$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: Zv+SapfIB5CxtLm/yiyqnOBR6+IuN4aFFThNvUzbqQ4= Subject key identifier: A3:CF:1E:2B:C3:D5:7B:40:4F:75:91:88:BF:1C:1B:72:8B:AB:EC:D5 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 1887 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 187E Signing time: Sat 04 Apr 2026 16:24:17 +0000 Manifest this update: Sat 04 Apr 2026 16:24:16 +0000 Manifest next update: Sat 11 Apr 2026 16:24:16 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: gt/UhzugKzOQghC1qSBU2AaDP1yUYlXpEGITB/dZim8=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: l5RtQonTXNSBGH8zDtmLZh3WC3KxiK5dhZgCVOyckgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6279 (0x1887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Apr 4 16:24:16 2026 GMT Not After : Apr 11 16:24:16 2026 GMT Subject: CN=69d13b30-aeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:ce:b2:0f:2e:00:5f:c9:94:bf:c5:0f:3a: b8:be:e5:42:84:38:b9:69:53:71:eb:9d:86:42:23: 64:a7:b0:1e:2d:ec:02:19:74:91:fd:c4:9b:dd:3d: 4b:f1:aa:48:9f:73:69:e5:dc:e8:fb:2a:38:cd:4f: eb:35:91:22:c3:fe:02:b5:db:ee:ab:d6:f1:eb:f0: cd:a4:4a:4e:3d:d9:e3:59:e0:89:fb:56:ee:a3:95: c6:cd:7a:51:92:45:8b:17:7a:cc:b9:c0:ac:e3:97: fb:2f:c9:dc:71:41:33:2d:8c:6c:b1:66:51:f0:29: f1:39:f6:6b:a9:aa:4e:fa:50:76:af:50:e3:3b:e8: 2e:38:4f:51:9d:83:1f:1e:a3:80:83:49:07:f0:ab: 75:32:3a:cf:72:3f:5c:1c:e3:e2:ee:86:04:eb:5b: b4:23:b9:ac:8b:89:94:d1:03:84:c6:44:a8:ea:56: cb:b4:ae:61:8c:38:6a:fc:e6:54:6e:f5:63:8c:b7: fa:e6:be:6e:21:fd:a3:d9:65:c7:b7:01:30:ae:40: 00:b4:9a:99:a4:b4:39:66:72:dc:6b:da:2d:03:4b: 4f:73:9f:aa:8d:d9:d2:21:e9:17:86:f5:58:76:94: 27:42:e6:49:88:79:6c:2e:de:b2:19:ec:87:af:6a: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:1E:2B:C3:D5:7B:40:4F:75:91:88:BF:1C:1B:72:8B:AB:EC:D5 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:38:83:bc:35:4a:a8:a0:e4:72:2b:b7:5d:8f:a9:26:38:dc: ab:72:9c:1a:d5:cc:7f:c2:81:0b:cb:6c:5b:fe:ee:9a:59:3d: 4f:47:d1:fa:71:eb:45:fe:59:13:2a:08:ea:84:a0:3a:a2:91: 77:a8:8b:92:3b:a9:87:82:bf:54:46:df:85:f3:2a:bc:10:58: c1:f6:ff:03:d0:09:1b:8e:d3:59:bd:eb:23:30:14:e9:0b:fe: d8:09:e0:40:5d:4a:c0:02:c4:9d:b8:61:49:3f:6a:a2:55:aa: 6c:19:41:7d:0d:0d:98:c2:53:8d:7f:aa:ae:e7:f7:2c:71:3a: bd:96:e3:1d:fc:23:8f:1a:e5:98:c7:0a:c0:7f:61:d6:b1:7c: 02:3e:a9:8e:55:1c:18:a7:b3:c2:5e:e2:6a:dd:b2:8d:e9:68: c9:1d:26:8f:b1:35:18:2b:ce:a5:0e:7d:23:65:be:2a:9a:75: 16:e0:00:60:da:e5:b8:38:05:6e:32:31:a6:56:46:5f:77:ba: 21:4c:81:eb:34:77:5f:94:ea:88:fa:67:bc:66:30:2a:ff:a6: d1:f4:61:16:79:d7:a5:0a:1d:0a:36:bc:45:86:99:79:ad:9d: bb:b3:a2:b9:52:b6:43:f9:50:c2:a6:6e:ab:96:d2:32:87:84: ed:94:e7:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjYwNDA0MTYyNDE2WhcNMjYwNDExMTYyNDE2WjAYMRYwFAYD VQQDEw02OWQxM2IzMC1hZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsbOsg8uAF/JlL/FDzq4vuVChDi5aVNx652GQiNkp7AeLewCGXSR/cSb3T1L 8apIn3Np5dzo+yo4zU/rNZEiw/4Ctdvuq9bx6/DNpEpOPdnjWeCJ+1buo5XGzXpR kkWLF3rMucCs45f7L8nccUEzLYxssWZR8CnxOfZrqapO+lB2r1DjO+guOE9RnYMf HqOAg0kH8Kt1MjrPcj9cHOPi7oYE61u0I7msi4mU0QOExkSo6lbLtK5hjDhq/OZU bvVjjLf65r5uIf2j2WXHtwEwrkAAtJqZpLQ5ZnLca9otA0tPc5+qjdnSIekXhvVY dpQnQuZJiHlsLt6yGeyHr2rFiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPPHivD 1XtAT3WRiL8cG3KLq+zVMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqTiDvDVKqKDkciu3XY+pJjjcq3KcGtXMf8KBC8tsW/7umlk9T0fR+nHrRf5Z EyoI6oSgOqKRd6iLkjuph4K/VEbfhfMqvBBYwfb/A9AJG47TWb3rIzAU6Qv+2Ang QF1KwALEnbhhST9qolWqbBlBfQ0NmMJTjX+qruf3LHE6vZbjHfwjjxrlmMcKwH9h 1rF8Aj6pjlUcGKezwl7iat2yjeloyR0mj7E1GCvOpQ59I2W+Kpp1FuAAYNrluDgF bjIxplZGX3e6IUyB6zR3X5TqiPpnvGYwKv+m0fRhFnnXpQodCja8RYaZea2du7Oi uVK2Q/lQwqZuq5bSMoeE7ZTnZA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:45 2026 by rpki-client