$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: 1PsRTKXPRzgZhviwmi/68TavVzhKpgm0pQ+Dm5qOqg0= Subject key identifier: 4D:47:13:C8:B0:96:11:9E:9B:FF:C8:3B:85:9C:CF:11:ED:89:C5:C8 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 29E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 28E2 Signing time: Wed 22 Apr 2026 06:19:33 +0000 Manifest this update: Wed 22 Apr 2026 06:19:33 +0000 Manifest next update: Wed 29 Apr 2026 06:19:33 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: U93/lulNYVYhQxtd+nvb6CizNnpwwmEyb/Tb/l0dfvU=) 2: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: F1/XTIuSWZAhBt9Rm0ezDSfX6OgZ5yUi6DiYa70pF04=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: k7kFjplm2s+ydD7K6WhjMn03EyJGzpwOT89KNvnobeA=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: OCIUxyS/b5tLlrfDuZU5t1QbT6abuQsHqTZkHSU5t1M=) 5: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: Q8fywLVcYI72bpER/jVkoIMpEUoDOPdG+CfgHKA2VuQ=) 6: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b0UCq+eUPG0Zw3G9HvUdvsx8LonrZenua0MeaBXzxdI=) 7: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: Vmx4U8sYtrtvs8ITU+lcZl+6PgMDKzh+1nwm+4PN1nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 05:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10725 (0x29e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Apr 22 06:19:33 2026 GMT Not After : Apr 29 06:19:33 2026 GMT Subject: CN=69e86875-5b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:88:df:c0:45:0e:69:e3:37:d1:80:97:ef: 9b:6d:5b:2f:c1:e4:27:a6:6c:1f:40:bd:09:35:cd: 66:59:26:c0:1d:99:36:68:99:f9:47:33:d5:76:52: 58:ed:98:f4:11:6c:ad:63:6c:13:fb:66:77:b0:f1: b2:90:91:17:a1:64:90:20:f0:53:cf:8d:c5:a4:96: 6e:57:a0:24:93:97:27:45:31:1b:f7:64:60:6c:99: 44:be:cb:24:d4:1b:d2:1b:33:39:08:23:5f:b5:65: 62:12:0b:30:5e:8e:45:39:e3:5e:6e:2f:d1:c0:9e: 1f:7a:86:a2:c1:b3:83:9a:f9:cc:67:ad:75:84:47: 46:44:e3:f4:92:51:50:2c:73:d4:7e:54:1a:c2:ce: 9f:b0:79:66:9d:0a:55:5c:c1:a6:d1:b5:0f:fe:67: eb:df:f7:98:89:b5:74:36:83:c6:9e:97:af:ef:85: 23:05:22:6b:7d:10:07:db:a4:9a:e7:21:c0:5a:49: 1f:36:8c:84:52:87:56:8d:29:17:1d:a2:a9:4f:72: 14:19:a3:96:a0:1f:3b:1f:de:0d:6b:c1:08:d4:52: 69:51:57:58:4f:3b:ab:48:71:85:8c:96:2d:69:b3: d8:ec:b8:47:4c:13:c9:5c:13:50:5f:82:3b:04:b3: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:47:13:C8:B0:96:11:9E:9B:FF:C8:3B:85:9C:CF:11:ED:89:C5:C8 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d4:13:94:6c:93:7f:56:29:5d:06:f5:6c:0b:ff:b0:73:da: a7:72:cd:2d:14:fd:ec:3c:c9:41:59:ce:30:50:14:f6:4d:71: cd:ae:e3:8c:17:d0:e7:c4:f3:22:42:39:52:43:51:fd:52:a6: ae:f1:ca:1a:06:ec:6d:c0:24:ae:19:27:ee:60:86:37:10:45: 60:5a:e3:69:8f:d0:25:8c:e2:de:33:db:be:da:20:6b:89:68: d0:90:5a:e6:28:62:4c:07:92:11:b3:ab:74:54:e9:ac:8e:66: b9:37:83:39:70:29:d4:59:28:69:ac:04:89:6d:8b:c6:64:6f: 8d:54:a1:4c:8a:ec:56:1c:f9:9c:aa:8c:50:a1:e1:8d:66:93: 22:e8:ab:01:f7:ba:a6:ef:ad:c1:24:4e:f2:ff:b6:43:56:46: 07:86:ee:de:e9:a6:07:4b:75:f3:b9:6a:40:45:d9:17:1d:66: 48:95:e0:1d:2d:b1:0f:e0:05:b2:c2:59:82:af:1a:b0:9a:fc: 88:c6:d3:64:9a:61:18:a8:a5:9e:13:16:d3:1f:41:aa:96:e7: 48:e7:32:8a:bb:63:35:fb:62:26:1d:1b:6f:5f:56:9d:4a:78: 25:8b:15:57:95:91:96:de:1f:72:a7:79:92:6b:48:b8:6c:ef: 4a:b0:a4:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwNDIyMDYxOTMzWhcNMjYwNDI5MDYxOTMzWjAYMRYwFAYD VQQDEw02OWU4Njg3NS01Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+GI38BFDmnjN9GAl++bbVsvweQnpmwfQL0JNc1mWSbAHZk2aJn5RzPVdlJY 7Zj0EWytY2wT+2Z3sPGykJEXoWSQIPBTz43FpJZuV6Akk5cnRTEb92RgbJlEvssk 1BvSGzM5CCNftWViEgswXo5FOeNebi/RwJ4feoaiwbODmvnMZ611hEdGROP0klFQ LHPUflQaws6fsHlmnQpVXMGm0bUP/mfr3/eYibV0NoPGnpev74UjBSJrfRAH26Sa 5yHAWkkfNoyEUodWjSkXHaKpT3IUGaOWoB87H94Na8EI1FJpUVdYTzurSHGFjJYt abPY7LhHTBPJXBNQX4I7BLNMSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1HE8iw lhGem//IO4WczxHticXIMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXtQTlGyTf1YpXQb1bAv/sHPap3LNLRT97DzJQVnOMFAU9k1xza7jjBfQ58Tz IkI5UkNR/VKmrvHKGgbsbcAkrhkn7mCGNxBFYFrjaY/QJYzi3jPbvtoga4lo0JBa 5ihiTAeSEbOrdFTprI5muTeDOXAp1FkoaawEiW2LxmRvjVShTIrsVhz5nKqMUKHh jWaTIuirAfe6pu+twSRO8v+2Q1ZGB4bu3ummB0t187lqQEXZFx1mSJXgHS2xD+AF ssJZgq8asJr8iMbTZJphGKilnhMW0x9BqpbnSOcyirtjNftiJh0bb19WnUp4JYsV V5WRlt4fcqd5kmtIuGzvSrCkAw== -----END CERTIFICATE-----Generated at Wed Apr 22 10:25:50 2026 by rpki-client