$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: VECw4gRBqWl/B9bD0crOgiaGeg/KR3xeM2fBtol/iso= Subject key identifier: 50:F8:81:91:EB:BD:68:E6:D2:E3:C8:27:CF:F0:22:3C:C5:3A:FD:64 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A5D Signing time: Sun 26 Apr 2026 19:36:57 +0000 Manifest this update: Sun 26 Apr 2026 19:36:57 +0000 Manifest next update: Sun 03 May 2026 19:36:57 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: kdJ/lVDyr+9ZQLavRaW8ZkPQMpSHFQbd3Mzq8F+99Sg=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Apr 26 19:36:57 2026 GMT Not After : May 3 19:36:57 2026 GMT Subject: CN=69ee6959-1f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:75:0c:11:b3:52:7b:6a:0f:a2:a5:97:90: 11:ea:57:8c:27:e1:8a:80:b5:c4:07:8b:60:45:98: 4c:1c:c8:b3:f5:a1:83:8d:b9:90:97:56:36:6d:fa: 48:7b:b1:d6:2c:d6:13:ff:1c:85:62:6b:ea:83:ae: f8:27:25:53:e1:fd:44:d0:9b:59:fb:d7:69:22:db: 76:3a:fd:23:33:12:30:f0:ff:04:78:7c:8f:e8:9b: 5d:07:9a:17:9c:ab:f9:5d:59:f9:66:36:5e:9a:c6: 61:0c:37:94:78:bf:9e:35:71:ae:84:36:75:71:3f: 99:ee:3b:4d:00:ae:32:4f:d1:96:72:f0:34:5a:b2: 94:e0:85:95:e0:07:4d:0e:d1:da:b6:9b:7e:dd:a5: 96:09:6c:68:4d:d6:82:30:0a:30:1b:7d:4e:36:f7: a8:de:b7:06:bf:d5:30:b6:c6:df:7d:8a:5a:3f:77: f3:0d:8c:ea:85:b1:b3:a3:78:f5:2b:e1:38:b2:28: 46:77:ed:f2:6a:14:3b:80:a6:6c:3e:02:9f:ef:48: f5:1d:56:0b:63:65:d3:30:d3:bc:74:44:5c:53:bc: 34:6c:5e:92:3d:74:cc:9d:c1:18:d6:6e:51:e0:56: fc:6a:ac:04:59:4d:9d:20:53:ea:c2:cb:75:48:c2: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F8:81:91:EB:BD:68:E6:D2:E3:C8:27:CF:F0:22:3C:C5:3A:FD:64 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:25:56:1f:9d:ee:24:3e:58:76:1c:59:76:ab:fc:88:32:c2: 88:ac:9a:93:81:45:04:aa:c6:f0:d3:3c:50:e6:81:ee:c8:85: 1f:8d:aa:8c:90:52:3a:b7:56:a2:fe:e3:4e:7a:ed:c0:00:61: ed:9b:92:9a:34:de:00:b1:4f:c7:30:be:f5:00:18:5c:a8:58: 23:d4:5a:6a:7b:56:07:67:af:19:d5:4e:97:b1:ed:4e:39:35: 6f:69:1c:ff:1a:1f:4c:ef:70:4e:a9:c3:e0:22:67:3a:07:66: c2:52:18:05:67:cd:a6:06:30:df:9c:55:3d:db:09:66:07:2b: f0:a4:b5:ac:09:1b:20:e9:94:c0:8a:c3:4c:d8:9d:e5:18:03: 83:37:06:dd:46:c9:34:39:38:f7:e7:c5:50:94:d9:cb:51:a2: cc:cb:56:b5:58:a1:4d:85:09:2d:03:50:ea:b3:eb:25:fb:28: d1:29:dd:69:57:bd:65:6e:2e:1a:23:e9:54:41:aa:fd:76:07: e8:de:de:dc:62:5a:1f:86:3c:5e:7e:14:41:02:d5:56:38:ff: e6:53:e2:b5:af:7d:c3:16:3c:92:79:13:01:86:d5:63:82:0e: 70:40:8f:05:03:ab:d0:b5:b7:e7:38:d8:2f:5f:d7:29:4f:05: 48:27:51:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwNDI2MTkzNjU3WhcNMjYwNTAzMTkzNjU3WjAYMRYwFAYD VQQDEw02OWVlNjk1OS0xZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxR1DBGzUntqD6Kll5AR6leMJ+GKgLXEB4tgRZhMHMiz9aGDjbmQl1Y2bfpI e7HWLNYT/xyFYmvqg674JyVT4f1E0JtZ+9dpItt2Ov0jMxIw8P8EeHyP6JtdB5oX nKv5XVn5ZjZemsZhDDeUeL+eNXGuhDZ1cT+Z7jtNAK4yT9GWcvA0WrKU4IWV4AdN DtHatpt+3aWWCWxoTdaCMAowG31ONveo3rcGv9UwtsbffYpaP3fzDYzqhbGzo3j1 K+E4sihGd+3yahQ7gKZsPgKf70j1HVYLY2XTMNO8dERcU7w0bF6SPXTMncEY1m5R 4Fb8aqwEWU2dIFPqwst1SMJWywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFD4gZHr vWjm0uPIJ8/wIjzFOv1kMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZiVWH53uJD5YdhxZdqv8iDLCiKyak4FFBKrG8NM8UOaB7siFH42qjJBSOrdW ov7jTnrtwABh7ZuSmjTeALFPxzC+9QAYXKhYI9RaantWB2evGdVOl7HtTjk1b2kc /xofTO9wTqnD4CJnOgdmwlIYBWfNpgYw35xVPdsJZgcr8KS1rAkbIOmUwIrDTNid 5RgDgzcG3UbJNDk49+fFUJTZy1GizMtWtVihTYUJLQNQ6rPrJfso0SndaVe9ZW4u GiPpVEGq/XYH6N7e3GJaH4Y8Xn4UQQLVVjj/5lPita99wxY8knkTAYbVY4IOcECP BQOr0LW35zjYL1/XKU8FSCdRxg== -----END CERTIFICATE-----Generated at Tue Apr 28 08:40:19 2026 by rpki-client