: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:42:63:95:A4:4D:BF:60:3A:C9:42:71:4E:A2:3E:C4:90:E8:FF:09 X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:68:74:cc:b7:86:fc:c8:0b:3c:19:cc:6b:1c:9a:66:ca:84: 45:f0:be:c4:18:eb:7a:79:8a:e8:1d:f2:72:3f:5a:aa:8b:b3: 43:c1:87:40:26:d1:21:bb:c3:d4:93:81:58:40:ff:78:22:52: 1d:4e:c3:a0:b0:9e:b2:b5:c2:e8:7b:ca:1f:b5:2f:aa:0c:82: 13:d4:ec:1f:19:b9:d2:6c:49:93:bc:be:b5:e1:fb:5c:79:a5: 22:95:c4:9c:67:77:66:e2:19:39:80:24:b7:e4:c4:d6:ea:48: e8:39:1a:56:02:0e:ff:21:9a:df:1b:f4:f5:d7:ce:bf:16:98: ec:5e:c2:08:f6:b6:fc:8f:3d:fe:79:bc:a5:6b:02:4b:65:e7: 5f:ff:05:78:68:03:53:26:31:dd:10:87:11:bb:68:9d:8e:51: 1f:af:8a:71:b3:b0:b0:98:94:c4:3a:1c:f3:67:81:4e:9d:51: a2:f9:5a:08:70:ec:a0:a8:22:85:9a:68:97:8d:c5:4c:ae:bf: 8e:08:cb:67:8f:6b:11:cf:fe:2e:6e:2c:e4:33:bf:77:3c:69: f1:ab:79:5c:99:ae:03:30:eb:62:80:79:0d:bd:fc:e8:78:de: fa:77:d5:d9:43:65:98:6c:4e:10:f2:30:8e:f7:ea:9d:fc:4a: 63:97:10:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjYwNDIxMDAxOTA4WhcNMjYwNDI4MDAxOTA4WjAYMRYwFAYD VQQDEw02OWU2YzI3ZC0xMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtob1BHDBEUjpPmc2Sr60L9xeAjY1+F4mqqrgpKyb0y7tKtJQbgRJC8YiZQC7 oV+UlTbpgx+GW6TikcH6/+NyCjnes0UFx5BtcymTVarRatlubEp4OpcwtzmB4W13 SoBCl3aWe/DPLpSEmwkz3wf1eJb54GxXdNI+kndOHy5S6RsnQJiCVQCHrDmlRRiM V+FC5pZfO0wQsEBHckAo1RA/NundVZKGtLWoB9aste3XUu/j5MLZUSz+K1AwZwWJ FfPY1EFbz8cbVb4QsS4xnOrzTJsVQBx0B4ot/2RcW8cB/rN40c4E8iE1ncf7VTD1 Kyi2YT3pDrQC8ajE2hRB47VoAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxCY5Wk Tb9gOslCcU6iPsSQ6P8JMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACGh0zLeG/MgLPBnMaxyaZsqERfC+xBjrenmK6B3ycj9aqouzQ8GHQCbRIbvD 1JOBWED/eCJSHU7DoLCesrXC6HvKH7UvqgyCE9TsHxm50mxJk7y+teH7XHmlIpXE nGd3ZuIZOYAkt+TE1upI6DkaVgIO/yGa3xv09dfOvxaY7F7CCPa2/I89/nm8pWsC S2XnX/8FeGgDUyYx3RCHEbtonY5RH6+KcbOwsJiUxDoc82eBTp1RovlaCHDsoKgi hZpol43FTK6/jgjLZ49rEc/+Lm4s5DO/dzxp8at5XJmuAzDrYoB5Db386Hje+nfV 2UNlmGxOEPIwjvfqnfxKY5cQSQ== -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:46 2026 by rpki-client