$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: v6hIYhPyOpgpaJGJ4UPCCJUA0W6vI+mlWsWRZ3rnuJU= Subject key identifier: 2B:8A:8C:FC:20:10:EC:16:87:8C:64:90:0C:6E:A0:4A:CA:8F:88:8E Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0DA4 Signing time: Thu 16 Apr 2026 18:20:55 +0000 Manifest this update: Thu 16 Apr 2026 18:20:54 +0000 Manifest next update: Thu 23 Apr 2026 18:20:54 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: NLPiBeBrSR01qwDyEz8qEn+FXtfKSKDaBy22fC10Fpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Apr 16 18:20:54 2026 GMT Not After : Apr 23 18:20:54 2026 GMT Subject: CN=69e12886-4c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:0e:6b:36:61:70:5d:b6:eb:bb:9f:d5:03: fd:b2:af:5b:f5:1e:e0:1a:2c:02:42:43:8c:f7:dc: ed:23:b0:20:9a:1f:4e:ec:40:5a:45:1f:18:0f:83: 16:95:07:8d:b8:c0:60:91:65:1c:90:c2:15:1f:57: cb:2e:03:2e:62:6b:1c:85:fb:eb:ee:d9:c2:b8:28: 8c:ca:e5:2c:12:64:c7:af:bf:e2:22:6b:30:7f:f8: 62:b2:bb:fc:6a:fb:55:ae:cf:ea:1c:7e:6d:22:19: 64:0e:9a:5f:2e:c9:4a:20:77:86:d7:0b:0f:98:cf: ab:83:01:34:25:27:8b:b4:6e:99:9b:e8:1b:41:6e: cf:29:4e:70:00:b2:04:39:ac:61:8d:d5:ee:c2:25: 1d:fc:39:df:c4:9b:12:28:d3:a7:31:bd:cd:64:8a: 81:26:98:b0:c5:ff:d0:54:db:52:e2:9e:dd:d1:74: f5:b3:71:93:da:e6:f9:81:e8:f7:50:e0:21:04:7a: 66:6b:5e:15:4e:a9:de:cb:59:53:61:85:08:f0:24: f8:06:42:df:28:25:de:79:ef:90:41:e8:d6:9c:e5: ad:81:b7:77:81:e5:71:67:75:d3:eb:c0:00:a2:af: af:f7:d0:ba:4f:de:c0:57:bc:96:19:5b:5d:94:b4: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:8C:FC:20:10:EC:16:87:8C:64:90:0C:6E:A0:4A:CA:8F:88:8E X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b3:0b:0f:d5:b2:31:c4:37:77:06:19:96:f9:88:6e:6e:93: f1:43:1e:76:68:05:63:b1:f7:11:d8:5e:f2:44:3f:b1:7b:18: 16:cf:5d:b1:4c:2e:d4:53:46:02:b2:cf:e7:b5:1b:75:c9:86: df:74:98:24:16:4a:ac:2d:4e:5e:8f:53:9e:c9:57:09:35:3b: d3:ad:e5:af:e1:ca:47:73:50:d4:46:b5:f5:f5:42:2e:f5:71: a4:8d:7a:a9:8c:e1:4d:d7:45:1b:d4:32:d1:e8:f1:25:fc:6a: 5a:47:92:3a:c6:7e:79:47:a5:f8:1a:df:c1:2d:61:ce:bf:d5: b6:a6:ad:76:01:fa:47:92:a0:02:00:20:de:6f:8d:5f:88:9e: c2:ef:b4:83:d7:f3:25:15:e6:d4:83:69:3a:5f:11:4d:2e:56: cb:ec:6c:55:20:93:d3:45:ab:32:30:06:28:4a:6e:ee:e0:2c: 49:d0:14:35:75:33:4e:92:f1:c6:28:df:3b:cb:30:25:b6:92: 95:b1:da:9b:bb:0b:f7:02:21:ae:21:31:bc:1e:c3:4a:12:ec: e8:04:d6:cc:49:6d:e6:28:ca:90:b1:82:e1:96:88:43:72:c7: 91:d8:5c:4a:58:43:3b:bc:dc:2b:fd:aa:8b:ae:7b:d9:10:f1: 37:b6:26:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjYwNDE2MTgyMDU0WhcNMjYwNDIzMTgyMDU0WjAYMRYwFAYD VQQDEw02OWUxMjg4Ni00YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTkOazZhcF2267uf1QP9sq9b9R7gGiwCQkOM99ztI7Agmh9O7EBaRR8YD4MW lQeNuMBgkWUckMIVH1fLLgMuYmschfvr7tnCuCiMyuUsEmTHr7/iImswf/hisrv8 avtVrs/qHH5tIhlkDppfLslKIHeG1wsPmM+rgwE0JSeLtG6Zm+gbQW7PKU5wALIE OaxhjdXuwiUd/DnfxJsSKNOnMb3NZIqBJpiwxf/QVNtS4p7d0XT1s3GT2ub5gej3 UOAhBHpma14VTqney1lTYYUI8CT4BkLfKCXeee+QQejWnOWtgbd3geVxZ3XT68AA oq+v99C6T97AV7yWGVtdlLTSMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuKjPwg EOwWh4xkkAxuoErKj4iOMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaLMLD9WyMcQ3dwYZlvmIbm6T8UMedmgFY7H3Edhe8kQ/sXsYFs9dsUwu1FNG ArLP57UbdcmG33SYJBZKrC1OXo9TnslXCTU7063lr+HKR3NQ1Ea19fVCLvVxpI16 qYzhTddFG9Qy0ejxJfxqWkeSOsZ+eUel+BrfwS1hzr/VtqatdgH6R5KgAgAg3m+N X4iewu+0g9fzJRXm1INpOl8RTS5Wy+xsVSCT00WrMjAGKEpu7uAsSdAUNXUzTpLx xijfO8swJbaSlbHam7sL9wIhriExvB7DShLs6ATWzElt5ijKkLGC4ZaIQ3LHkdhc SlhDO7zcK/2qi6572RDxN7YmqQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:22:54 2026 by rpki-client