$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: L5EH2++5+KPM8xqplLS8gFzcBy8qbnm0nnBRtIsvsJw= Subject key identifier: 2C:8E:C5:88:75:16:FE:A6:46:11:C1:D2:DD:39:C7:16:63:9E:9D:EE Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 0122 Signing time: Sun 05 Apr 2026 05:12:52 +0000 Manifest this update: Sun 05 Apr 2026 05:12:51 +0000 Manifest next update: Sun 12 Apr 2026 05:12:51 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: zXqPkZwIsQrmacVp+EiHUnKDFj6ME8D5BvhlLlswmQg=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: 8/z43AfGGthVBc9cfR73JH6jugiVT0aL27yCo3q+XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Apr 5 05:12:51 2026 GMT Not After : Apr 12 05:12:51 2026 GMT Subject: CN=69d1ef54-00ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:35:28:9a:58:39:b3:90:8d:8e:c1:7b:01: 2e:5b:97:cd:74:0f:cc:ed:7a:fb:a3:12:39:2f:27: d1:34:4e:de:d1:2a:38:f6:f5:cb:a9:38:df:60:5d: 68:a1:8b:c9:7a:5a:71:cc:a2:95:62:b9:7d:34:25: a3:6c:49:65:e3:f8:ed:67:a7:61:82:44:83:35:37: f5:6a:3a:fa:e7:eb:37:93:48:9d:cc:e5:63:59:a1: 80:ad:95:28:13:af:a1:9c:64:a0:02:d9:8f:f8:4f: 97:86:7e:44:3c:62:d0:5c:d5:c2:48:62:b7:a7:76: e1:bd:b7:75:f9:c2:5d:fb:8a:c2:c2:81:6a:81:0e: 94:18:cf:52:0f:1c:d2:12:96:d7:85:11:4f:7e:06: c6:8e:58:a2:09:56:eb:c3:b1:c8:30:fa:ee:7d:78: 8e:7c:6c:7f:52:84:63:c8:1b:5f:55:67:fe:2b:17: 42:0f:a9:dc:28:c2:98:5a:48:fc:58:00:1b:22:64: 20:b4:14:44:0b:22:68:c2:fe:fd:6e:09:6d:c0:61: 08:c6:57:95:28:2f:67:89:0e:91:d4:b3:df:b5:e0: e9:35:88:2e:c9:9a:4f:ce:ff:38:c2:6b:c9:6f:35: d9:0b:72:38:53:e7:3b:70:55:12:97:50:e5:a0:b3: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:C5:88:75:16:FE:A6:46:11:C1:D2:DD:39:C7:16:63:9E:9D:EE X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:ed:91:32:58:c0:f8:ad:59:5f:73:66:a3:3c:30:d0:56: c9:71:ba:43:e9:b9:a6:c9:cd:fc:d4:07:39:b6:be:b8:9e:46: 68:b0:0a:d2:0e:d4:92:90:08:49:24:4e:9e:51:2e:5d:0a:ca: a0:44:18:cd:96:a5:6d:dc:45:ae:b7:02:d8:a8:90:60:df:b5: 2c:44:53:ec:71:03:bf:b9:8c:14:4a:63:36:69:60:e7:a4:97: 58:18:e7:d6:c2:23:3e:7e:c2:4d:7e:15:fb:c2:6e:5b:c2:c5: 4f:fc:70:32:4e:f0:de:12:64:82:12:b4:58:4a:a3:09:76:b4: 92:09:56:30:86:79:c7:0b:1a:7d:d3:78:b3:4d:8b:a6:24:fb: 2b:89:cf:b2:82:b2:04:2d:8e:f8:51:6c:47:5f:27:1d:22:de: cd:fb:f1:cc:2f:af:7e:9c:81:67:3a:d5:16:0a:95:cd:21:b4: ed:0a:6a:77:9a:eb:8a:6b:16:e8:e9:12:62:e5:5f:7c:84:7f: c0:32:4a:56:ba:31:27:bd:8b:ca:66:3b:8b:c0:0a:e9:d0:1e: 9c:ec:ec:a2:06:13:30:63:b5:6b:86:da:cc:68:94:2b:0b:4d: 75:e6:81:11:53:16:52:9b:58:c5:30:6f:20:bf:d5:82:db:7d: d3:b5:41:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjYwNDA1MDUxMjUxWhcNMjYwNDEyMDUxMjUxWjAYMRYwFAYD VQQDEw02OWQxZWY1NC0wMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma41KJpYObOQjY7BewEuW5fNdA/M7Xr7oxI5LyfRNE7e0So49vXLqTjfYF1o oYvJelpxzKKVYrl9NCWjbEll4/jtZ6dhgkSDNTf1ajr65+s3k0idzOVjWaGArZUo E6+hnGSgAtmP+E+Xhn5EPGLQXNXCSGK3p3bhvbd1+cJd+4rCwoFqgQ6UGM9SDxzS EpbXhRFPfgbGjliiCVbrw7HIMPrufXiOfGx/UoRjyBtfVWf+KxdCD6ncKMKYWkj8 WAAbImQgtBRECyJowv79bgltwGEIxleVKC9niQ6R1LPfteDpNYguyZpPzv84wmvJ bzXZC3I4U+c7cFUSl1DloLOVXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyOxYh1 Fv6mRhHB0t05xxZjnp3uMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfbPtkTJYwPitWV9zZqM8MNBWyXG6Q+m5psnN/NQHOba+uJ5GaLAK0g7UkpAI SSROnlEuXQrKoEQYzZalbdxFrrcC2KiQYN+1LERT7HEDv7mMFEpjNmlg56SXWBjn 1sIjPn7CTX4V+8JuW8LFT/xwMk7w3hJkghK0WEqjCXa0kglWMIZ5xwsafdN4s02L piT7K4nPsoKyBC2O+FFsR18nHSLezfvxzC+vfpyBZzrVFgqVzSG07Qpqd5rrimsW 6OkSYuVffIR/wDJKVroxJ72LymY7i8AK6dAenOzsogYTMGO1a4bazGiUKwtNdeaB EVMWUptYxTBvIL/Vgtt907VBMw== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:42 2026 by rpki-client