$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft File: cA9SATINxKfw-nMFyVWhmUwYJgA.mft (raw, json) Hash identifier: 5xyqRzVRarJ1SZFrLn6fioGszcbBO5RSuFk4dn4z+ms= Subject key identifier: AE:85:09:92:A1:65:40:D2:1E:6E:C6:8C:AE:37:66:F6:F4:FF:E0:8C Authority key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00 Certificate issuer: /CN=A9151290/serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft Manifest number: 3A Signing time: Sat 25 Apr 2026 08:12:54 +0000 Manifest this update: Sat 25 Apr 2026 08:12:54 +0000 Manifest next update: Sat 02 May 2026 08:12:54 +0000 Files and hashes: 1: cA9SATINxKfw-nMFyVWhmUwYJgA.crl (hash: VCo/p6nlTvAP2lG5YKvc0MzlaymFttSmJdMhLV+GDZw=) 2: 90360F96F35D11F08865480C646F56BC.roa (hash: +hYht0+VhMqie7zs0TemkZjgGj97GrUe4MXcjgwo+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 May 2026 08:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600 Validity Not Before: Apr 25 08:12:54 2026 GMT Not After : May 2 08:12:54 2026 GMT Subject: CN=69ec7786-d8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:00:d9:e4:cc:1e:90:78:eb:ce:ee:b5:da: 96:08:7b:fe:29:47:fe:12:94:33:b8:4f:ab:14:11: e0:9a:b5:3b:6a:ec:4f:0a:7b:70:53:d8:55:ae:c5: bc:9f:c0:0b:0a:c8:d3:03:57:13:94:4a:d2:d2:8d: a6:de:a3:ac:7e:ab:74:b2:52:06:9b:42:8a:85:e1: 8f:9a:de:4f:07:7a:d0:da:85:85:95:81:32:5c:12: 04:e7:b6:70:6a:a3:96:4a:bb:7a:eb:08:e6:c2:b8: 53:a7:71:12:01:fd:bf:84:7a:eb:a3:48:38:5c:6b: ee:54:27:fc:c6:ca:54:c3:06:7f:43:90:26:96:c1: ac:fc:a4:5c:8a:f1:e2:70:5b:65:ee:6f:1b:e2:1c: a6:29:f8:36:5d:51:a2:05:cd:99:81:8b:4b:66:0b: 1e:41:c1:32:f3:ac:59:8c:0d:a8:5a:46:ff:4d:aa: 67:49:6d:5f:18:0f:f5:c6:40:6a:3c:49:ad:be:a3: 96:c2:de:bb:d2:38:e1:84:cd:da:23:77:9b:c1:af: cd:89:92:99:20:44:4e:dc:93:9d:ea:e4:a7:96:68: cf:28:55:fd:c1:cc:88:52:50:a1:75:51:36:59:85: df:68:7e:d0:1d:40:69:39:07:e8:a6:8d:d8:f1:71: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:09:92:A1:65:40:D2:1E:6E:C6:8C:AE:37:66:F6:F4:FF:E0:8C X509v3 Authority Key Identifier: keyid:70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:35:9b:21:17:27:77:63:43:c2:47:b2:c5:69:10:49:a6:53: b9:4c:43:73:de:b6:f2:69:86:22:5b:77:30:76:d8:16:0a:14: 36:a9:7f:a7:d3:9f:5b:ea:0c:95:90:f1:72:51:4c:35:a4:70: cc:3a:74:ee:be:43:1d:bb:6a:97:96:fa:fa:8d:69:b6:17:23: 1c:26:47:aa:7f:18:14:9d:67:6c:a9:07:ac:9f:98:24:01:ec: e9:13:eb:51:b3:3d:72:1c:54:99:7c:31:63:1a:2b:c2:a7:0f: e4:51:fc:84:34:96:3f:d8:a9:0c:88:34:30:70:1c:2e:01:f1: 21:87:23:8a:72:c9:83:53:aa:14:78:ea:8c:98:11:2c:12:50: 71:cb:56:1a:75:72:aa:40:da:24:6d:3e:d0:a1:12:6b:f1:34: 9d:0f:ab:c7:95:19:fa:5d:8c:59:f8:2b:35:bf:74:7b:43:2a: 3f:78:76:f0:13:c6:63:9b:7a:e0:60:75:73:b7:b1:0c:d3:a5: f1:2a:fc:2a:8d:a2:45:66:ea:f5:74:7d:4e:96:5b:d5:1f:73: bc:4d:11:46:93:b4:6c:d5:77:ed:8f:f2:8c:3a:c0:43:04:9a: 10:b7:d0:fd:68:bd:44:78:58:8c:6b:39:78:08:6f:db:22:0d: c0:9c:84:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTI5MDExMC8GA1UEBRMoNzAwRjUyMDEzMjBEQzRBN0YwRkE3MzA1Qzk1NUExOTk0 QzE4MjYwMDAeFw0yNjA0MjUwODEyNTRaFw0yNjA1MDIwODEyNTRaMBgxFjAUBgNV BAMTDTY5ZWM3Nzg2LWQ4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgQgDZ5MwekHjrzu612pYIe/4pR/4SlDO4T6sUEeCatTtq7E8Ke3BT2FWuxbyf wAsKyNMDVxOUStLSjabeo6x+q3SyUgabQoqF4Y+a3k8HetDahYWVgTJcEgTntnBq o5ZKu3rrCObCuFOncRIB/b+EeuujSDhca+5UJ/zGylTDBn9DkCaWwaz8pFyK8eJw W2XubxviHKYp+DZdUaIFzZmBi0tmCx5BwTLzrFmMDahaRv9NqmdJbV8YD/XGQGo8 Sa2+o5bC3rvSOOGEzdojd5vBr82JkpkgRE7ck53q5KeWaM8oVf3BzIhSUKF1UTZZ hd9oftAdQGk5B+imjdjxcYjnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUroUJkqFl QNIebsaMrjdm9vT/4IwwHwYDVR0jBBgwFoAUcA9SATINxKfw+nMFyVWhmUwYJgAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxMjkwLzREODE2NkNDRjIw NTExRjBCRDI1ODYwNTRBNkY1NkJDL2NBOVNBVElOeEtmdy1uTUZ5VldobVV3WUpn QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0E5U0FUSU54S2Z3LW5NRnlWV2htVXdZSmdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx MjkwLzREODE2NkNDRjIwNTExRjBCRDI1ODYwNTRBNkY1NkJDL2NBOVNBVElOeEtm dy1uTUZ5VldobVV3WUpnQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBiNZshFyd3Y0PCR7LFaRBJplO5TENz3rbyaYYiW3cwdtgWChQ2qX+n059b6gyV kPFyUUw1pHDMOnTuvkMdu2qXlvr6jWm2FyMcJkeqfxgUnWdsqQesn5gkAezpE+tR sz1yHFSZfDFjGivCpw/kUfyENJY/2KkMiDQwcBwuAfEhhyOKcsmDU6oUeOqMmBEs ElBxy1YadXKqQNokbT7QoRJr8TSdD6vHlRn6XYxZ+Cs1v3R7Qyo/eHbwE8Zjm3rg YHVzt7EM06XxKvwqjaJFZur1dH1OllvVH3O8TRFGk7Rs1Xftj/KMOsBDBJoQt9D9 aL1EeFiMazl4CG/bIg3AnISD -----END CERTIFICATE-----Generated at Mon Apr 27 07:18:10 2026 by rpki-client