$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: 4MURsyZM7lXVG7Tnuyq7+Q5nEjaAqBYTJLbB5oijPUc= Subject key identifier: E8:04:D2:AB:B6:B5:FC:93:B1:78:6A:8A:E6:23:3C:F5:5A:4F:17:D6 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0B6B Signing time: Thu 16 Apr 2026 19:05:24 +0000 Manifest this update: Thu 16 Apr 2026 19:05:23 +0000 Manifest next update: Thu 23 Apr 2026 19:05:23 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: +r74NALnZBPK4Z3XyFW03PhUun17lT5VShgUIVzO7yQ=) 2: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM=) 3: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: qJFLmW+cXJRTYpRYhxmf/kfGb1OFH5gs6tcdRPh5wTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Apr 16 19:05:23 2026 GMT Not After : Apr 23 19:05:23 2026 GMT Subject: CN=69e132f4-cfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:b4:23:bd:7a:42:f4:f7:04:06:00:50:d9: 38:e9:77:13:57:5d:a3:9c:42:0d:58:52:07:a1:b1: bf:6c:09:f8:94:99:4d:74:30:ee:f3:6d:50:8c:60: 80:64:a0:17:2c:75:f4:51:f5:8e:33:cb:63:84:07: 11:1e:1b:f4:99:0d:d5:99:a3:79:18:3e:84:9f:20: de:3e:d6:2d:d8:60:6b:b3:41:15:ec:8f:19:68:b9: 5d:0d:bc:8b:02:59:a4:03:e4:2d:b9:3c:76:5d:1a: c6:05:0b:40:25:ea:2d:ad:c8:81:43:bd:0d:ba:84: 2a:bf:1b:2e:ae:22:3c:1e:ae:52:a2:d4:f1:06:d8: 30:a7:26:c1:a4:e1:26:e6:62:00:60:0b:0d:c9:ae: 1d:75:c4:92:a9:9c:70:c0:de:ae:09:85:cf:15:b3: ac:c1:55:5d:53:ec:03:43:7f:62:7a:a4:a9:b9:2b: cf:57:af:9c:d7:7e:b0:d7:fa:fd:e9:9b:ac:04:41: 0f:9d:31:cb:46:fc:70:86:30:58:d9:75:09:c0:ea: e7:89:06:3d:08:c9:c8:d8:93:8b:6c:bb:4e:b6:65: 3e:7b:91:05:79:3e:e7:f9:ce:ca:34:a9:79:37:69: 8a:3c:3b:ff:00:f3:bc:2a:18:46:f7:78:cc:2c:3d: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:04:D2:AB:B6:B5:FC:93:B1:78:6A:8A:E6:23:3C:F5:5A:4F:17:D6 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:14:89:53:cb:ac:e9:ac:98:aa:9a:c5:c7:88:84:28:0c:99: 09:eb:a8:06:21:87:b2:d9:c2:21:ed:45:da:fa:e8:c1:57:36: 55:87:9a:0f:46:5c:a9:a6:8b:c0:cb:15:29:b9:8f:32:1a:90: f7:d1:86:3b:07:95:fa:03:1c:17:c0:f8:2c:62:57:14:e2:f3: ef:74:eb:02:0e:7a:dd:73:07:df:76:52:e4:85:c9:2c:01:4f: 05:63:12:27:1d:6c:5c:e2:e7:33:6a:6a:c4:66:7a:29:26:1d: b3:5c:66:80:55:58:90:76:40:6d:4d:6d:31:3a:ad:49:44:29: 92:82:81:bf:6a:23:e0:a8:90:31:c5:05:e9:c9:bc:6d:25:b3: 6c:1d:6b:24:07:40:ea:5f:04:1c:2f:93:0b:5e:e8:60:1d:04: 56:18:9b:5a:2e:48:b3:5d:1c:92:2f:3f:b8:92:16:d5:30:af: 62:cd:8e:70:c7:1e:ab:86:ff:b7:d5:75:80:6e:97:bd:0d:67: d3:36:79:e4:1f:b1:42:4d:8b:e9:30:e2:38:6a:b0:45:39:ab: ad:47:bf:ef:b6:17:bb:bd:9d:a4:06:98:35:f5:db:f7:95:56: 06:a5:48:9a:c5:46:59:f1:ee:68:e6:29:02:32:d6:b6:8a:aa: 61:d1:63:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjYwNDE2MTkwNTIzWhcNMjYwNDIzMTkwNTIzWjAYMRYwFAYD VQQDEw02OWUxMzJmNC1jZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAS0I716QvT3BAYAUNk46XcTV12jnEINWFIHobG/bAn4lJlNdDDu821QjGCA ZKAXLHX0UfWOM8tjhAcRHhv0mQ3VmaN5GD6EnyDePtYt2GBrs0EV7I8ZaLldDbyL AlmkA+QtuTx2XRrGBQtAJeotrciBQ70NuoQqvxsuriI8Hq5SotTxBtgwpybBpOEm 5mIAYAsNya4ddcSSqZxwwN6uCYXPFbOswVVdU+wDQ39ieqSpuSvPV6+c136w1/r9 6ZusBEEPnTHLRvxwhjBY2XUJwOrniQY9CMnI2JOLbLtOtmU+e5EFeT7n+c7KNKl5 N2mKPDv/APO8KhhG93jMLD2/6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOgE0qu2 tfyTsXhqiuYjPPVaTxfWMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAChSJU8us6ayYqprFx4iEKAyZCeuoBiGHstnCIe1F2vrowVc2VYeaD0ZcqaaL wMsVKbmPMhqQ99GGOweV+gMcF8D4LGJXFOLz73TrAg563XMH33ZS5IXJLAFPBWMS Jx1sXOLnM2pqxGZ6KSYds1xmgFVYkHZAbU1tMTqtSUQpkoKBv2oj4KiQMcUF6cm8 bSWzbB1rJAdA6l8EHC+TC17oYB0EVhibWi5Is10cki8/uJIW1TCvYs2OcMceq4b/ t9V1gG6XvQ1n0zZ55B+xQk2L6TDiOGqwRTmrrUe/77YXu72dpAaYNfXb95VWBqVI msVGWfHuaOYpAjLWtoqqYdFjfg== -----END CERTIFICATE-----Generated at Thu Apr 16 23:56:42 2026 by rpki-client