$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: XOBfP/uETRtAqYWJbbf7b/1bDdaE3OjmkqaBENMt5d0= Subject key identifier: 60:FD:7A:D7:B2:EE:17:EB:BA:99:DA:A3:71:E0:F4:DE:E5:1D:AD:AF Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 09C9 Signing time: Sat 04 Apr 2026 19:42:38 +0000 Manifest this update: Sat 04 Apr 2026 19:42:38 +0000 Manifest next update: Sat 11 Apr 2026 19:42:38 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: FNQeSyFLFqR9wUiR52S2nqscaqp6Byzu4DxSD954z8A=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: pZwvBdoaPR7hFViJEv+Bxbp/Jlp7eJmoUNr0vXBOYdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Apr 4 19:42:38 2026 GMT Not After : Apr 11 19:42:38 2026 GMT Subject: CN=69d169ae-aa63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:eb:08:aa:ff:77:d6:73:69:37:97:6e:51: cb:22:93:1f:8f:54:d5:92:d7:db:ba:1d:12:a7:4a: 9c:fe:0a:74:77:08:7c:92:5a:13:bd:14:61:a5:8d: 0f:11:2d:7d:64:ff:c6:fa:3f:71:71:b7:15:0c:a7: 0e:95:46:ec:dd:af:fa:ea:83:34:12:49:48:8a:4f: ef:9c:73:f9:3c:dc:2b:97:c1:e9:93:ca:06:30:6b: d9:0e:ad:db:b5:0b:f3:36:64:7d:e8:69:ca:48:51: 9a:6d:12:4e:d2:69:83:d4:cd:eb:c1:bd:0e:19:ab: e7:6f:a6:54:9a:89:86:54:c1:1b:74:2c:78:28:18: 4b:8c:42:77:7a:36:6e:7c:3b:4d:4c:c5:30:5b:42: 9d:45:f7:65:d9:a8:73:d2:d0:c7:7e:0b:f4:67:b7: 4a:af:df:72:28:27:ff:c7:94:ff:d4:32:4d:27:b2: 07:05:34:57:cf:77:5f:37:7b:61:16:c0:b2:e8:03: 8f:80:d2:52:b2:6b:bd:19:67:46:b5:15:d4:4a:55: 24:b2:17:6d:24:97:e0:54:c6:a2:99:20:82:65:4c: 7f:d5:6f:8d:7c:0c:f8:78:c3:f2:b3:52:78:67:45: 0c:e7:bc:84:78:fc:b2:8d:f5:b9:9b:34:58:d1:8d: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FD:7A:D7:B2:EE:17:EB:BA:99:DA:A3:71:E0:F4:DE:E5:1D:AD:AF X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d7:2d:0e:9b:f8:06:5d:b4:05:c9:e5:a6:2e:67:8c:f5:5d: bd:cd:6a:3f:61:8d:99:d5:92:71:16:14:48:e2:27:76:1e:60: 88:f5:e4:ca:b6:a4:11:8d:04:50:6d:bf:f0:28:63:84:82:0e: 38:82:0d:e7:74:47:2e:e0:05:f7:91:d4:5f:3e:24:8f:61:ad: 42:06:51:fc:f7:04:83:b5:fe:92:31:cb:8b:e3:20:3c:d9:1f: 44:9c:e4:a7:07:61:47:b4:f5:ab:8b:d1:c1:55:f5:92:6c:38: 80:4f:9b:d2:0e:80:ea:62:04:cb:63:75:63:90:7c:ba:b3:d0: 26:42:1c:fa:f5:ee:e6:26:fb:43:79:3f:af:8c:dd:f5:23:a3: e0:94:0a:c0:d7:05:9f:6d:e3:ee:fe:6b:cb:e0:10:36:41:78: f0:07:f0:f2:38:ff:bd:6a:d8:66:0f:4e:a6:db:48:e6:14:66: 90:7f:22:3d:cb:e9:48:d6:75:8c:8a:a8:5f:15:94:e4:b2:b8: 9b:7b:89:ea:a5:30:b1:9c:cc:68:90:2e:48:86:97:59:e7:b9: bf:e2:80:7c:7f:de:9d:ff:24:3f:49:c6:8d:b7:86:68:a7:17: 45:79:91:ee:e9:17:83:3e:dc:bd:59:65:a8:1e:ac:69:9b:2b: cd:26:29:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjYwNDA0MTk0MjM4WhcNMjYwNDExMTk0MjM4WjAYMRYwFAYD VQQDEw02OWQxNjlhZS1hYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA033rCKr/d9ZzaTeXblHLIpMfj1TVktfbuh0Sp0qc/gp0dwh8kloTvRRhpY0P ES19ZP/G+j9xcbcVDKcOlUbs3a/66oM0EklIik/vnHP5PNwrl8Hpk8oGMGvZDq3b tQvzNmR96GnKSFGabRJO0mmD1M3rwb0OGavnb6ZUmomGVMEbdCx4KBhLjEJ3ejZu fDtNTMUwW0KdRfdl2ahz0tDHfgv0Z7dKr99yKCf/x5T/1DJNJ7IHBTRXz3dfN3th FsCy6AOPgNJSsmu9GWdGtRXUSlUkshdtJJfgVMaimSCCZUx/1W+NfAz4eMPys1J4 Z0UM57yEePyyjfW5mzRY0Y2WWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGD9etey 7hfrupnao3Hg9N7lHa2vMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApNctDpv4Bl20Bcnlpi5njPVdvc1qP2GNmdWScRYUSOIndh5giPXkyrakEY0E UG2/8ChjhIIOOIIN53RHLuAF95HUXz4kj2GtQgZR/PcEg7X+kjHLi+MgPNkfRJzk pwdhR7T1q4vRwVX1kmw4gE+b0g6A6mIEy2N1Y5B8urPQJkIc+vXu5ib7Q3k/r4zd 9SOj4JQKwNcFn23j7v5ry+AQNkF48Afw8jj/vWrYZg9OpttI5hRmkH8iPcvpSNZ1 jIqoXxWU5LK4m3uJ6qUwsZzMaJAuSIaXWee5v+KAfH/enf8kP0nGjbeGaKcXRXmR 7ukXgz7cvVllqB6saZsrzSYpzg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:57 2026 by rpki-client