$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: T3sLx/K8eli5mmaavIqSm9SykSisqpHvy8X7pdyZnJg= Subject key identifier: 5B:21:6E:BB:5D:34:3C:01:49:2C:DE:67:24:5A:15:49:E3:09:63:ED Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 038E Signing time: Sun 05 Apr 2026 00:33:11 +0000 Manifest this update: Sun 05 Apr 2026 00:33:11 +0000 Manifest next update: Sun 12 Apr 2026 00:33:11 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: jtybx5wHFuGqyEvqur1wJ1rrzJgHQFxFHri5Q68FeGs=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: JWhoa2NKg4RrDWpyShk965Wq7gv+qj3/iSfECHpocFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Apr 5 00:33:11 2026 GMT Not After : Apr 12 00:33:11 2026 GMT Subject: CN=69d1adc7-0e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:16:8c:0c:b4:56:bb:ad:b3:09:ab:a8:58: df:70:87:24:f5:8a:5a:a8:32:c0:68:0d:20:11:1e: 42:e2:25:fb:eb:f8:15:3f:ed:9e:f3:12:33:a3:26: be:a3:9d:9b:f3:26:a8:16:68:ce:af:a9:4b:04:0c: 33:6c:16:ad:37:bf:55:99:65:f8:12:51:62:cb:56: ad:0a:a4:2e:c5:56:40:bf:c5:6f:63:57:11:f3:29: 1b:f9:25:15:2a:d4:7a:22:8f:6a:c3:7f:48:36:01: c8:98:fc:01:f1:5e:a2:17:e1:cd:9d:08:c2:72:f3: c0:13:93:94:e5:40:a0:fa:78:11:0d:30:15:43:1e: aa:5a:92:26:6f:b8:c2:1b:d7:02:34:d9:d9:ec:36: f6:b2:a8:be:20:09:da:35:7e:d6:d6:b9:72:b1:68: fe:2f:0e:5d:69:b9:48:44:c1:a1:d2:06:e8:bc:aa: cf:ad:d6:c1:11:f9:a2:c3:59:5e:2f:78:ac:9b:d8: ce:7c:97:97:b3:55:72:87:b4:88:93:2b:f8:9a:d6: e9:1f:47:ae:89:24:24:b0:50:e5:aa:81:d5:02:cd: c9:ec:f0:7e:46:c1:d2:32:26:3d:51:c1:c0:fd:eb: 65:d0:17:15:06:c5:6f:1b:93:86:49:04:89:15:13: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:6E:BB:5D:34:3C:01:49:2C:DE:67:24:5A:15:49:E3:09:63:ED X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5b:e0:c5:93:1f:8d:00:29:47:74:64:7c:b8:df:27:87:a4: f5:10:2e:5b:01:78:06:fe:07:a2:fd:88:85:85:46:4c:24:00: 0d:68:be:d5:f9:72:5a:36:ff:f2:7e:c4:fa:4b:f1:a2:40:75: d9:46:63:f7:c4:de:e9:4f:f0:b1:e9:79:c6:cd:5f:05:31:18: 27:8b:62:c0:12:79:4c:1c:0b:7b:37:fa:a1:49:be:bc:d3:95: c3:46:d5:a7:b7:10:0c:88:3a:b7:f1:bc:28:80:49:db:81:d4: c0:61:34:bb:cb:23:cf:dd:34:12:6b:9d:87:a5:79:84:e4:5b: 15:45:64:3b:25:23:92:bf:84:f4:70:88:3b:26:f7:ee:ca:18: 68:e7:3e:99:25:9b:af:e9:21:e8:57:18:51:35:4d:b9:46:1d: 0b:3d:0e:7e:18:e2:36:11:23:96:79:99:9e:c2:9b:22:3d:67: 86:e7:53:96:3c:e7:62:18:a9:dc:f4:84:21:cd:27:dd:69:de: 15:aa:8d:00:b8:cd:4a:46:86:84:eb:1b:1a:3d:5b:43:ab:f0: 8b:82:06:13:89:d8:f2:1f:00:77:2a:df:10:10:87:c1:f4:f9: bf:cb:08:a2:ac:f7:1d:b0:c1:02:56:7d:97:9a:1d:78:e1:d8: 03:43:67:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjYwNDA1MDAzMzExWhcNMjYwNDEyMDAzMzExWjAYMRYwFAYD VQQDEw02OWQxYWRjNy0wZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl4WjAy0VrutswmrqFjfcIck9YpaqDLAaA0gER5C4iX76/gVP+2e8xIzoya+ o52b8yaoFmjOr6lLBAwzbBatN79VmWX4ElFiy1atCqQuxVZAv8VvY1cR8ykb+SUV KtR6Io9qw39INgHImPwB8V6iF+HNnQjCcvPAE5OU5UCg+ngRDTAVQx6qWpImb7jC G9cCNNnZ7Db2sqi+IAnaNX7W1rlysWj+Lw5dablIRMGh0gbovKrPrdbBEfmiw1le L3ism9jOfJeXs1Vyh7SIkyv4mtbpH0euiSQksFDlqoHVAs3J7PB+RsHSMiY9UcHA /etl0BcVBsVvG5OGSQSJFRPBjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFshbrtd NDwBSSzeZyRaFUnjCWPtMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc1vgxZMfjQApR3RkfLjfJ4ek9RAuWwF4Bv4Hov2IhYVGTCQADWi+1flyWjb/ 8n7E+kvxokB12UZj98Te6U/wsel5xs1fBTEYJ4tiwBJ5TBwLezf6oUm+vNOVw0bV p7cQDIg6t/G8KIBJ24HUwGE0u8sjz900Emudh6V5hORbFUVkOyUjkr+E9HCIOyb3 7soYaOc+mSWbr+kh6FcYUTVNuUYdCz0OfhjiNhEjlnmZnsKbIj1nhudTljznYhip 3PSEIc0n3WneFaqNALjNSkaGhOsbGj1bQ6vwi4IGE4nY8h8AdyrfEBCHwfT5v8sI oqz3HbDBAlZ9l5odeOHYA0Nn4w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:00:27 2026 by rpki-client