$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: Ua2HQXacapExomdOLyGfU14sUtAJtZUEenycx1tJv1g= Subject key identifier: 59:00:EF:FD:29:EF:A5:50:B3:9A:1D:37:82:C8:71:71:4B:CC:91:98 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 011E Signing time: Sun 05 Apr 2026 05:10:01 +0000 Manifest this update: Sun 05 Apr 2026 05:10:01 +0000 Manifest next update: Sun 12 Apr 2026 05:10:01 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: f7objKet0tEy1s8NzvWtdgLrUgUR9Ot8qLvFoplxgU8=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Apr 5 05:10:01 2026 GMT Not After : Apr 12 05:10:01 2026 GMT Subject: CN=69d1eea9-c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:5a:f8:bd:eb:c3:b8:2a:2e:7c:ff:c3:51: c3:99:49:a6:cc:e9:8c:67:0a:ef:d1:01:95:83:1f: e3:07:8e:28:a5:ab:d7:c0:bf:10:72:71:e4:45:c7: 0f:09:5a:f8:ed:90:42:1f:da:6c:8f:a4:7c:4a:29: 08:cd:c7:c4:1f:97:92:5d:1c:e2:70:96:61:e4:d3: 3b:7e:a5:ee:61:91:bc:9b:12:73:b6:1d:69:5e:ac: 52:46:f6:6f:ef:78:63:08:ca:4d:81:6f:92:e2:e4: 10:ca:a8:4e:ee:9a:01:b8:25:0c:1a:91:31:2d:8b: 34:f1:e7:fe:f7:e7:e9:d7:72:84:6e:63:54:e7:fd: a9:36:d6:1c:1a:3e:14:14:df:e3:ca:59:44:dc:a6: 59:8c:f3:89:74:98:9e:d7:ac:50:3e:e9:a0:77:95: 2b:80:73:ab:40:1c:2e:fd:9a:52:cb:ab:24:37:57: 42:98:b6:6f:af:89:8a:8b:10:45:90:e8:8b:de:47: b3:a9:9a:a3:4e:98:09:3b:5d:aa:7f:fb:ec:d8:bf: 72:3e:d6:81:65:b1:4d:67:b4:d3:4a:f3:36:82:85: de:ae:2c:b5:fc:6d:b0:21:8a:53:6a:60:0f:ef:a2: 3b:7e:e0:e0:79:40:90:6e:16:ff:08:20:d9:a0:18: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:00:EF:FD:29:EF:A5:50:B3:9A:1D:37:82:C8:71:71:4B:CC:91:98 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ea:79:53:89:19:14:ca:cf:26:50:b6:4d:e9:de:22:d2:b1: 7f:80:58:78:90:58:58:5d:d6:ce:95:8e:b7:69:8f:f5:dd:9a: 90:2e:03:5c:98:bd:96:bf:e0:c5:6f:fb:12:fb:43:d8:36:b0: a1:f1:5c:46:90:92:bc:48:25:7b:3e:d5:6e:1e:10:02:4c:30: 83:a2:51:4e:ed:1d:11:ca:cd:ea:aa:af:b7:76:15:41:6d:18: ee:0d:fa:a4:f7:1f:77:20:ae:22:03:43:cb:6a:54:ea:75:6f: 24:d3:10:4a:1d:52:27:e8:2e:3b:34:73:18:2b:89:d2:07:d5: 3a:2f:8b:28:b1:72:4e:ee:da:88:78:cc:43:d4:38:27:20:ec: 94:72:2a:11:71:d6:0f:bb:79:3e:e6:19:b4:5d:25:14:7b:14: 26:0f:34:a5:d2:5c:13:7b:d0:fa:ba:e4:d1:c6:fb:68:4a:d9: 32:a9:6f:db:50:ad:61:5b:24:66:17:6d:3a:eb:02:7d:0b:da: 5b:0d:70:fb:db:41:17:f5:8e:3d:3d:3a:39:1b:03:52:7c:0b: 38:06:de:a0:92:7d:e8:bc:c6:7d:42:44:66:69:20:ce:45:f4: 12:39:ec:74:58:90:5b:90:3b:4e:67:03:16:70:8e:63:66:39: 58:cb:88:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD MUQ1QjgzM0IwHhcNMjYwNDA1MDUxMDAxWhcNMjYwNDEyMDUxMDAxWjAYMRYwFAYD VQQDEw02OWQxZWVhOS1jM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRVa+L3rw7gqLnz/w1HDmUmmzOmMZwrv0QGVgx/jB44opavXwL8QcnHkRccP CVr47ZBCH9psj6R8SikIzcfEH5eSXRzicJZh5NM7fqXuYZG8mxJzth1pXqxSRvZv 73hjCMpNgW+S4uQQyqhO7poBuCUMGpExLYs08ef+9+fp13KEbmNU5/2pNtYcGj4U FN/jyllE3KZZjPOJdJie16xQPumgd5UrgHOrQBwu/ZpSy6skN1dCmLZvr4mKixBF kOiL3kezqZqjTpgJO12qf/vs2L9yPtaBZbFNZ7TTSvM2goXeriy1/G2wIYpTamAP 76I7fuDgeUCQbhb/CCDZoBhCEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkA7/0p 76VQs5odN4LIcXFLzJGYMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF ZHNVeTZzR01LU2ZCMWJnenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANep5U4kZFMrPJlC2TeneItKxf4BYeJBYWF3WzpWOt2mP9d2akC4DXJi9lr/g xW/7EvtD2DawofFcRpCSvEglez7Vbh4QAkwwg6JRTu0dEcrN6qqvt3YVQW0Y7g36 pPcfdyCuIgNDy2pU6nVvJNMQSh1SJ+guOzRzGCuJ0gfVOi+LKLFyTu7aiHjMQ9Q4 JyDslHIqEXHWD7t5PuYZtF0lFHsUJg80pdJcE3vQ+rrk0cb7aErZMqlv21CtYVsk ZhdtOusCfQvaWw1w+9tBF/WOPT06ORsDUnwLOAbeoJJ96LzGfUJEZmkgzkX0Ejns dFiQW5A7TmcDFnCOY2Y5WMuIAQ== -----END CERTIFICATE-----Generated at Mon Apr 6 15:24:20 2026 by rpki-client