$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft File: k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json) Hash identifier: WN0iEjy8mWE1s4TArTB8CIUuGwY3Kao0rT5MJb4MfZY= Subject key identifier: A9:D0:BC:1A:16:4D:D7:CF:E1:1F:A4:DD:8F:0D:B0:6A:92:9A:2E:16 Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 Certificate issuer: /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft Manifest number: 27 Signing time: Tue 21 Apr 2026 08:38:34 +0000 Manifest this update: Tue 21 Apr 2026 08:38:34 +0000 Manifest next update: Tue 28 Apr 2026 08:38:34 +0000 Files and hashes: 1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: 2fYPe7sChPv+PKG0wdUUxz/M0vY6VZGLW5OUMUocFMw=) 2: 550ED6C61FC911F1858982443A3D8C67.roa (hash: ddkpPiY6ryXn1AzWQqH/VaePq3ZMXolf09Ngi2USLQo=) 3: 28E7910A1FC911F19CD315063A3D8C67.roa (hash: nm/1/orNWXaGNERTaZE87TxHEbHq71JZlG9+7BghPAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Validity Not Before: Apr 21 08:38:34 2026 GMT Not After : Apr 28 08:38:34 2026 GMT Subject: CN=69e7378a-4d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:e0:ef:ac:4f:fd:f2:75:a0:a8:ca:24:b8: b8:04:24:d1:0a:ff:f0:37:a1:df:c3:f0:77:5f:86: fa:a6:b7:7e:3e:2e:70:a1:ea:5a:22:e8:8b:da:80: 5a:28:46:bb:5b:72:08:99:35:0c:67:20:55:51:43: e4:27:1a:a0:fa:2f:a2:28:6e:93:e8:20:69:56:53: 38:81:77:20:bb:d6:1a:9e:f0:c2:19:ec:00:13:97: 8b:de:67:1a:c4:d0:2b:a1:44:7e:6c:97:0a:86:df: 61:55:1a:0a:dc:6a:52:8f:f0:83:52:6e:26:2b:72: b1:14:60:c9:72:f7:dd:3e:df:07:f3:3e:ed:4a:9e: 79:48:ee:e1:c1:a0:c0:98:4e:1c:9d:ca:6a:ec:d9: 7b:0a:ce:48:80:0f:f4:da:21:cf:6d:6c:7a:62:55: 73:47:70:35:91:50:18:b2:e3:b3:c9:a9:5b:63:da: c9:e9:6a:8d:3b:4a:61:8a:8a:da:6d:bd:85:b3:e9: 2b:b9:f3:3e:4d:17:34:b3:dd:ab:01:56:4e:0c:79: 43:12:77:21:53:33:f4:a6:d8:5e:29:2d:a6:7c:61: a7:cb:d2:b7:82:f1:ec:37:ce:b8:9c:c2:fc:cf:90: f2:4d:c2:be:fc:e1:d1:aa:24:7a:4a:d9:88:ee:72: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D0:BC:1A:16:4D:D7:CF:E1:1F:A4:DD:8F:0D:B0:6A:92:9A:2E:16 X509v3 Authority Key Identifier: keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b1:5b:55:2c:48:7c:3e:83:96:be:16:d1:9f:c8:66:3b:ee: 24:cd:41:ff:a0:4b:5c:ca:01:79:eb:11:c9:b7:28:70:b1:1b: 46:8a:13:90:49:7b:9d:8f:26:c5:70:37:80:17:a5:33:44:fd: 74:d8:3d:10:26:8d:c6:45:ca:4c:36:5e:02:b1:f7:10:9f:30: 61:a5:75:10:4f:bf:b3:16:74:87:26:55:0f:05:14:ae:b2:67: 93:f2:92:86:02:2a:79:3f:45:dc:41:f9:bb:36:b5:8b:8a:b7: aa:3d:47:e8:dd:74:d1:65:03:cf:8f:2b:e9:47:ea:65:b8:ff: 7c:1c:2d:d3:a2:8d:a5:88:b6:23:1e:b0:27:38:f1:8d:2b:95: 26:7e:58:a5:0c:2f:46:72:38:ec:ec:f7:f8:f0:74:6a:a2:b9: 61:2b:e7:0d:91:ab:3d:15:76:00:f7:5f:0d:3c:51:a6:20:d3: 4e:4a:99:cb:b4:a0:fd:5e:29:4e:bb:ca:98:69:10:d8:af:96: fe:20:c1:80:64:8c:37:a8:0d:8d:cd:72:24:31:10:a4:0b:01: eb:55:d9:f2:a6:85:be:15:75:e9:38:b4:81:fc:82:2e:32:45: c5:5a:8b:af:73:03:74:2d:b7:04:f2:30:f6:d1:5c:b9:9c:ee: 72:29:12:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoOTNDMDE5QkZENjA3OTlENzM2MjJDMTE4NUY0QTM5QkE1 RjVGOTIxNzAeFw0yNjA0MjEwODM4MzRaFw0yNjA0MjgwODM4MzRaMBgxFjAUBgNV BAMTDTY5ZTczNzhhLTRkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpaeDvrE/98nWgqMokuLgEJNEK//A3od/D8Hdfhvqmt34+LnCh6loi6IvagFoo RrtbcgiZNQxnIFVRQ+QnGqD6L6IobpPoIGlWUziBdyC71hqe8MIZ7AATl4veZxrE 0CuhRH5slwqG32FVGgrcalKP8INSbiYrcrEUYMly990+3wfzPu1KnnlI7uHBoMCY Thydymrs2XsKzkiAD/TaIc9tbHpiVXNHcDWRUBiy47PJqVtj2snpao07SmGKitpt vYWz6Su58z5NFzSz3asBVk4MeUMSdyFTM/Sm2F4pLaZ8YafL0reC8ew3zricwvzP kPJNwr784dGqJHpK2YjucsK/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqdC8GhZN 18/hH6Tdjw2wapKaLhYwHwYDVR0jBBgwFoAUk8AZv9YHmdc2IsEYX0o5ul9fkhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzQxMEI2NTM0MTA0 NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRjMklzRVlYMG81dWw5Zmto Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvazhBWnY5WUhtZGMySXNFWVgwbzV1bDlma2hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzQxMEI2NTM0MTA0NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRj MklzRVlYMG81dWw5ZmtoYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCKsVtVLEh8PoOWvhbRn8hmO+4kzUH/oEtcygF56xHJtyhwsRtGihOQSXudjybF cDeAF6UzRP102D0QJo3GRcpMNl4CsfcQnzBhpXUQT7+zFnSHJlUPBRSusmeT8pKG Aip5P0XcQfm7NrWLireqPUfo3XTRZQPPjyvpR+pluP98HC3Too2liLYjHrAnOPGN K5UmflilDC9Gcjjs7Pf48HRqorlhK+cNkas9FXYA918NPFGmINNOSpnLtKD9XilO u8qYaRDYr5b+IMGAZIw3qA2NzXIkMRCkCwHrVdnypoW+FXXpOLSB/IIuMkXFWouv cwN0LbcE8jD20Vy5nO5yKRJH -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:09 2026 by rpki-client