$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: RJmf9w2yPE+L34oD9SGQ4yZwpBU9t7BPuZ4Tx1N/23A= Subject key identifier: FF:7C:8D:AB:31:06:05:F3:6C:A5:95:A9:2A:BE:F4:43:5E:05:48:E9 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0E7B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0E64 Signing time: Mon 20 Apr 2026 14:41:33 +0000 Manifest this update: Mon 20 Apr 2026 14:41:32 +0000 Manifest next update: Mon 27 Apr 2026 14:41:32 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: nl0bHhb8kRIGv7clujEPuuSz7gzJaroJY5X6QbyjuX4=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3707 (0xe7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Apr 20 14:41:32 2026 GMT Not After : Apr 27 14:41:32 2026 GMT Subject: CN=69e63b1c-0bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:a2:6c:29:0a:e8:8c:f7:b8:59:83:db:6c: 1a:70:7b:b6:95:d0:d0:61:6f:39:4e:b2:c5:d0:8d: 72:08:4e:e4:b2:3d:00:54:82:49:20:1c:c1:1a:26: de:99:b6:ba:c2:95:b2:09:c6:92:ac:59:e1:6c:ec: 65:0d:df:f7:f3:ca:61:ba:b6:67:ae:fa:d3:8f:5d: 25:fb:1f:23:63:0b:11:85:75:49:46:6a:70:14:43: d3:14:15:67:70:cd:fd:5f:21:81:c7:65:e6:a8:ab: f6:c4:f3:ac:97:a6:6b:20:7f:47:bd:e4:5c:54:d0: d5:2a:14:0a:48:68:7b:4a:d4:5d:fb:90:6b:1b:b2: 9b:f1:b7:9f:d1:ab:c0:e4:65:a1:d7:d1:ac:95:ea: a0:46:62:50:77:37:f8:fd:d9:7b:9d:86:aa:37:17: f2:49:03:fc:66:58:c6:69:2f:be:91:38:41:af:63: d2:4b:35:52:eb:35:2e:20:69:c4:c9:9b:b0:c0:f9: bb:ac:37:f8:6d:4d:76:b8:40:e8:a3:38:0d:13:f2: 6a:d3:e5:bd:0b:7d:5a:85:29:8b:49:87:b1:9d:7a: 1d:0f:e8:d8:69:02:d6:23:4f:00:6b:f5:ee:4f:8e: 8e:75:ca:00:9c:c0:4b:79:93:9e:7f:c6:89:be:0a: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7C:8D:AB:31:06:05:F3:6C:A5:95:A9:2A:BE:F4:43:5E:05:48:E9 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:71:c5:50:f4:4f:e5:5c:44:e4:2c:8d:fe:28:d8:27:6d:78: 98:b6:ca:f6:36:15:98:9c:f1:46:12:29:89:9f:6f:a3:e4:70: 1e:16:53:fc:42:9d:ed:c1:36:1d:c0:66:56:67:9c:f6:60:6f: 0a:10:fb:e8:f0:73:98:3e:a6:84:f4:30:16:0a:44:04:69:d2: c2:94:57:bd:f3:23:37:b4:1d:d1:75:fa:5d:3d:2e:46:55:21: 69:11:4a:6f:d4:21:6c:a2:b4:7f:e8:29:79:9c:85:f5:aa:bf: e5:9d:d1:5c:1d:c5:6c:74:bf:f1:4d:7a:20:88:94:8d:06:16: 84:9e:95:2b:3e:39:58:ce:9c:62:cb:e7:8e:f1:b7:1d:63:a9: 63:55:27:af:41:98:aa:f5:4a:05:01:87:86:3a:2a:67:31:56: 37:0a:55:fd:66:fb:08:27:04:09:14:8c:56:2b:ac:fc:83:31: e8:5f:5d:bb:82:05:34:13:f0:37:a7:37:a9:aa:48:72:0a:05: 1b:d2:da:18:db:3a:7d:b1:d7:a1:76:65:82:8f:e2:09:6a:64: a4:bc:02:5c:a6:6a:17:1e:41:df:af:8e:38:7a:f7:a7:7c:55: 3f:86:d5:b5:d1:ba:d2:c3:db:db:4e:8f:d5:c7:f0:c3:d4:f1: 59:13:a0:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjYwNDIwMTQ0MTMyWhcNMjYwNDI3MTQ0MTMyWjAYMRYwFAYD VQQDEw02OWU2M2IxYy0wYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptyibCkK6Iz3uFmD22wacHu2ldDQYW85TrLF0I1yCE7ksj0AVIJJIBzBGibe mba6wpWyCcaSrFnhbOxlDd/388phurZnrvrTj10l+x8jYwsRhXVJRmpwFEPTFBVn cM39XyGBx2XmqKv2xPOsl6ZrIH9HveRcVNDVKhQKSGh7StRd+5BrG7Kb8bef0avA 5GWh19GsleqgRmJQdzf4/dl7nYaqNxfySQP8ZljGaS++kThBr2PSSzVS6zUuIGnE yZuwwPm7rDf4bU12uEDoozgNE/Jq0+W9C31ahSmLSYexnXodD+jYaQLWI08Aa/Xu T46OdcoAnMBLeZOef8aJvgqqAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP98jasx BgXzbKWVqSq+9ENeBUjpMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuXHFUPRP5VxE5CyN/ijYJ214mLbK9jYVmJzxRhIpiZ9vo+RwHhZT/EKd7cE2 HcBmVmec9mBvChD76PBzmD6mhPQwFgpEBGnSwpRXvfMjN7Qd0XX6XT0uRlUhaRFK b9QhbKK0f+gpeZyF9aq/5Z3RXB3FbHS/8U16IIiUjQYWhJ6VKz45WM6cYsvnjvG3 HWOpY1Unr0GYqvVKBQGHhjoqZzFWNwpV/Wb7CCcECRSMVius/IMx6F9du4IFNBPw N6c3qapIcgoFG9LaGNs6fbHXoXZlgo/iCWpkpLwCXKZqFx5B36+OOHr3p3xVP4bV tdG60sPb206P1cfww9TxWROgQg== -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:16 2026 by rpki-client