$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: mzbd+V530w/ZvrGXKrKmdOSVi/ChQEd3gVGNq4JKDfQ= Subject key identifier: E8:AB:73:3C:FD:3C:2D:B6:FD:A9:C0:25:CA:E9:BB:0E:D3:48:78:1B Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 05AA Signing time: Sat 04 Apr 2026 22:57:03 +0000 Manifest this update: Sat 04 Apr 2026 22:57:02 +0000 Manifest next update: Sat 11 Apr 2026 22:57:02 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: JP/XZsKdL5osY6DqWR7D8G9Rk+9soGz6bIAh30zNeV4=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: eSZTCVmtVODIa8LqXf1+TpmSShdpmD0QiKQVkQhAeZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Apr 4 22:57:02 2026 GMT Not After : Apr 11 22:57:02 2026 GMT Subject: CN=69d1973f-0a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:4c:9e:71:3b:c0:e9:f2:ff:bb:23:6a:36: c5:da:b0:fd:76:bd:a9:03:a1:50:cf:28:c3:7f:ad: 48:9d:e9:44:1e:67:76:c4:5e:2e:5c:aa:17:c1:24: 0d:7f:ad:ee:8c:dd:89:45:12:e5:0f:77:23:9a:16: 78:4c:ba:a7:e5:52:e5:c8:d6:fa:d2:78:73:d0:57: 7c:eb:17:32:fa:3b:38:b2:bf:c4:66:f9:92:d1:5b: 87:37:ff:a7:18:bd:09:a6:f7:c4:9b:a2:05:e3:d8: 21:cb:14:83:68:27:3c:19:3a:75:6e:bc:b5:ab:0b: bc:ca:9f:2e:85:97:59:c0:eb:30:4a:23:bc:e6:e9: 4a:4c:2d:9b:10:25:24:68:5d:ec:b4:36:34:4e:82: 18:e1:0a:7d:0d:06:b0:db:d1:08:f5:51:c9:3f:6c: 36:7a:74:4d:b8:40:cf:cb:ae:a5:a5:e7:df:aa:01: 23:5c:2d:c2:43:e5:5c:27:10:5d:31:a5:29:1b:7b: 9c:5a:6a:16:c8:4e:4d:03:1a:ab:58:62:80:c4:60: 31:3a:ae:77:90:22:4b:2a:44:f3:d5:4c:d6:c6:70: a3:c7:33:f5:f2:8d:95:29:b9:03:01:92:ca:cb:51: 42:9a:23:80:42:eb:ea:fe:1c:8c:b1:60:d6:97:7d: 80:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:73:3C:FD:3C:2D:B6:FD:A9:C0:25:CA:E9:BB:0E:D3:48:78:1B X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:88:18:ec:51:3e:94:8e:49:0c:41:d7:a1:ec:6f:52:27:53: 98:09:e4:f4:f2:99:db:ff:0e:e3:28:ad:9f:cc:75:21:4c:07: 86:cf:74:bc:a1:23:dd:5e:7e:43:c5:2c:4c:52:87:4c:48:77: d4:15:14:99:cb:9c:a8:6b:cb:26:fb:c7:1b:e4:21:a2:2c:7c: 78:25:bf:33:a9:56:bf:7a:5c:d7:69:b5:59:70:30:ce:c4:6c: 5f:dc:d5:d8:85:15:cc:a2:ae:a5:f9:26:3c:e5:58:84:84:30: 38:67:ed:ec:77:d4:13:92:2c:b6:65:b5:4c:fb:2c:90:ed:1d: 2b:30:ce:67:11:c6:5a:fd:42:7b:41:55:96:c8:05:ad:3a:3b: 30:a5:e2:f9:0e:73:1c:32:5f:6d:55:59:e5:2f:16:59:4e:0a: 9a:9b:77:8d:b8:5b:eb:f9:e3:bd:49:0d:ff:07:3d:15:5c:3e: 1a:4e:a8:14:aa:ec:4f:66:02:6d:2a:a2:b6:c1:a8:8b:12:60: ce:3e:8a:be:93:03:eb:b6:81:ad:3e:ea:96:d0:6f:d3:b3:8d: c7:a8:1c:a1:15:b4:7d:5f:01:c8:bc:20:09:58:6f:0d:8b:88: ad:92:6c:38:4a:31:6a:d0:b9:07:55:1c:fa:64:cd:b2:4c:1e: 18:72:06:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjYwNDA0MjI1NzAyWhcNMjYwNDExMjI1NzAyWjAYMRYwFAYD VQQDEw02OWQxOTczZi0wYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkt9MnnE7wOny/7sjajbF2rD9dr2pA6FQzyjDf61InelEHmd2xF4uXKoXwSQN f63ujN2JRRLlD3cjmhZ4TLqn5VLlyNb60nhz0Fd86xcy+js4sr/EZvmS0VuHN/+n GL0JpvfEm6IF49ghyxSDaCc8GTp1bry1qwu8yp8uhZdZwOswSiO85ulKTC2bECUk aF3stDY0ToIY4Qp9DQaw29EI9VHJP2w2enRNuEDPy66lpeffqgEjXC3CQ+VcJxBd MaUpG3ucWmoWyE5NAxqrWGKAxGAxOq53kCJLKkTz1UzWxnCjxzP18o2VKbkDAZLK y1FCmiOAQuvq/hyMsWDWl32A2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOirczz9 PC22/anAJcrpuw7TSHgbMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdogY7FE+lI5JDEHXoexvUidTmAnk9PKZ2/8O4yitn8x1IUwHhs90vKEj3V5+ Q8UsTFKHTEh31BUUmcucqGvLJvvHG+Qhoix8eCW/M6lWv3pc12m1WXAwzsRsX9zV 2IUVzKKupfkmPOVYhIQwOGft7HfUE5IstmW1TPsskO0dKzDOZxHGWv1Ce0FVlsgF rTo7MKXi+Q5zHDJfbVVZ5S8WWU4Kmpt3jbhb6/njvUkN/wc9FVw+Gk6oFKrsT2YC bSqitsGoixJgzj6KvpMD67aBrT7qltBv07ONx6gcoRW0fV8ByLwgCVhvDYuIrZJs OEoxatC5B1Uc+mTNskweGHIGGA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:24:45 2026 by rpki-client