$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: SWDQPpC1w58HVDakC38/naAUg2oDNmSH8JAmAOiNcXs= Subject key identifier: E6:CF:C0:4F:A9:C4:A3:69:BC:77:A5:76:44:EA:77:3D:2F:EC:38:85 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 09CF Signing time: Mon 06 Apr 2026 19:48:51 +0000 Manifest this update: Mon 06 Apr 2026 19:48:50 +0000 Manifest next update: Mon 13 Apr 2026 19:48:50 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: zU3bqrVnNQRV50JrJW+hVTynfxRM2plGnZkW5Bxs/GM=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: qEfH7eQ/C2gOZPU1jxCU+fijhvqs0pReImF1DTY96Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 19:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Apr 6 19:48:50 2026 GMT Not After : Apr 13 19:48:50 2026 GMT Subject: CN=69d40e23-a9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0e:ef:1b:7f:77:e3:19:87:51:1c:56:df:9e: a2:93:35:50:33:f5:e0:03:71:b1:c4:3d:ed:67:fc: 36:52:fb:cd:83:c7:60:b3:69:5e:60:1a:d3:a6:ce: 1f:99:a9:b6:a1:d2:08:18:75:56:33:4e:87:c9:ea: a3:0b:f1:32:70:1e:34:1d:b9:3e:b2:e3:44:53:f5: ac:16:86:58:8b:71:84:95:44:bd:b5:4b:a6:24:12: 4d:7c:67:d1:52:d9:51:1f:40:7e:04:f6:64:2d:9d: de:44:29:a1:d6:36:f9:5c:df:0b:70:78:be:1f:de: 6b:52:18:c4:68:ae:b0:42:eb:22:d9:47:50:e6:cd: 6c:f8:21:6a:95:1d:57:9e:56:2a:7d:24:81:36:48: d5:88:7f:66:a3:ad:c8:1f:fa:68:35:72:c9:89:9e: 93:fe:d8:a6:42:03:6d:8d:61:66:4d:d4:41:03:6e: 37:87:e2:8d:6b:12:a0:30:80:95:d0:9f:5d:46:2c: f6:24:3e:f1:42:d9:53:52:9a:51:5b:3d:df:13:81: e9:8b:40:0a:50:f8:57:1e:e6:30:b1:80:78:63:7a: bd:bc:38:39:e2:e5:6b:d0:a4:9e:20:81:36:d8:88: 58:98:8b:f2:a0:c1:a5:bf:6a:d7:50:3c:79:8c:2f: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:C0:4F:A9:C4:A3:69:BC:77:A5:76:44:EA:77:3D:2F:EC:38:85 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ab:f8:46:61:fd:b0:28:ff:80:59:9f:e3:12:2e:d6:cc:29: 9b:9a:aa:79:60:64:40:81:16:f2:b3:c1:35:e3:97:bd:b7:46: a6:77:fa:17:f5:bd:8a:4a:de:b2:f5:94:80:cd:1e:7d:c0:61: df:69:e1:f2:5f:41:e4:8e:f1:07:a0:df:4d:9a:7e:91:9b:70: 1e:27:8c:1f:8c:5e:e2:e5:52:b6:ca:68:72:dc:77:f7:bb:d2: 3f:67:f4:1a:db:52:a9:e9:8f:24:8a:dc:60:10:30:5e:89:5e: dc:ec:3d:46:ba:aa:5f:35:52:5e:f7:61:c1:0f:84:bd:65:d0: 33:8e:ee:3d:ca:bb:5f:e8:63:0a:7c:a9:fb:7a:a0:34:df:3b: 00:44:b7:89:c3:47:66:4a:2f:cc:03:58:31:b6:0e:a0:49:4e: c1:85:d8:26:64:dd:d7:92:f2:70:6c:3e:c1:f8:cc:c1:9b:af: ec:03:f2:d6:01:94:7d:d5:00:53:10:82:66:93:c8:d0:0c:28: 31:9e:fc:79:43:e8:7d:7d:56:7a:9f:61:3c:e0:0d:1e:c4:68: f0:18:1e:c4:9a:24:c1:60:2a:f4:bc:49:55:0b:49:50:f9:5a: a2:bf:f3:8e:c8:3a:c5:d6:7f:ac:ef:f8:d0:c9:a5:8c:87:da: 3d:fb:e6:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjYwNDA2MTk0ODUwWhcNMjYwNDEzMTk0ODUwWjAYMRYwFAYD VQQDEw02OWQ0MGUyMy1hOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5w7vG3934xmHURxW356ikzVQM/XgA3GxxD3tZ/w2UvvNg8dgs2leYBrTps4f mam2odIIGHVWM06HyeqjC/EycB40Hbk+suNEU/WsFoZYi3GElUS9tUumJBJNfGfR UtlRH0B+BPZkLZ3eRCmh1jb5XN8LcHi+H95rUhjEaK6wQusi2UdQ5s1s+CFqlR1X nlYqfSSBNkjViH9mo63IH/poNXLJiZ6T/timQgNtjWFmTdRBA243h+KNaxKgMICV 0J9dRiz2JD7xQtlTUppRWz3fE4Hpi0AKUPhXHuYwsYB4Y3q9vDg54uVr0KSeIIE2 2IhYmIvyoMGlv2rXUDx5jC9HLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObPwE+p xKNpvHeldkTqdz0v7DiFMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARKv4RmH9sCj/gFmf4xIu1swpm5qqeWBkQIEW8rPBNeOXvbdGpnf6F/W9ikre svWUgM0efcBh32nh8l9B5I7xB6DfTZp+kZtwHieMH4xe4uVStspoctx397vSP2f0 GttSqemPJIrcYBAwXole3Ow9RrqqXzVSXvdhwQ+EvWXQM47uPcq7X+hjCnyp+3qg NN87AES3icNHZkovzANYMbYOoElOwYXYJmTd15LycGw+wfjMwZuv7APy1gGUfdUA UxCCZpPI0AwoMZ78eUPofX1Wep9hPOANHsRo8BgexJokwWAq9LxJVQtJUPlaor/z jsg6xdZ/rO/40MmljIfaPfvmuA== -----END CERTIFICATE-----Generated at Wed Apr 8 10:26:08 2026 by rpki-client