$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft File: Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json) Hash identifier: 5HhgkxtxVDG/e7pSLG2bhNqViwO1g6yC8zrA3YC5Cs8= Subject key identifier: 28:ED:19:90:63:29:EA:83:11:58:61:86:BE:F0:9F:FD:F4:CF:2D:4A Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D Certificate issuer: /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft Manifest number: 8F Signing time: Wed 15 Apr 2026 07:04:51 +0000 Manifest this update: Wed 15 Apr 2026 07:04:50 +0000 Manifest next update: Wed 22 Apr 2026 07:04:50 +0000 Files and hashes: 1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: oI4KqlFtnpwACdPSjzgkeJpaHsyA110SHt87OmMAKf4=) 2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D Validity Not Before: Apr 15 07:04:50 2026 GMT Not After : Apr 22 07:04:50 2026 GMT Subject: CN=69df3893-09ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:b2:ce:9c:94:f5:de:a1:9b:0d:34:b3:e2: e5:b3:09:c0:cd:7a:fa:94:a8:f3:4a:88:c9:7a:bf: 2b:d5:bb:b6:4d:c4:ab:9c:10:f7:46:b7:24:ce:f3: 44:9a:ca:26:14:8f:1d:91:ec:f1:b2:20:47:66:b3: c8:7b:d2:79:2c:aa:ff:a9:83:ac:ca:7c:8e:cb:28: 82:ee:90:d2:76:9a:4d:d4:ed:62:6f:20:e1:a2:56: a3:a9:a4:45:fe:1c:fd:8b:2e:91:b3:24:bb:b8:c3: fa:93:bd:b2:63:0e:58:0d:17:02:59:58:7c:11:0e: b0:f2:8e:e5:ae:c4:ca:74:d1:8d:66:7b:c5:8e:eb: 87:51:4d:51:43:76:3d:26:66:d0:0f:86:a2:ab:91: 8f:10:3c:b2:f6:81:0b:1e:29:62:5a:ef:00:d4:ec: 75:05:1a:91:2f:da:da:6e:7e:51:37:05:7c:aa:77: 8c:0f:d0:c3:88:7c:85:e1:0f:ce:9d:e3:77:65:a1: be:01:7a:c6:57:a3:f8:b2:b8:3b:58:84:55:0d:a6: d1:69:b7:4f:9e:1a:ff:f6:47:5b:95:8f:90:3d:a0: 45:4b:85:91:d0:19:fe:fc:ac:3e:0f:4e:3c:38:47: 6d:13:26:0c:4d:c3:1d:e8:09:82:ea:67:1e:79:7a: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:19:90:63:29:EA:83:11:58:61:86:BE:F0:9F:FD:F4:CF:2D:4A X509v3 Authority Key Identifier: keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e3:a0:27:b8:6e:6f:88:62:e7:58:a0:ab:fd:44:db:59:81: c0:fd:b3:05:5d:5a:70:df:97:82:b0:41:a2:8f:e8:55:12:2c: 07:f6:77:c3:cf:f3:70:fb:72:bc:a7:85:94:0d:6a:e5:bc:87: 9a:f6:c4:5c:79:6a:f8:75:64:f1:d4:93:cf:91:f7:52:10:74: 78:70:c1:ce:55:ab:fe:39:f5:71:37:9d:f9:83:a8:f6:41:41: 95:4e:e8:a3:96:b0:15:30:c2:1b:b2:a7:ab:05:63:d8:0c:ee: 29:ec:97:2b:2c:f9:60:0d:fc:02:16:67:29:bd:66:81:06:1c: 67:30:06:9b:3f:d8:ac:16:a0:97:35:92:48:75:3a:3e:e8:06: 0a:7f:a0:47:32:a6:8d:78:bd:be:c9:b0:63:ad:0f:fb:0e:49: a4:bb:bf:a0:23:16:71:0c:82:14:6c:4f:31:cb:7a:7a:43:95: af:d9:e6:00:4b:e7:f1:8a:f1:ad:7c:89:59:33:7d:56:d3:b8: 77:d5:5b:4e:69:5e:41:bd:cb:be:e8:4b:64:ea:6e:7f:8c:fe: 9d:1a:75:12:be:dc:45:29:ba:0a:41:38:51:8e:a3:53:da:b6: ad:c8:05:cc:06:ad:f9:68:12:60:0f:8e:e1:46:8d:e2:8e:ab: ba:b2:a5:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRDUxMTAvBgNVBAUTKDNBQ0Y0NDVDRkNFQ0ZCQjI5MTNCMzQ3RDY3QTgyOEUw NDBBMTVBMUQwHhcNMjYwNDE1MDcwNDUwWhcNMjYwNDIyMDcwNDUwWjAYMRYwFAYD VQQDEw02OWRmMzg5My0wOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo76yzpyU9d6hmw00s+LlswnAzXr6lKjzSojJer8r1bu2TcSrnBD3RrckzvNE msomFI8dkezxsiBHZrPIe9J5LKr/qYOsynyOyyiC7pDSdppN1O1ibyDholajqaRF /hz9iy6RsyS7uMP6k72yYw5YDRcCWVh8EQ6w8o7lrsTKdNGNZnvFjuuHUU1RQ3Y9 JmbQD4aiq5GPEDyy9oELHiliWu8A1Ox1BRqRL9rabn5RNwV8qneMD9DDiHyF4Q/O neN3ZaG+AXrGV6P4srg7WIRVDabRabdPnhr/9kdblY+QPaBFS4WR0Bn+/Kw+D048 OEdtEyYMTcMd6AmC6mceeXrBAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjtGZBj KeqDEVhhhr7wn/30zy1KMB8GA1UdIwQYMBaAFDrPRFz87PuykTs0fWeoKOBAoVod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NENS81REI3NEIwQTVG QTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9PczlFWFB6cy03S1JPelI5WjZnbzRFQ2hX aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09zOUVYUHpzLTdLUk96UjlaNmdvNEVDaFdoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NENS81REI3NEIwQTVGQTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9PczlFWFB6cy03 S1JPelI5WjZnbzRFQ2hXaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAueOgJ7hub4hi51igq/1E21mBwP2zBV1acN+XgrBBoo/oVRIsB/Z3w8/zcPty vKeFlA1q5byHmvbEXHlq+HVk8dSTz5H3UhB0eHDBzlWr/jn1cTed+YOo9kFBlU7o o5awFTDCG7KnqwVj2AzuKeyXKyz5YA38AhZnKb1mgQYcZzAGmz/YrBaglzWSSHU6 PugGCn+gRzKmjXi9vsmwY60P+w5JpLu/oCMWcQyCFGxPMct6ekOVr9nmAEvn8Yrx rXyJWTN9VtO4d9VbTmleQb3LvuhLZOpuf4z+nRp1Er7cRSm6CkE4UY6jU9q2rcgF zAat+WgSYA+O4UaN4o6rurKlDg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:00:28 2026 by rpki-client