$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: ovvyW4vAudakfAMYmIOmkQ2m72+T2htKrERO8lMtiOw= Subject key identifier: 56:A4:47:D5:D1:BC:9B:D9:75:BA:9D:FC:AF:55:CA:67:B9:E3:F3:D3 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 027B Signing time: Sun 05 Apr 2026 01:26:50 +0000 Manifest this update: Sun 05 Apr 2026 01:26:50 +0000 Manifest next update: Sun 12 Apr 2026 01:26:50 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: RoWWX48oWWgG9BPWI21aiqEX2k/94NSzWXSj3oeBAyI=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Apr 5 01:26:50 2026 GMT Not After : Apr 12 01:26:50 2026 GMT Subject: CN=69d1ba5a-033d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:68:04:8b:5c:40:ac:fc:27:dc:72:88:7e: a4:3d:5e:9b:52:a8:1f:be:45:d8:7d:d6:28:d5:f0: 60:28:3a:b7:95:35:b7:00:47:f5:24:fa:10:8a:b2: 19:6f:e7:8a:4c:9e:51:30:3e:5d:f3:f3:5c:9f:cb: 9b:f5:a3:e8:0d:4b:e3:65:f4:1b:db:d7:89:67:67: 3d:f4:d2:d7:ab:6a:e1:81:01:5c:38:57:bc:87:09: 4b:d5:35:73:3c:e1:72:f9:ed:05:f6:e8:a9:4c:cf: 79:db:3e:7c:45:a6:08:cb:f3:38:e6:ea:e0:a9:7f: ce:8f:66:73:46:0f:cb:b9:9f:26:b3:59:c9:81:15: 77:61:b0:f7:b5:05:61:35:8d:01:4c:71:4c:24:5c: c6:b9:32:4f:3c:c9:0d:fa:0c:69:15:7b:9a:c1:c7: 45:df:1e:ac:ec:1d:ac:c6:60:f5:e3:2b:85:14:8c: 6c:1c:3f:44:c3:92:d5:51:8b:ea:5a:6d:ba:53:dd: ab:35:8f:a5:8d:77:87:7d:a6:ad:0b:f9:ea:92:bc: e0:f5:d6:b7:1f:10:02:a5:55:7e:28:b5:e4:83:22: 9d:0d:51:66:6b:ba:cc:b9:e1:44:95:82:73:fe:6b: 30:21:6e:01:76:61:7b:d2:9f:b8:07:fa:c1:3f:06: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A4:47:D5:D1:BC:9B:D9:75:BA:9D:FC:AF:55:CA:67:B9:E3:F3:D3 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a5:3c:98:c8:50:0f:20:e7:40:13:c3:9c:26:62:cb:2e:c7: c4:02:6e:ff:d0:16:08:e9:90:b5:0d:d9:71:12:e1:c4:1f:ec: 2f:e8:19:1d:94:0b:a9:74:93:5e:fd:63:30:b3:df:78:f9:95: 0e:7e:ea:f0:3d:70:6b:2d:ae:e5:14:f0:70:b4:fa:3a:74:93: 74:30:20:17:c0:4a:5b:17:a7:26:37:a6:d9:0e:56:84:0e:cc: fb:18:57:6c:ee:b2:63:f7:4c:fb:8a:48:13:14:6e:f0:e3:c7: c8:4a:8f:ee:fc:25:ca:0e:1a:f3:80:24:f5:da:63:bf:d9:35: 50:e8:e9:6e:ef:fc:fb:62:cb:8a:de:ab:39:75:7d:02:02:eb: c0:eb:bd:ac:1b:63:05:10:3a:3a:71:05:15:56:a5:7d:9d:2c: f6:ad:9b:77:e0:09:8d:c8:04:34:8e:78:b4:4c:65:73:5d:9d: 16:c9:88:1e:36:58:34:1d:d9:38:1a:82:50:84:f0:c0:5e:09: 28:56:cf:cd:cb:56:79:10:f0:6f:70:3c:63:d6:21:b8:ef:ce: cc:d4:ab:f0:10:a0:5c:e9:4f:36:33:67:7f:d6:a2:d9:da:b3: 35:bb:17:cb:23:96:6a:bf:39:40:7b:ac:ec:0c:ea:44:10:a4: 48:3d:3f:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjYwNDA1MDEyNjUwWhcNMjYwNDEyMDEyNjUwWjAYMRYwFAYD VQQDEw02OWQxYmE1YS0wMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTVoBItcQKz8J9xyiH6kPV6bUqgfvkXYfdYo1fBgKDq3lTW3AEf1JPoQirIZ b+eKTJ5RMD5d8/Ncn8ub9aPoDUvjZfQb29eJZ2c99NLXq2rhgQFcOFe8hwlL1TVz POFy+e0F9uipTM952z58RaYIy/M45urgqX/Oj2ZzRg/LuZ8ms1nJgRV3YbD3tQVh NY0BTHFMJFzGuTJPPMkN+gxpFXuawcdF3x6s7B2sxmD14yuFFIxsHD9Ew5LVUYvq Wm26U92rNY+ljXeHfaatC/nqkrzg9da3HxACpVV+KLXkgyKdDVFma7rMueFElYJz /mswIW4BdmF70p+4B/rBPwZefQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFakR9XR vJvZdbqd/K9Vyme54/PTMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKU8mMhQDyDnQBPDnCZiyy7HxAJu/9AWCOmQtQ3ZcRLhxB/sL+gZHZQLqXST Xv1jMLPfePmVDn7q8D1way2u5RTwcLT6OnSTdDAgF8BKWxenJjem2Q5WhA7M+xhX bO6yY/dM+4pIExRu8OPHyEqP7vwlyg4a84Ak9dpjv9k1UOjpbu/8+2LLit6rOXV9 AgLrwOu9rBtjBRA6OnEFFValfZ0s9q2bd+AJjcgENI54tExlc12dFsmIHjZYNB3Z OBqCUITwwF4JKFbPzctWeRDwb3A8Y9YhuO/OzNSr8BCgXOlPNjNnf9ai2dqzNbsX yyOWar85QHus7AzqRBCkSD0/uA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:34 2026 by rpki-client