$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: WT+8HSETJa5KZsShoUWkRcmYKWh3CwkBmqP1Tj/Mo88= Subject key identifier: A5:1B:DD:DE:BB:29:F6:09:E3:A7:29:68:87:C8:F1:A9:71:61:D6:0A Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: 0140 Signing time: Fri 17 Apr 2026 05:04:17 +0000 Manifest this update: Fri 17 Apr 2026 05:04:17 +0000 Manifest next update: Fri 24 Apr 2026 05:04:17 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: 0bSygxBs7AcJ+svFjEIRfpKwYesO+2BfYOlKPu7wQ8Q=) 2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: ej0+6PRzXsgl/obiA4CQWCET70nEM66QMDL6LuBaewE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Apr 17 05:04:17 2026 GMT Not After : Apr 24 05:04:17 2026 GMT Subject: CN=69e1bf51-6fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:59:47:9a:19:23:57:dd:8d:3c:6d:ac:64: ae:a7:40:e9:d4:ef:16:4e:e2:05:05:c0:24:f1:ff: 4d:29:4c:13:53:ed:1f:82:49:1a:d4:37:7c:40:ba: 4d:62:93:0e:86:56:49:29:7a:0c:0e:4c:00:38:40: 1d:71:67:57:92:00:c4:3d:16:78:5f:43:f6:0d:0f: ed:ab:0d:ff:6a:7c:8c:36:13:43:34:2b:a1:bf:77: af:2a:2a:2d:0a:e2:9a:9b:4b:a4:d0:a0:58:1c:df: 2b:3e:29:b0:32:74:3e:c6:fa:27:cb:20:f0:26:2c: 23:f8:72:da:17:bf:5a:fd:fc:6e:13:3d:c5:a5:cf: 1b:17:8a:7b:2f:bd:70:25:05:c7:07:3e:d2:1b:e8: a0:60:91:0c:7e:13:02:60:dd:3c:a4:eb:5b:84:6b: f9:e6:b3:bd:5d:f8:90:86:91:d2:f5:17:31:a1:d0: 03:4f:8b:ae:47:ec:3f:c1:e4:b8:81:d3:98:a2:49: 00:8f:6e:09:05:61:55:6d:a9:1f:35:e9:ba:2b:fc: 2f:33:4f:56:d6:63:08:27:34:81:08:5d:49:cc:02: 68:c4:4f:47:7c:e5:85:44:c5:33:85:c3:8e:ad:0b: c5:60:d5:45:50:b0:92:8c:09:d0:21:b5:37:1d:bb: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1B:DD:DE:BB:29:F6:09:E3:A7:29:68:87:C8:F1:A9:71:61:D6:0A X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:39:1e:e1:6b:35:53:1f:7d:c6:7a:ca:d0:51:5c:62:bb: fa:9b:5b:9e:34:bf:cd:2c:d0:8b:1c:e2:a2:b1:d2:4e:c3:e9: 81:e3:08:7c:f8:94:0b:f9:85:96:0c:20:5e:2a:55:0a:4c:85: a7:17:bc:7f:70:93:97:09:97:36:dd:f6:ba:c3:58:df:10:6c: 6e:24:52:71:46:02:48:dc:5a:a1:7c:00:a7:c0:5a:0e:84:1f: 8f:f2:96:0c:4e:2e:d0:7c:a5:01:0e:36:ed:4b:22:f7:5c:dd: 54:4f:e1:a2:4b:3e:a1:22:cd:fd:c7:d0:f0:1b:42:42:a1:0b: 18:e5:73:82:97:eb:0a:98:97:cf:4d:0a:5f:9a:1e:ec:c7:b5: f8:70:fc:24:fa:2d:4b:cb:dc:74:07:63:6c:7a:63:4d:f5:dd: ec:6b:16:26:b4:89:26:d8:49:cf:c5:6b:ca:eb:1a:17:d1:bd: 8b:f8:b1:fe:18:7d:67:e2:a8:ad:1f:be:50:c7:fc:3f:72:54: b1:b7:9e:3c:22:66:f8:7a:d5:59:f8:76:8a:10:76:0a:d9:a7: 77:4d:41:d7:e6:68:b7:60:8f:43:59:1c:48:56:90:b1:2f:09: fb:fd:2a:8a:ab:d2:f1:07:6a:8d:89:af:b5:1d:56:a0:62:35: 94:05:3b:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjYwNDE3MDUwNDE3WhcNMjYwNDI0MDUwNDE3WjAYMRYwFAYD VQQDEw02OWUxYmY1MS02ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLdZR5oZI1fdjTxtrGSup0Dp1O8WTuIFBcAk8f9NKUwTU+0fgkka1Dd8QLpN YpMOhlZJKXoMDkwAOEAdcWdXkgDEPRZ4X0P2DQ/tqw3/anyMNhNDNCuhv3evKiot CuKam0uk0KBYHN8rPimwMnQ+xvonyyDwJiwj+HLaF79a/fxuEz3Fpc8bF4p7L71w JQXHBz7SG+igYJEMfhMCYN08pOtbhGv55rO9XfiQhpHS9RcxodADT4uuR+w/weS4 gdOYokkAj24JBWFVbakfNem6K/wvM09W1mMIJzSBCF1JzAJoxE9HfOWFRMUzhcOO rQvFYNVFULCSjAnQIbU3Hbu7IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUb3d67 KfYJ46cpaIfI8alxYdYKMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcnM5HuFrNVMffcZ6ytBRXGK7+ptbnjS/zSzQixziorHSTsPpgeMIfPiUC/mF lgwgXipVCkyFpxe8f3CTlwmXNt32usNY3xBsbiRScUYCSNxaoXwAp8BaDoQfj/KW DE4u0HylAQ427Usi91zdVE/hoks+oSLN/cfQ8BtCQqELGOVzgpfrCpiXz00KX5oe 7Me1+HD8JPotS8vcdAdjbHpjTfXd7GsWJrSJJthJz8VryusaF9G9i/ix/hh9Z+Ko rR++UMf8P3JUsbeePCJm+HrVWfh2ihB2Ctmnd01B1+Zot2CPQ1kcSFaQsS8J+/0q iqvS8QdqjYmvtR1WoGI1lAU7nQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:17 2026 by rpki-client