$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: AiG2piJEkm8KMVcpO6EnoPCzUl/S2L/XDR0kmwaN1DU= Subject key identifier: 72:07:CE:9B:27:43:82:2B:31:39:6B:FC:65:71:F0:06:91:E1:88:69 Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: B2 Signing time: Fri 17 Apr 2026 06:52:06 +0000 Manifest this update: Fri 17 Apr 2026 06:52:06 +0000 Manifest next update: Fri 24 Apr 2026 06:52:06 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: 66wL8KJYpt8xa6JMF4csByuWuW7uVyIqio4g5k0zHiQ=) 2: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: srVyU53/knaGoLFgZUhr91Ugz+ECo7CZ9ZHflYwFi94=) 3: F563CE94E3DB11F0B70B396D576F56BC.roa (hash: 3H3far6TRs8sjzmCOZTOxwcy+RqKtlZ38lP4KPbvvIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Apr 17 06:52:06 2026 GMT Not After : Apr 24 06:52:06 2026 GMT Subject: CN=69e1d896-8fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:8a:8b:99:7b:98:cd:63:2e:00:79:ba:2c: 7d:c5:a3:45:0c:0e:2c:71:fe:e9:f3:e5:d7:b0:7c: 31:49:7a:98:47:22:7d:68:d9:5f:b4:10:53:f3:f6: 30:e2:7e:7d:ce:6d:a6:f1:af:79:e8:2c:65:11:6d: 67:7a:51:04:f9:e9:30:67:61:19:6d:d9:cf:e1:28: dd:e8:00:f6:70:37:fa:3e:f1:0c:46:df:45:63:54: 5e:19:af:1c:7c:37:7b:79:44:14:3f:06:81:61:2a: 91:7a:8f:a7:59:cf:96:83:d9:7b:1c:45:d1:f2:ef: 9b:0d:b6:38:42:42:02:68:f6:11:82:61:04:45:3b: d6:6c:06:e8:8c:fc:a9:ec:d3:c4:f9:fc:64:8b:0f: c1:f6:b7:f3:f9:45:94:61:cb:7e:02:a9:39:2a:50: ac:cc:7f:0c:8a:38:03:1f:3c:ed:29:0e:a7:97:57: d3:5a:4c:e4:78:15:95:ca:1a:dc:b2:82:49:f0:ab: 3d:a5:5e:f1:49:73:12:5e:81:c3:42:1c:b5:54:84: 9d:38:29:bf:3b:40:59:c0:2c:36:67:c9:94:c5:5f: 50:7b:46:5e:85:a8:11:d8:af:b1:00:b9:44:4e:cf: 19:ff:3e:92:80:6b:d6:a6:f0:96:4a:c2:ba:63:19: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:CE:9B:27:43:82:2B:31:39:6B:FC:65:71:F0:06:91:E1:88:69 X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b7:42:5b:70:6d:7d:4a:3d:b9:3c:ce:31:cd:75:09:da:c8: f9:1f:a7:67:7a:57:16:61:ee:b4:b4:89:0d:51:49:89:66:8f: 60:31:20:0a:05:2e:8a:ff:8c:13:06:09:aa:10:c6:aa:98:6a: ab:1e:e8:dd:3d:b9:e6:92:2d:a4:1e:27:8a:06:a1:ba:4f:2a: 37:c0:c5:7d:45:fa:af:7c:6a:f4:2f:c9:3e:33:78:3d:ea:cf: 9a:98:f1:6c:31:66:fb:98:7b:46:52:4d:4a:2f:af:a2:db:25: fe:22:e4:ce:a9:a9:f3:ac:ba:dc:e2:67:ff:e2:a2:2a:3c:38: f4:a9:b8:ef:53:fd:44:ae:27:1c:b2:df:34:c7:f8:4a:ea:df: b4:92:c6:41:36:ba:f0:70:b2:db:96:bb:b8:19:d8:aa:9d:b6: 0b:81:a3:9b:7d:dd:52:42:c8:3c:ec:6b:65:79:3a:0b:ff:0a: 55:60:1f:9d:23:63:fd:7d:e7:fa:6e:42:af:4a:82:f8:ee:2b: b3:7c:b3:9d:c3:f6:5b:31:91:39:93:04:8c:c1:73:d6:2d:31: 1a:da:41:0a:8f:59:62:b1:d3:41:68:aa:5d:c9:18:8c:a0:6c: 83:ab:98:ca:3b:d8:36:f8:1a:db:18:99:ad:bf:e8:bb:4d:f2: e9:93:dd:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCQjAxMTAvBgNVBAUTKDQ1QjE4RTIwOUVDRkREQTVDRUQ3OENGOUQ5ODEwRDYx MUU2RDQxMjQwHhcNMjYwNDE3MDY1MjA2WhcNMjYwNDI0MDY1MjA2WjAYMRYwFAYD VQQDEw02OWUxZDg5Ni04ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta6Ki5l7mM1jLgB5uix9xaNFDA4scf7p8+XXsHwxSXqYRyJ9aNlftBBT8/Yw 4n59zm2m8a956CxlEW1nelEE+ekwZ2EZbdnP4Sjd6AD2cDf6PvEMRt9FY1ReGa8c fDd7eUQUPwaBYSqReo+nWc+Wg9l7HEXR8u+bDbY4QkICaPYRgmEERTvWbAbojPyp 7NPE+fxkiw/B9rfz+UWUYct+Aqk5KlCszH8MijgDHzztKQ6nl1fTWkzkeBWVyhrc soJJ8Ks9pV7xSXMSXoHDQhy1VISdOCm/O0BZwCw2Z8mUxV9Qe0ZehagR2K+xALlE Ts8Z/z6SgGvWpvCWSsK6YxmwXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIHzpsn Q4IrMTlr/GVx8AaR4YhpMB8GA1UdIwQYMBaAFEWxjiCez92lzteM+dmBDWEebUEk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JCMC85RkZEQUI3NjMy M0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNhWE8xNHo1MllFTllSNXRR U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JCMC85RkZEQUI3NjMyM0ExMUYwQkY5RTFEMzZDNEY5QUUwMi9SYkdPSUo3UDNh WE8xNHo1MllFTllSNXRRU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7dCW3BtfUo9uTzOMc11CdrI+R+nZ3pXFmHutLSJDVFJiWaPYDEgCgUuiv+M EwYJqhDGqphqqx7o3T255pItpB4nigahuk8qN8DFfUX6r3xq9C/JPjN4PerPmpjx bDFm+5h7RlJNSi+votsl/iLkzqmp86y63OJn/+KiKjw49Km471P9RK4nHLLfNMf4 SurftJLGQTa68HCy25a7uBnYqp22C4Gjm33dUkLIPOxrZXk6C/8KVWAfnSNj/X3n +m5Cr0qC+O4rs3yzncP2WzGROZMEjMFz1i0xGtpBCo9ZYrHTQWiqXckYjKBsg6uY yjvYNvga2xiZrb/ou03y6ZPd/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 17:39:27 2026 by rpki-client