$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: iUupNzUN+ARArHJoctOzLrc9cEa3QmVL0/ItQRogb6U= Subject key identifier: 03:FD:7A:19:79:34:1E:8F:45:06:E8:90:3D:F8:72:1A:B1:AF:20:F0 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 0531 Signing time: Sat 04 Apr 2026 23:19:17 +0000 Manifest this update: Sat 04 Apr 2026 23:19:17 +0000 Manifest next update: Sat 11 Apr 2026 23:19:17 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: rSIrvDSq6MV9mANDh20Weq0OYM1G936XulvBTQAYe8M=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: PEJr+Mm39qdGaPmAkNHpAbI5gf+Z7mrX4P7uIMXjoD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Apr 4 23:19:17 2026 GMT Not After : Apr 11 23:19:17 2026 GMT Subject: CN=69d19c75-9234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:4f:32:16:01:f6:64:fb:6d:bd:85:36:46: f9:8c:96:2a:2c:0b:4c:4a:70:09:9c:68:d8:8e:cf: 0e:f2:ed:d4:f0:7d:06:08:15:90:b6:96:d4:18:4c: b8:b9:08:44:94:ae:76:3f:56:5f:d8:5b:3a:34:ec: 3e:00:04:f3:39:24:f5:f9:e3:5c:0c:97:60:09:86: 55:29:b3:f4:a0:67:32:d9:37:05:55:f4:c1:73:c5: d4:8d:0b:ed:44:e5:9a:de:4f:0e:07:14:85:82:58: 7e:99:87:7e:38:84:bf:c9:24:8e:2c:7c:fe:e9:67: 7b:79:22:7e:dd:76:41:13:a3:06:9c:d8:94:e5:d9: c5:d2:bd:00:81:30:bf:1b:ab:05:87:90:45:71:2c: c4:c6:8e:e9:53:cb:0c:0b:cb:bc:63:f7:56:c8:6c: c4:a1:a4:71:d5:1c:6e:e5:71:32:10:de:9f:cf:a3: c6:1e:dd:4e:bf:e8:4a:6f:b5:77:c1:89:e9:80:2f: 71:36:7c:e2:11:77:84:a9:e6:5f:4f:8c:e9:c0:11: a7:57:dd:28:16:70:b6:87:11:7f:cf:28:8f:68:b0: 36:cb:32:e5:6d:f1:d7:dc:e8:7a:11:02:6c:77:19: aa:f0:8d:92:34:25:eb:3c:4b:59:2b:48:5e:6b:0f: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FD:7A:19:79:34:1E:8F:45:06:E8:90:3D:F8:72:1A:B1:AF:20:F0 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:3d:90:16:ac:35:6d:38:4c:58:1d:27:2a:87:33:2f:16:04: db:71:9e:69:77:19:39:b3:cc:b8:e0:98:29:ca:21:11:02:ae: 74:ff:a2:85:7d:38:5e:59:14:93:68:a6:c8:d5:1e:6c:51:9b: 50:8c:b5:c3:41:d6:fa:38:ae:87:03:d2:01:1d:80:ec:c8:ba: 12:dc:c1:0d:c0:e3:fa:1b:3a:45:22:5e:ba:dc:a2:e0:20:e7: 98:ff:32:f3:c0:07:03:63:39:ea:96:03:61:8b:50:a0:e1:78: 41:8d:f3:bd:c7:3d:3f:5d:8c:d3:d3:64:df:2f:d4:6e:88:f4: f0:0f:2f:78:b9:e4:b2:fa:f6:64:70:c5:7e:5a:2e:18:24:cd: 7c:58:d7:7a:ab:e7:1c:11:1c:58:ce:88:2c:51:ef:2f:8f:42: e3:3f:44:78:86:da:b3:fa:f2:a1:a4:ec:1e:e1:32:15:bb:2f: 15:36:39:7e:a2:33:aa:63:08:9c:8b:10:c2:6b:88:ce:dd:7c: 9c:32:6b:46:25:5a:47:41:ca:65:b1:3f:6a:39:42:34:5a:fb: a2:19:a7:60:62:bc:65:51:be:f2:e2:1e:c1:24:f3:95:55:3d: 86:0e:9b:f6:71:ed:98:6e:8b:29:08:5f:b4:0c:10:50:cd:03: 9d:03:5d:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjYwNDA0MjMxOTE3WhcNMjYwNDExMjMxOTE3WjAYMRYwFAYD VQQDEw02OWQxOWM3NS05MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+BPMhYB9mT7bb2FNkb5jJYqLAtMSnAJnGjYjs8O8u3U8H0GCBWQtpbUGEy4 uQhElK52P1Zf2Fs6NOw+AATzOST1+eNcDJdgCYZVKbP0oGcy2TcFVfTBc8XUjQvt ROWa3k8OBxSFglh+mYd+OIS/ySSOLHz+6Wd7eSJ+3XZBE6MGnNiU5dnF0r0AgTC/ G6sFh5BFcSzExo7pU8sMC8u8Y/dWyGzEoaRx1Rxu5XEyEN6fz6PGHt1Ov+hKb7V3 wYnpgC9xNnziEXeEqeZfT4zpwBGnV90oFnC2hxF/zyiPaLA2yzLlbfHX3Oh6EQJs dxmq8I2SNCXrPEtZK0heaw8oBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAP9ehl5 NB6PRQbokD34chqxryDwMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOT2QFqw1bThMWB0nKoczLxYE23GeaXcZObPMuOCYKcohEQKudP+ihX04XlkU k2imyNUebFGbUIy1w0HW+jiuhwPSAR2A7Mi6EtzBDcDj+hs6RSJeutyi4CDnmP8y 88AHA2M56pYDYYtQoOF4QY3zvcc9P12M09Nk3y/Uboj08A8veLnksvr2ZHDFflou GCTNfFjXeqvnHBEcWM6ILFHvL49C4z9EeIbas/ryoaTsHuEyFbsvFTY5fqIzqmMI nIsQwmuIzt18nDJrRiVaR0HKZbE/ajlCNFr7ohmnYGK8ZVG+8uIewSTzlVU9hg6b 9nHtmG6LKQhftAwQUM0DnQNdgw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:37 2026 by rpki-client