$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: OgGx3AXVq/Rdoe9wazES6d2fQSg4Qj5zWJ6mNpCZbHI= Subject key identifier: 51:1B:13:D6:2B:26:74:42:1E:F6:33:7A:A6:5F:2D:2C:B2:97:A1:33 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 09CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 09CA Signing time: Sat 04 Apr 2026 19:42:05 +0000 Manifest this update: Sat 04 Apr 2026 19:42:04 +0000 Manifest next update: Sat 11 Apr 2026 19:42:04 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: 3WQDv6Kuwc6QA4h+H1cRPUUG0De7Hg5bAiiWw4L6iEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2506 (0x9ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Apr 4 19:42:04 2026 GMT Not After : Apr 11 19:42:04 2026 GMT Subject: CN=69d1698c-b1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:f8:57:65:cf:74:60:c9:04:3b:04:2b:40: e9:59:3e:c1:e0:af:e5:27:52:ba:af:f0:e7:69:53: d6:d4:75:05:55:8c:17:eb:94:9d:58:b5:93:ed:d2: d4:60:f0:c3:ab:bc:37:6a:7b:0c:83:d2:e1:22:28: 3a:a1:5f:47:9b:8e:4f:65:dd:c1:0c:19:2f:9f:a4: fe:80:af:fa:eb:3c:0b:9e:45:e1:4b:72:7f:b3:b1: 4c:8b:f0:a3:51:cb:4d:81:a7:04:b3:2c:35:5f:f3: d4:fd:31:62:c3:2c:25:0c:ff:f8:e6:3b:89:9a:83: bb:b4:8e:2d:ce:2b:3a:e8:ce:4c:44:ba:89:86:40: 5e:07:1a:e4:cc:bd:fb:f5:21:2f:7c:17:98:6b:5b: a5:36:9a:b8:fb:ce:d4:be:bd:e8:3b:56:25:a2:a6: 93:bf:31:fe:63:f8:45:0d:eb:1f:ec:8f:b7:30:31: 44:8b:5e:3f:61:89:3d:15:b5:7a:ec:0d:57:a3:d1: 26:54:76:bc:8b:e9:26:e9:fc:9b:f8:33:26:7b:82: 32:d9:36:f0:2d:3c:60:1b:83:52:97:0f:15:f0:14: 4a:75:2d:28:0d:47:aa:c9:67:d8:40:8e:23:a6:d1: d3:bf:51:34:ae:09:45:d2:c8:82:3b:0c:82:bd:55: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1B:13:D6:2B:26:74:42:1E:F6:33:7A:A6:5F:2D:2C:B2:97:A1:33 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c8:5e:8a:15:67:9d:ea:ad:d0:65:fa:fe:08:7e:1c:74:5d: 18:1d:b0:f4:c8:df:0a:5b:ed:2e:26:8d:b4:a5:6a:18:1e:cd: 71:f6:50:50:94:ae:93:82:24:99:2f:5d:64:04:bd:c1:04:f5: 02:d3:10:83:d4:2c:e3:86:3f:8d:35:19:6b:25:50:04:64:5e: 86:29:36:3a:a1:a9:45:9c:3f:0c:3a:aa:aa:d0:8a:5d:8e:4b: e2:3b:d6:b4:cb:d9:58:fc:6c:51:fb:49:e5:11:93:11:4e:e1: d7:be:bc:22:5f:60:6f:9a:75:ea:65:50:6e:68:3a:3a:e0:83: 9e:c6:fb:c2:03:0f:83:00:68:a5:5a:45:a3:76:71:19:04:b9: ff:e9:d3:89:00:8f:9a:aa:c2:1e:27:7d:df:b4:bd:40:7c:d6: b6:62:76:89:1f:d6:db:cb:11:48:5c:09:c1:21:41:c7:1d:f9: 44:2f:da:f9:39:eb:6a:b7:d9:13:6c:1c:0d:6b:3f:9d:f9:47: 39:29:c9:36:da:71:35:50:63:e8:cb:73:16:21:d0:cd:97:51: cd:0f:fd:99:c4:70:b0:d2:cc:8e:0a:27:74:59:e3:c2:99:16: de:48:f0:bb:2d:f8:62:ba:79:eb:69:73:c8:9d:ea:a1:46:32: 20:44:b3:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjYwNDA0MTk0MjA0WhcNMjYwNDExMTk0MjA0WjAYMRYwFAYD VQQDEw02OWQxNjk4Yy1iMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn/4V2XPdGDJBDsEK0DpWT7B4K/lJ1K6r/DnaVPW1HUFVYwX65SdWLWT7dLU YPDDq7w3ansMg9LhIig6oV9Hm45PZd3BDBkvn6T+gK/66zwLnkXhS3J/s7FMi/Cj UctNgacEsyw1X/PU/TFiwywlDP/45juJmoO7tI4tzis66M5MRLqJhkBeBxrkzL37 9SEvfBeYa1ulNpq4+87Uvr3oO1YloqaTvzH+Y/hFDesf7I+3MDFEi14/YYk9FbV6 7A1Xo9EmVHa8i+km6fyb+DMme4Iy2TbwLTxgG4NSlw8V8BRKdS0oDUeqyWfYQI4j ptHTv1E0rglF0siCOwyCvVXl0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEbE9Yr JnRCHvYzeqZfLSyyl6EzMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABMheihVnneqt0GX6/gh+HHRdGB2w9MjfClvtLiaNtKVqGB7NcfZQUJSuk4Ik mS9dZAS9wQT1AtMQg9Qs44Y/jTUZayVQBGRehik2OqGpRZw/DDqqqtCKXY5L4jvW tMvZWPxsUftJ5RGTEU7h1768Il9gb5p16mVQbmg6OuCDnsb7wgMPgwBopVpFo3Zx GQS5/+nTiQCPmqrCHid937S9QHzWtmJ2iR/W28sRSFwJwSFBxx35RC/a+TnrarfZ E2wcDWs/nflHOSnJNtpxNVBj6MtzFiHQzZdRzQ/9mcRwsNLMjgondFnjwpkW3kjw uy34Yrp562lzyJ3qoUYyIESzfQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:02 2026 by rpki-client